Privacy and Security Policy

Privacy and Security Policy

Last updated: 31 May 2026

Avelisse (operated by Cloverlight LLC) is committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and protect your information when you visit our website or make a purchase.

1. Information We Collect

Information You Provide

  • Order Information: Name, email address, shipping address, billing address, phone number, and payment details when you make a purchase.
  • Account Information: Email address and name if you create an account.
  • Communication: Any information you provide when contacting our customer support team.

Information Collected Automatically

  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Usage Data: Pages visited, time spent on pages, referring URLs, and click behaviour.
  • Cookies: We use cookies to improve your shopping experience. See Section 5 for details.

2. How We Use Your Information

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Sending order confirmations and shipping updates
  • Providing customer support
  • Improving our website and services
  • Preventing fraud and ensuring security
  • Complying with legal obligations

We do not sell your personal data to third parties.

3. Third-Party Services

We share your data only with trusted partners who help us operate our business:

  • Shopify: Our e-commerce platform that processes orders and payments
  • Payment Processors: Stripe, PayPal for secure payment processing
  • Shipping Carriers: To deliver your orders with tracking
  • Analytics: Google Analytics and Microsoft Clarity to understand how visitors use our site

Each third party is contractually obligated to protect your data and use it only for the purpose of providing their service.

4. Data Protection (GDPR)

If you are located in the UK or European Economic Area, you have the following rights under GDPR:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request that we limit how we use your data
  • Right to Data Portability: Request a copy of your data in a structured format
  • Right to Object: Object to our processing of your data

To exercise any of these rights, email us at support@avelisse.co.uk with the subject line "Data Request". We will respond within 30 days.

5. Cookies

Our website uses cookies to:

  • Remember your shopping cart contents
  • Keep you signed in to your account
  • Understand how visitors navigate our site
  • Provide relevant product recommendations

You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect your shopping experience.

6. Data Security

We protect your personal data with:

  • SSL encryption across the entire website (HTTPS)
  • PCI DSS compliant payment processing
  • Regular security audits and monitoring
  • Access controls limiting who can view customer data

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, typically:

  • Order data: 6 years (as required by UK tax law)
  • Account data: Until you request deletion
  • Analytics data: 26 months

8. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on our website.

10. Contact Us

For any privacy-related questions or data requests: