Privacy Policy

Privacy Policy (Morocco & EU Compliant)

1. Introduction

Velaya, operated by Dragana Cosmetics Europe LTD, values your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding your information. It complies with the European Union’s General Data Protection Regulation (GDPR) and Moroccan data protection laws.

2. Data Controller

Dragana Cosmetics Europe LTD
71–75 Shelton Street
London WC2H 9JQ
United Kingdom

Email: contact@dragana.uk

3. Personal Data We Collect

We collect and process personal data you provide voluntarily when using our services, such as when placing an order, subscribing to newsletters, or contacting customer support. This includes:

• Full name

• Billing and shipping address

• Email address

• Phone number

• Payment information (only as needed for payment processing; full credit card details are not stored)

• IP address and browser data (for technical optimization and security)

• Order and purchase details

4. Purpose of Data Processing

We use your personal data to:

• Process and fulfill your orders

• Manage payments and delivery

• Communicate with you for customer service and support

• Send newsletters and marketing communications (only with your consent)

• Comply with legal obligations (e.g., accounting and tax requirements)

• Improve our website and services

• Prevent fraud and misuse

5. Legal Basis for Processing

• Performance of a contract (Art. 6(1)(b) GDPR)

• Consent (Art. 6(1)(a) GDPR)

• Legitimate interests (Art. 6(1)(f) GDPR) — e.g., fraud prevention, marketing, service improvement

• Legal obligation (Art. 6(1)(c) GDPR)

For Moroccan customers, data processing also complies with Morocco’s Law No. 09-08 concerning data protection.

6. Sharing Your Data

We only share your data with trusted third parties when necessary to provide our services, including:

• Payment processors

• Shipping and logistics providers

• IT service providers

• Authorities when required by law

We do not sell your data to third parties.

7. International Data Transfers

Since Velaya operates globally, your data may be transferred to countries outside the European Union, such as Morocco or other regions. We ensure adequate safeguards are in place, such as EU Standard Contractual Clauses, to protect your data.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined above or to meet legal retention periods (e.g., 10 years for tax records).

9. Your Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion or restriction of processing

• Object to data processing

• Request data portability

• Withdraw consent at any time without affecting the lawfulness of prior processing

• Lodge a complaint with a supervisory authority (e.g., a data protection authority in the EU)

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality, security, and user experience. You can manage your cookie preferences through your browser settings. For more details, please see our [Cookie Policy].

11. Contact Information

For any questions or to exercise your data protection rights, please contact us at:

📧 support@velaya.ma
📍 Dragana Cosmetics Europe LTD, 71–75 Shelton Street, London WC2H 9JQ, UK