Privacy policy
Last updated: 16 August 2026
At Verelé, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and share personal data when you visit verele.eu, purchase our products, create an account, subscribe to our communications, contact us or otherwise interact with Verelé.
It also explains your rights under applicable data protection law, including the EU General Data Protection Regulation ("GDPR").
1. Who We Are
Verelé operates the online store available at verele.eu.
For the purposes of applicable data protection legislation, Verelé is the data controller for personal data processed for our own business purposes.
Verelé
Klintemarken 2A
2860 Søborg
Denmark
Email: info@verele.eu
Telephone: +45 71 35 78 19
Our online store is hosted and supported by Shopify.
2. Personal Data We Collect
The personal data we collect depends on how you interact with Verelé.
Contact and Identity Information
This may include:
-
Name
-
Email address
-
Telephone number
-
Billing address
-
Delivery address
Order and Transaction Information
When you make a purchase, we may process information including:
-
Products ordered
-
Order history
-
Order value
-
Delivery information
-
Returns and refunds
-
Payment status
-
Transaction details
Payment information is processed through Shopify and/or the applicable payment provider. Verelé does not necessarily receive or store complete payment-card details.
Account Information
If customer accounts are available and you create one, we may process information associated with your account, such as your login details, preferences and order history.
Communications
If you contact us, we may process information contained in your enquiry, customer-service request, return request, review or other communication.
Device and Website Usage Information
When you visit our website, certain technical information may be collected automatically, including:
-
IP address
-
Browser and device information
-
Website activity
-
Pages and products viewed
-
Referring website
-
Shopping-cart activity
-
Cookie and similar technology identifiers
The use of non-essential cookies and similar technologies is subject to applicable consent requirements.
3. How and Why We Use Personal Data
We process personal data only where we have an appropriate legal basis.
Processing and Fulfilling Your Order
We use information such as your name, contact information, delivery address and order details to:
-
Process your purchase;
-
Receive and verify payment;
-
Deliver your products;
-
Send order and delivery communications;
-
Handle returns and refunds; and
-
Provide customer service relating to your order.
Legal basis: Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
Customer Service
We process information you provide when contacting us so that we can respond to questions, resolve problems and assist with your orders.
Depending on the nature of your enquiry, the legal basis may be performance of our contract with you or our legitimate interest in providing effective customer service and operating our business.
Legal and Accounting Requirements
We may retain and process certain transaction and business records where necessary to comply with legal obligations, including applicable accounting, tax and consumer-protection requirements.
Legal basis: Compliance with a legal obligation.
Security and Fraud Prevention
We may process information where reasonably necessary to protect Verelé, our customers and our website against fraud, misuse, security incidents and other unlawful activity.
Legal basis: Our legitimate interests in maintaining the security and integrity of our business and Services, subject to applicable law.
Marketing
If you subscribe to Verelé marketing communications, we may use your contact information to send you skincare news, product information, offers and other promotional communications.
Where required by law, we will obtain your consent before sending electronic direct marketing.
You can withdraw your marketing consent or unsubscribe at any time using the unsubscribe link included in our marketing emails or by contacting us.
Withdrawal of consent does not affect processing carried out lawfully before consent was withdrawn.
Personalisation and Advertising
Subject to your cookie and privacy choices, we and our service providers may use information about how you interact with our website to understand website performance, personalise your experience, measure advertising and display relevant advertising.
Where consent is legally required for the use of cookies or similar tracking technologies, such processing will take place only after the required consent has been obtained.
4. Cookies and Similar Technologies
Verelé and our service providers may use cookies and similar technologies to operate the website, remember preferences, understand website usage and, where permitted, support analytics, personalisation and advertising.
Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.
Where required, analytics, advertising and other non-essential technologies will be activated only in accordance with your cookie choices.
You can manage available cookie preferences through the cookie consent controls provided on our website.
5. How We Share Personal Data
We do not disclose personal data except where necessary for legitimate business purposes, where you have authorised us to do so or where disclosure is required by law.
