This policy explains what personal information Velvet Rose collects, why, and the choices you have. Velvet Rose Box Ltd is the data controller and is registered with the Information Commissioner’s Office, registration number ZA896675. Last updated 25 October 2026.
What we collect
- Orders: your name, email, phone number, billing and delivery addresses, what you bought, your gift message, lid text and delivery date.
- Gift recipients: the name and address you give us, used only to deliver the box.
- Payments: handled by our payment provider. We never see or store your full card number.
- Accounts: if you create one, your login details and order history.
- Reminders and news: your email address, the dates you give us and whether you want news.
- Messages and trade applications: what you send us through our forms or by email.
Why we use it
- To take, make and deliver your order, and to deal with returns and guarantee claims (to perform our contract with you).
- To keep accounting records for HMRC (a legal obligation).
- To send date reminders and news, only if you asked us to (your consent, which you can withdraw at any time).
- To answer messages, assess trade applications and keep the website secure and free of fraud (our legitimate interests).
Who we share it with
- DHL Express, to deliver your order (recipient name, address, phone and email).
- Our payment provider, to take payment securely.
- The companies that host this website and send our emails, who act only on our instructions.
We never sell your information.
How long we keep it
- Order records: six years from the end of the financial year, as tax law requires.
- Accounts: until you ask us to close yours.
- Reminders: until you unsubscribe, which you can do from any reminder email.
- Messages and declined trade applications: up to two years.
Cookies
We use only the cookies the shop needs to work: to keep your basket, log you in and protect payments from fraud. We don’t use advertising or analytics cookies. If that changes, we will ask for your permission first.
Your rights
You can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, or ask us to send it to you in a portable format. Email support@rosebox.co.uk. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Contact
Velvet Rose Box Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Email support@rosebox.co.uk.