Privacy Policy
Last updated: 20 October 2026
1. Who we are
This privacy policy explains how Vizap Limited, trading as Vellen Hair Professional, Unit 2508A, 25/F, Bank of America Tower, 12 Harcourt Road, Central, Hong Kong (“we”), collects and uses your personal data when you visit vellen-hair.eu (the “Site”) or place an order. We are the controller for this data. You can reach us at info@vellen-hair.eu.
2. What data we collect
- Order data: your name, billing and shipping address, e-mail address, phone number, the products you order and your payment details. Card numbers are processed by our payment providers; we never see your full card number.
- Account data: if you create a customer account, your login details and order history.
- Device data: when you visit the Site, we automatically receive information about your device and browser, your IP address, time zone, the pages and products you view, the site or search term that brought you here and how you interact with the Site. We collect this using cookies, log files and pixels.
- Messages: what you send us by e-mail, contact form or WhatsApp.
3. Why we use your data and on what legal basis
- To process and ship your order, send order confirmations and invoices and handle returns (performance of a contract, Art. 6(1)(b) GDPR).
- To answer your questions (Art. 6(1)(b) and (f) GDPR).
- To check orders for fraud and keep the Site secure (legitimate interest, Art. 6(1)(f) GDPR).
- To understand how the Site is used and to improve it (legitimate interest, Art. 6(1)(f) GDPR).
- To send you our newsletter and show you personalised advertising, only if you have agreed (consent, Art. 6(1)(a) GDPR). You can withdraw your consent at any time, for example via the unsubscribe link in every newsletter.
- To meet legal obligations such as tax and accounting rules (Art. 6(1)(c) GDPR).
4. Who we share your data with
We pass your data on only as far as necessary to run the shop:
- Shopify (Shopify International Ltd., Ireland, and Shopify Inc., Canada): hosting of the Site, checkout, customer accounts and payment processing (Shopify Payments, Shop Pay). Shopify’s privacy policy: shopify.com/legal/privacy
- Payment providers for the payment method you choose (credit card, Apple Pay, Google Pay).
- Our warehouse in Germany and shipping carriers, so your order can be packed and delivered. Shipping labels and tracking e-mails are created through Sendcloud.
- Klaviyo, Inc. (USA): sending our newsletter, if you have subscribed.
- Meta Platforms Ireland Ltd. (Meta Pixel) and Google Ireland Ltd. (Google Analytics, Google Ads, Google Shopping): measuring how the Site and our advertising are used and showing you relevant ads, where you have agreed to statistics and marketing cookies.
- Authorities, if we are legally obliged to do so.
5. International transfers
Our company is based in Hong Kong, and some of our service providers (for example Shopify, Klaviyo, Meta and Google) process data in the United States and Canada. Where data leaves the European Economic Area, we rely on the EU Standard Contractual Clauses or an adequacy decision of the European Commission.
6. Cookies and advertising
Cookies and pixels that are necessary for the Site to work (for example the shopping cart and checkout) are always set. Cookies for statistics and advertising are only set with your consent, which you can give or refuse in the cookie banner. You can change your choice at any time in your browser settings. You can also opt out of personalised ads here: Meta: facebook.com/settings/?tab=ads – Google: google.com/settings/ads
7. How long we keep your data
We keep order data for as long as we need it to fulfil your order and handle returns, and afterwards for as long as tax and commercial law require us to keep invoices and business records. Device data for statistics is kept in anonymised or aggregated form. Newsletter data is kept until you unsubscribe.
8. Your rights
You have the right to access the personal data we hold about you and to have it corrected, deleted or restricted, to receive it in a portable format and to object to processing based on our legitimate interests. Where processing is based on your consent, you can withdraw that consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority in the EU country where you live.
To exercise your rights, e-mail us at info@vellen-hair.eu.
9. Minors
The Site is not intended for persons under 18.
10. Changes
We may update this policy to reflect changes to our practices or for legal reasons. The current version is always available on this page.
Contact
Vizap Limited
Unit 2508A, 25/F, Bank of America Tower
12 Harcourt Road, Central, Hong Kong
info@vellen-hair.eu