Privacy Policy
Last updated 19 September 2026
This policy explains what personal data Velora collects when you browse, order or create an account, why we collect it, who it is shared with, and the choices you have. We aim to handle personal data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022.
What we collect
- Account details: your name, email address and password. Your password is handled by our authentication provider and stored only in a hashed form; we never see it.
- Order and delivery details: the name, phone number and delivery address you give us, the items you order, and the payment method you choose.
- Things you save: addresses in your address book, your wishlist, your bag, and your preferred payment method (only the method, never card details).
- Measurements: only if you use the Size & Fit Advisor and choose to save them to your profile.
- Basic technical data: when you visit, our servers and hosting providers record standard information such as your IP address and browser type, used for security and to keep the site running.
Your fitting photos
If you use the photo option in the Size & Fit Advisor, the photo is analysed on your own device in your browser. It is never uploaded to our servers or stored. Only the measurements you confirm are sent to us. The photo option is not offered for children's sizes.
Why we use your data
We do not sell your personal data, and we do not use it for advertising or profiling.
- To take, deliver and support your orders, including sending you an order confirmation with a private link to track it.
- To run your account, including sign-in, saved addresses and wishlist.
- To keep the store secure and to prevent fraud and abuse.
- To meet our legal, tax and accounting obligations.
Card payments
If you pay by card, you enter your card details on PayHere's secure payment page, not on Velora. We never see or store your card number. PayHere tells us whether the payment succeeded and gives us a payment reference. Cash on delivery payments are collected by the courier.
Who we share it with
We share personal data only with the services that help us run the store, and only what each one needs:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database and account sign-in | Account and order data |
| Render | Website hosting (Singapore) | Technical request data |
| Resend | Sends our order emails | Your name, email address and order summary |
| PayHere | Card payments | Your name, contact details and order total, plus the card details you enter on its page |
| Couriers | Deliver your order | Your name, phone number and delivery address |
Where your data is processed
Our providers process data in Asia and may process it in other countries, including outside Sri Lanka. Where we can, we choose providers that protect personal data to a high standard.
How long we keep it
We keep your account data for as long as you have an account. Order records are kept for as long as we need them for accounting, tax and legal purposes, even if you close your account. Guest bags and wishlists are tied to a cookie in your browser rather than to a named person, and we may remove old ones.
Your rights
You can ask us to tell you what data we hold about you, to correct it, to delete it, or to stop using it in certain ways. You can change your name, phone number, addresses and password yourself under My Account. For anything else, email atelier@velora.xpersivelabs.com. If you are not happy with how we respond, you may complain to the data protection authority in Sri Lanka.
Security
The site is served over HTTPS, customer data can only be read by the customer it belongs to, and payment card details never reach our systems. No online service is perfectly secure, so please use a strong, unique password.
Children
We sell clothing for children and teenagers, but accounts and orders are for adults. We do not knowingly collect personal data from children.
Changes and contact
We may update this policy and will change the date above when we do. Questions about privacy? Email atelier@velora.xpersivelabs.com.