Last updated: May 2026
1. Who We Are
Braveheart FZ-LLC (“we”, “us”, “our”) is a company registered in Meydan Free Zone, Dubai, United Arab Emirates. We operate the website velvet-valor.com and act as the data controller of your personal information.
We take your privacy seriously and are committed to protecting your personal data in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and where applicable, the UK General Data Protection Regulation (UK GDPR) for visitors in the United Kingdom and the EU General Data Protection Regulation (EU GDPR) for visitors in the European Economic Area.
If you have any questions about this policy or how we handle your data, please contact us at info@velvet-valor.com.
2. Information We Collect
We collect the following types of personal information:
- Identity data: your name and, if you request a personalised or bespoke item, the design details you provide.
- Contact data: your email address, delivery address, and telephone number.
- Transaction data: details of purchases you make and payment confirmations. We do not store card details — payments are processed by Stripe, who are independently certified to PCI DSS Level 1.
- Technical data: IP address, browser type and version, time zone, operating system, and platform.
- Usage data: information about how you use our website, including pages visited and time spent (collected only with your consent — see our Cookie Policy).
- Marketing and communications data: your preferences for receiving marketing from us, and any product suggestions or feedback you choose to share.
3. How We Use Your Information
We use your personal data for the following purposes:
- To process and fulfil your order, including arranging delivery and sending order confirmations.
- To manage your relationship with us, including responding to enquiries and complaints.
- To send you marketing communications where you have opted in, or where we have a legitimate interest to do so as an existing customer (you can opt out at any time).
- To administer and improve our website, troubleshoot issues, and analyse aggregate usage trends.
- To comply with legal obligations, including fraud prevention and applicable tax and accounting requirements.
4. Legal Basis for Processing
We rely on the following lawful bases under UAE PDPL and, where applicable, UK/EU GDPR to process your personal data:
- Performance of a contract: processing necessary to fulfil your order.
- Legitimate interests: where our interests (or those of a third party) do not override your interests and rights — for example, fraud prevention and limited direct marketing to existing customers.
- Consent: where you have opted in to receive marketing emails or accepted analytics cookies. You may withdraw consent at any time.
- Legal obligation: where processing is required by applicable law.
5. Sharing Your Information
We do not sell your personal data. We share your information only with trusted third parties who help us deliver our products and services, including:
- Stripe: payment processing. Stripe's privacy policy is available at stripe.com/privacy.
- Shipping carriers: to arrange international delivery of your order.
- Email service providers: to send transactional and (with consent) marketing emails.
- Website analytics providers: Google Analytics and Microsoft Clarity, used only after you have given consent via our cookie banner.
All third-party processors are required to process your data in accordance with applicable data protection law and our written instructions.
6. International Transfers
As we operate internationally and use service providers based in different countries (including the United States, the United Kingdom, and the European Union), your personal data may be transferred outside the UAE. Where we transfer data, we rely on contractual safeguards with our processors and only work with providers that maintain comparable standards of data protection to those required under UAE PDPL, UK GDPR, and EU GDPR.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy. Order and tax records are kept for the period required by applicable accounting and tax law. Marketing preferences are retained until you unsubscribe. Technical and analytics data is typically retained for no longer than 26 months.
8. Your Rights
Subject to applicable law (UAE PDPL, UK GDPR, EU GDPR), you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your personal data in certain circumstances.
- Restriction: ask us to restrict how we process your data.
- Portability: request your data in a structured, machine-readable format.
- Object: object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at info@velvet-valor.com. You also have the right to lodge a complaint with a relevant supervisory authority — the UAE Data Office (for residents of the UAE), the Information Commissioner's Office (ICO) at ico.org.uk for residents of the UK, or your local Data Protection Authority within the European Economic Area.
9. Cookies
We use cookies and similar tracking technologies on our website only after you have given consent via our cookie banner. For full details of the cookies we use and how to manage them, please see our Cookie Policy. You can change your preferences at any time using the Cookie Preferences link in the footer.
10. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects when it was last revised. We will notify you of any significant changes by email if you are a customer.