Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains how THE MALALA TRADING LTD, trading under the Velxia London brand, collects, uses, stores and shares personal information when customers visit or purchase from www.velxialondon.co.uk.

Who We Are

The data controller is THE MALALA TRADING LTD, company number SC887426.

Registered office:
9 Clifton Place
Coatbridge
Lanarkshire
Scotland
ML5 3RL
United Kingdom

Customer service and correspondence address:
68 Hillside Crescent
Hamilton
ML3 6TJ
United Kingdom

Email: contact@velxialondon.co.uk
Telephone: +44 7832 715524

Velxia London is a trading brand of THE MALALA TRADING LTD. A trademark application has been made for the Velxia London brand.

Personal Information We Collect

Depending on how customers interact with us, we may collect name, billing and delivery addresses, email address, telephone number, order and transaction information, payment status and limited payment information, returns, refunds and customer-service records, marketing preferences, reviews, messages and information submitted through website forms, IP address, browser and device information, cookie identifiers, website activity and interaction data, and fraud-prevention and security information.

Complete payment card details are normally collected and processed securely by our authorised payment providers and are not stored directly by Velxia London in complete form.

How We Collect Information

We may collect personal information directly from customers, through the Shopify store and checkout, through cookies and similar technologies, from payment providers, from delivery and logistics providers, from fraud-prevention and security services, and from advertising or analytics providers where permitted.

How We Use Personal Information

We may use personal information to create and manage orders, process payments, deliver products, send order and delivery notifications, handle cancellations, returns and refunds, respond to enquiries, detect and prevent fraud, protect customers, our business and our website, maintain financial, tax and business records, improve our website, products and services, measure website performance, personalise marketing where permitted, send marketing communications where consent or another lawful basis applies, and meet legal and regulatory obligations.

Lawful Bases

We rely on one or more of the following lawful bases.

Contract: Where processing is necessary to process an order, collect payment, deliver products or provide requested customer service.

Legal obligation: Where processing is necessary to comply with tax, accounting, consumer-protection or other legal requirements.

Legitimate interests: Where processing supports the operation, security and improvement of our business, provided those interests do not override customers' rights.

Consent: Where a customer has agreed to optional marketing, advertising cookies or another activity requiring consent. Customers may withdraw consent at any time where processing is based on consent.

Payment Processing

Payments may be processed by Shopify Payments or another payment provider displayed at checkout. Payment providers process information according to their own privacy policies and security standards.

Sharing Personal Information

We may share necessary personal information with Shopify and website-hosting providers, payment processors, delivery and courier companies, returns and fulfilment providers, email and customer-service providers, analytics and advertising providers where permitted, IT, security and fraud-prevention providers, accountants, lawyers, insurers and professional advisers, government authorities, regulators or law-enforcement bodies where legally required, and a purchaser or successor if our business is sold or reorganised.

We require service providers to handle personal information only for appropriate purposes and with suitable protections. We do not sell customers' personal information for money.

Shopify

Our online store is hosted by Shopify. Shopify processes certain personal information to provide the website, checkout, payment and related ecommerce services. Customers can review Shopify's privacy information through Shopify's official website.

International Data Transfers

Some service providers may store or process information outside the United Kingdom. Where legally required, we use appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, an approved UK Addendum or another lawful transfer mechanism.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected. Order, payment, tax and accounting records may generally be kept for up to six years after the relevant financial period or longer where required by law. Customer-service, return and fraud-prevention records may be retained for a reasonable period to resolve disputes, protect legal rights and meet regulatory obligations. Marketing information will be retained until consent is withdrawn, the customer unsubscribes or the information is no longer required.

Cookies

We use cookies and similar technologies for website operation, shopping-basket functionality, security, preferences, analytics and advertising. Where required, non-essential cookies will not be used unless the visitor provides consent through our cookie banner or preference tool. Further information is available in our Cookie Policy.

Marketing Communications

Where permitted, we may send customers information about products, offers or services. Customers can unsubscribe at any time by selecting the unsubscribe link in a marketing email or by emailing contact@velxialondon.co.uk. Unsubscribing from marketing does not stop essential communications about orders, delivery, returns, refunds or security.

Your Data-Protection Rights

Subject to applicable law, individuals may have the right to access their personal information, correct inaccurate or incomplete information, request deletion of personal information, restrict certain processing, object to certain processing, receive certain information in a portable format, withdraw consent, and complain to the Information Commissioner's Office.

To exercise a right, email contact@velxialondon.co.uk. We may request reasonable information to verify identity before completing a request.

Complaints

Please contact us first if you have a privacy concern so we can try to resolve it. Individuals may also complain to the UK Information Commissioner's Office. Information is available at www.ico.org.uk.

Security

We use reasonable technical and organisational measures designed to protect personal information from unauthorised access, misuse, alteration, disclosure or loss. No internet transmission or storage system can be guaranteed to be completely secure.

Children's Information

Our website is not intended for children under 13, and we do not knowingly collect personal information directly from children under 13.

Third-Party Links

Our website may link to third-party websites. We are not responsible for the content, security or privacy practices of external websites.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices, services or legal obligations. The latest version will be displayed on this page with the updated date.