VelaCart's seller and contact details are published. Checkout, live stock, payment, fulfilment and product-compliance controls must still be completed before accepting an order.
What VelaCart uses today
VelaCart uses necessary hosting, sign-in, security, traffic-management and session technologies so visitors can use the shop safely. Advertising, retargeting and social-media tracking are not intentionally used.
If you actively allow analytics, VelaCart creates a random session identifier in session storage and sends first-party events such as page views, product views, searches, add-to-bag actions and checkout starts to VelaCart's own database. These events do not include card details, name, email address or a cross-site advertising identifier.
After you use the notice control, browser local storage named velacart_cookie_notice_v1 remembers the policy version, date and whether you allowed analytics. It expires from use after approximately six months.
The storefront also uses session storage named velacart-cart to retain the product identifiers and quantities in your shopping bag during the current browser session, including if you cancel a secure checkout and return to the shop. It does not contain card details and is cleared when the browser session ends or a payment is confirmed.
The rules we follow
In the United Kingdom, cookies and similar storage or access technologies are principally governed by the Privacy and Electronic Communications Regulations, read with UK data-protection law. For visitors in the European Economic Area, relevant national ePrivacy rules and the EU General Data Protection Regulation may also apply.
Strictly necessary technology may be used without consent when it is essential to provide a service the visitor asked for. Clear information must still be provided. Optional technologies generally require freely given, specific, informed and active consent before they are set or accessed.
Technology categories
| Category | Current status | Purpose and control |
|---|---|---|
| Strictly necessary | Active where required | Security, authorised access, session delivery and core hosting. These cannot be switched off through a consent tool. |
| Preference storage | Active after your interaction | Remembers whether analytics was allowed or rejected. Stored in this browser for up to about six months and removable through browser controls. |
| Shopping-bag session storage | Active when items are added | Retains product identifiers and quantities for the current browser session and a cancelled checkout return. It is cleared after confirmed payment or when the session ends. |
| First-party analytics | Off until allowed | Measures page, product, search, basket and checkout-start events with a random session identifier. It is not used for advertising and can be withdrawn through Cookie settings. |
| Advertising and social tracking | Not used | No targeted advertising, retargeting or social-media tracking is intentionally active. |
Consent and your choices
Optional analytics remains off by default. The on-screen notice offers equally clear choices to allow analytics or keep necessary technology only, without pre-ticked boxes.
You can withdraw analytics permission at any time by reopening Cookie settings and choosing ‘Keep necessary only’. Future personalisation or advertising technology would require a new, clear consent choice before it is activated.
You can reopen the notice with the Cookie settings control and can clear site data through your browser. Blocking all necessary technology may prevent secure or essential parts of the website from working.
Hosting providers and third parties
The hosting and security provider may place or access necessary technology under its own technical controls. Before launch, VelaCart will maintain an accurate register of the provider, technology name, purpose and lifespan rather than relying only on broad category wording.
VelaCart will not permit a third party to use optional tracking merely because its tool is embedded on the site. Any international transfer of personal data associated with future optional technology must be explained in the Privacy Policy and protected as required by applicable data-protection law.
Retention and policy changes
Necessary provider-managed technologies last only as long as required for their stated security or service purpose. The cookie-notice preference is reviewed after approximately six months, and you can remove it sooner by clearing this site's storage in your browser.
This page will be updated before VelaCart adds any optional measurement, advertising or personalisation service. If a change affects consent, the notice will be shown again so that a new choice can be made.
Questions and complaints
The data controller is Vela Cart, trading as VelaCart, at 117 St Paul’s Avenue, Harrow, Middlesex, HA3 9PT. Cookie and privacy questions can be sent to velacart.co.uk@gmail.com.
Visitors may ask VelaCart about its use of cookies or exercise relevant data-protection rights. UK visitors may also raise a concern with the Information Commissioner's Office; EEA visitors may contact their local supervisory authority.
Official guidance used
These customer-facing explanations were prepared with current official UK guidance. The final trading policies should be checked against VelaCart's actual business model and professional advice before launch.