We may share relevant personal data with service providers such as:
-
Shopify;
-
Payment processors;
-
Delivery and logistics providers;
-
IT and website service providers;
-
Hosting and cloud-service providers;
-
Customer-service providers;
-
Analytics providers;
-
Marketing and advertising providers, subject to applicable consent requirements;
-
Professional advisers such as accountants or legal advisers; and
-
Government or regulatory authorities where required by law.
These recipients receive only the information reasonably necessary for their respective purposes and are required to process personal data in accordance with applicable data protection requirements.
6. Shopify
Our online store is powered by Shopify.
Shopify processes certain personal data when you access or use our store in order to provide its ecommerce platform and related services.
Information submitted through our store may therefore be processed by Shopify and its service providers.
Shopify may also process certain information for its own purposes in circumstances where Shopify acts as an independent data controller.
For further information about Shopify's processing practices and privacy rights, please refer to Shopify's applicable consumer privacy information.
7. Payment Processing
Payments are processed using the payment methods made available through our online store.
Payment providers may process information necessary to complete and secure your transaction.
Their processing of personal data may also be governed by their respective privacy policies.
Verelé does not use your complete payment-card details for marketing purposes.
8. International Transfers
Some of our service providers may process personal data outside Denmark or the European Economic Area ("EEA").
Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used where required.
These may include European Commission Standard Contractual Clauses or another legally recognised transfer mechanism.
9. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, contractual and dispute-resolution requirements.
Different categories of information may therefore be retained for different periods.
For example:
-
Order and transaction records may be retained where required for accounting, tax and consumer-law purposes;
-
Customer-service correspondence may be retained for a reasonable period to resolve enquiries and potential disputes;
-
Account information may be retained while an account remains active and thereafter where necessary;
-
Marketing information is retained until you unsubscribe, withdraw consent or it is otherwise no longer necessary, subject to records we may need to retain to respect your opt-out.
When personal data is no longer required, we will delete or anonymise it in accordance with applicable requirements.
10. Your GDPR Rights
If the GDPR applies to you, you may have the following rights, subject to applicable conditions and exceptions:
Right of Access
You may request information about the personal data we process about you and obtain a copy of that data.
Right to Rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to Erasure
In certain circumstances, you may ask us to delete your personal data.
Right to Restrict Processing
You may have the right to request that we restrict certain processing of your personal data.
Right to Data Portability
Where applicable, you may request personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to Object
You may object to certain processing based on legitimate interests.
You also have the right to object to processing of your personal data for direct-marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
To exercise your rights, please contact:
We may need to verify your identity before fulfilling certain requests.
11. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Please avoid sending sensitive information through unsecured communication channels.
12. Children's Privacy
Our website and products are intended for a general consumer audience and are not directed specifically at children.
We do not knowingly collect personal data from children in circumstances where parental or guardian consent would be required by applicable law.
If you believe that a child has provided personal data to us improperly, please contact us so that we can review the matter and take appropriate action.
13. Third-Party Websites
Our website may contain links to websites or services operated by third parties.
Verelé is not responsible for the privacy practices of independent third-party websites. We encourage you to review their privacy information before providing personal data.
14. Complaints
If you have concerns about how Verelé processes your personal data, we encourage you to contact us first so that we can investigate your concern.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
For Verelé in Denmark, the supervisory authority is:
Datatilsynet (Danish Data Protection Agency)
Carl Jacobsens Vej 35
2500 Valby
Denmark
15. Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, technologies, service providers or legal requirements change.
The latest version will be published on this page and the Last updated date will be revised accordingly.
Where required by law, we will provide additional notice of material changes.
16. Contact Verelé
If you have questions about this Privacy Policy, how we process personal data or would like to exercise your privacy rights, please contact:
Verelé
Bygvænget 707
2980 Kokkedal
Denmark
Email: info@verele.eu
Telephone: +45 71 35 78 19