Privacy Policy
This policy explains what personal data Venara ("we", "us") collects when you use Venara , why we collect it, and what rights you have. We are the data controller for that information.
We handle your data under the UK GDPR and the Data Protection Act 2018.
What we collect
- Order information — name, billing and delivery address, email, phone number, and what you bought.
- Payment information — processed by our payment providers. We never see or store your full card number.
- Account information — if you create an account, your login details and order history.
- Contact information — anything you send us through our contact form or by email.
- Marketing preferences — whether you opted in to emails, and whether you open them.
- Technical data — IP address, browser and device type, pages viewed, and how you reached us. Collected through cookies and similar technologies.
A note on sensitive data
We sell intimate personal care products. We do not ask you for health information and you should not send us any. Where you choose to tell us something about your health in a support message, we treat it as confidential, use it only to answer you, and delete it when the enquiry is closed.
Your order history reveals what you bought. We do not use that to build health profiles about you, and we do not sell it.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Taking payment, shipping your order, handling returns | Performance of a contract |
| Answering your questions | Legitimate interests — running a support service |
| Keeping accounting and tax records | Legal obligation |
| Marketing emails | Consent, or soft opt-in for existing customers |
| Fraud prevention and site security | Legitimate interests — protecting the business |
| Analytics and advertising cookies | Consent |
Who we share it with
We share data only with providers who help us run the shop, and only as far as they need it:
- Shopify — our ecommerce platform.
- Payment providers — [e.g. Shopify Payments, PayPal].
- Delivery partners — [e.g. Royal Mail], who receive your name, address and contact details.
- Email and marketing tools —
- Analytics and advertising — [e.g. Google, Meta], where you have consented.
We do not sell your personal data.
Sending data outside the UK
Some providers are based outside the UK, including in the United States. Where data is transferred, we rely on UK adequacy regulations or the International Data Transfer Addendum to keep it protected.
How long we keep it
- Order and transaction records: 7 years, to meet HMRC requirements.
- Account data: while your account is open, then 12 months.
- Support messages: 24 months.
- Marketing data: until you unsubscribe, then removed from active lists.
Your rights
Under UK data protection law you can ask us to: give you a copy of your data; correct it; delete it; restrict or stop our use of it; provide it in a portable format; or object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
To exercise any of these, email [PRIVACY EMAIL]. We will respond within one month.
Cookies
We use cookies that are strictly necessary to run the site, plus analytics and advertising cookies that we set only with your consent. You can change your choices at any time through the cookie banner or your browser settings.
Marketing
We only send marketing emails where you have opted in, or where you have bought from us and we are offering similar products. Every email has an unsubscribe link, and unsubscribing takes effect immediately.
Children
Our products are for adults. We do not knowingly sell to or collect data from anyone under 18.
Complaints
If you are unhappy with how we have handled your data, contact us. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If we make significant changes to this policy we will update the date above and, where appropriate, tell you by email.