Privacy Policy

Who we are

Veloura Patisserie (“we”, “us”) runs this website to showcase our patisserie, accept online orders where enabled, and receive bespoke event inquiries. This policy describes how we handle personal information when you use our site and services.

Information we may collect

• Account and profile data if you sign in or we create records for you (for example via our database provider, Supabase).
• Order and checkout data such as name, email, WhatsApp number, cart contents, fulfillment choice (pickup or delivery), and payment-related references. Card details are processed by our payment provider (Stripe); we do not store full card numbers on our servers.
• Custom inquiry data when you use the enquiry form on Custom Orders (name, email, event details, and your message).
• Technical and usage data such as IP address, device and browser type, and pages viewed. We may use Vercel Analytics to understand aggregate traffic to improve the site.

How we use information

We use personal information to:

• Process and fulfil orders, and communicate about them.
• Respond to bespoke inquiries and coordinate events.
• Operate, secure, and improve our website and services.
• Meet legal, accounting, and regulatory obligations where applicable.

Service providers

We rely on trusted processors who host or support our operations, including Supabase (database and authentication), Stripe (payments), Resend (transactional email such as order or inquiry messages), and Vercel (hosting and analytics). They process data only as needed to provide those services and under appropriate agreements.

Cookies and similar technologies

We use cookies and similar technologies required for the site to function (for example session or security cookies from our hosting and auth stack). Analytics may use cookies or similar signals in line with our analytics provider’s documentation.

Retention

We keep personal information only as long as needed for the purposes above, including legal, tax, and dispute resolution requirements. Retention periods vary by record type (for example orders versus marketing logs).

Your rights (South Africa)

Under the Protection of Personal Information Act (POPIA), you may have the right to request access to, correction of, or deletion of certain personal information we hold, subject to lawful exceptions. To exercise these rights or ask questions, contact us via the enquiry form on Custom Orders.

Security

We implement reasonable technical and organisational measures to protect personal information. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and protect your devices.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after changes constitutes acceptance of the updated policy where permitted by law.

Contact

For privacy-related requests, use the bespoke celebrations enquiry form or write to us at our store.