Privacy policy
Last updated: 8 October 2026.
How we use information · Who we share it with · Cookies · Your rights
Who we are
House of VERA Ltd is responsible for the personal information we use to take orders, provide customer care and operate shopvera.co.uk. Where another organisation is responsible for its own use of your information, we explain that below.
We are registered in England and Wales, company number 16121920. Our registered office is 17 Symphony Close, Edgware, United Kingdom, HA8 0EE.
For privacy questions or requests, email support@shopvera.co.uk.
Information we use
We use information you provide when you shop, contact us or choose to receive our emails:
- Your name, email address, delivery address and any phone number you provide.
- Order details, including edition, quantity, price and fulfilment status.
- Payment information handled through Shopify checkout. The VERA website does not store full card numbers.
- Messages sent to our customer-care email addresses.
- Your marketing preferences.
- Technical information needed to operate the website, preserve your bag and complete checkout, including a cart identifier and Shopify checkout session information.
We do not ask for health-screening information to buy a set or use it to create health-based marketing profiles.
How we use information
| Purpose | Legal basis |
|---|---|
| Taking, fulfilling and supporting your order; answering questions before you buy | Performing our contract with you or taking steps at your request before a contract |
| Responding to customer-care enquiries and complaints | Performing our contract, where relevant, and our legitimate interest in helping customers and resolving concerns |
| Keeping required tax, accounting and consumer-law records | Legal obligation |
| Sending marketing emails you have requested | Your consent |
| Operating the website securely and keeping the bag and checkout working | Performing our contract or taking steps at your request, and our legitimate interest in operating a reliable website, as applicable |
Necessary order and delivery details are required to process your purchase. If you do not provide them, we cannot complete the order. Marketing consent is optional.
Who we share it with
Shopify and payment providers
Shopify hosts our online storefront and checkout, processes orders and sends transactional order messages. It normally processes this information on our behalf under its Data Processing Addendum. Payment information is also processed by the payment provider you use at checkout.
You can check out without an account. If you choose to use Shopify accounts, Shop or Shop Pay, Shopify’s own terms and privacy information also apply to those services.
Shopify Network Intelligence is enabled. For these Enhanced Services, Shopify acts as an independent controller and uses customer information to improve its products and provide advertising and personalisation across Shopify, including using activity across merchants.
See Shopify’s Consumer Privacy Policy. If you are in the UK or EEA, you can withdraw consent or object to relevant Enhanced Services processing through Shopify’s privacy portal. You can also contact us. Cookie choices on Shopify checkout can be managed through its Cookies control.
Customer care and website hosting
We use Google Workspace for email at support@shopvera.co.uk and hello@shopvera.co.uk. Google processes this information on our behalf under its Cloud Data Processing Addendum.
Vercel continues to host the VERA practice portal at veraritual.co.uk and temporary legacy-storefront transition routes, and processes hosting and website-delivery information on our behalf under its Data Processing Addendum.
Upstash retains essential bag-session and recovery records from our previous storefront on our behalf. These records coordinated bag changes across requests so an interrupted change was not blindly repeated. They are not used to operate the new Shopify-native bag. They contain a cart identifier, bag contents and operation status, not payment-card details.
Delivery
We share the name, address and contact information needed to deliver your order with our delivery and fulfilment providers. We currently use Evri Standard and identify the delivery provider in the dispatch communication.
Cookies
Some cookies are needed to provide a service you request, such as remembering your bag. Others require your consent.
Shopify’s essential storefront and checkout cookies remember your bag, maintain checkout sessions and support security. Visitors to our previous storefront may still have the essential vera_cart_session cookie, with its existing lifetime of up to 30 days. It contains an opaque identifier, not payment details. Legacy shared records are retained as described below.
Previous storefront visits may have left vera_pending_cart in your browser’s session storage, recording an unresolved intended change and the last confirmed bag display for that tab. It is cleared when that tab session ends. The Shopify-native storefront does not use this storage to operate your new bag.
Returning visitors may still have the older vera_cart and vera_cart_form_recovery cookies. The Shopify-native storefront does not create or use these cookies. They expire under their existing lifetime of up to 30 days. These bag technologies are essential to the requested service and are not used for marketing or analytics.
With your permission, we use Meta Pixel measurement on our Shopify-hosted storefront and checkout. Optional analytics and marketing measurement does not run until you accept it, and you can withdraw that permission using the available cookie preferences controls.
Shopify checkout uses cookies for checkout, sessions and security. Its UK cookie banner provides choices for non-essential cookies. You can reopen the Cookies control on Shopify checkout to change those choices.
Marketing choices
We send marketing emails only if you separately opt in. At checkout or sign-in, the optional choice is “Email me with news and offers”. We also ask you to confirm your email choice. Placing an order does not subscribe you to marketing.
You can unsubscribe using the link in an email or by writing to support@shopvera.co.uk. This does not affect necessary messages about your orders.
International transfers
Our providers may process information outside the UK. Shopify’s customer-data hosting location for this store is set to the European Union, but Shopify and its providers may also process information in other countries, including Canada.
Where UK law requires safeguards for an international transfer, the relevant provider agreements describe them. These include applicable adequacy decisions and approved contractual safeguards, such as Standard Contractual Clauses with the UK’s required transfer terms. The Shopify, Google and Vercel agreements linked above provide details. Our legacy Upstash bag store is hosted in the United States; Upstash’s Data Processing Agreement describes its processing and transfer safeguards. You can contact us for information about the safeguards relevant to your information.
How long we keep information
- Order, invoice and tax records: normally six years from the end of the financial year they relate to, or longer where the law requires.
- Customer-care correspondence: as long as needed to resolve the enquiry and any related legal claim.
- Marketing preferences: while you subscribe, with a record of your unsubscribe preference retained as needed to respect it.
- The
vera_cart_sessioncookie: up to 30 days. Legacy bag cookies keep their existing expiry of up to 30 days. - Browser pending-bag session storage: until the change is resolved or the tab session ends.
- Shared bag records: 30 days after creation or the last resolved state change. An unresolved or invalid recovery record has no automatic expiry while it is needed to prevent an uncertain change being repeated; once resolved, the 30-day period applies. Contact us if you need help resolving or erasing a bag record.
Our providers may retain information where required by law or for backup arrangements described in their agreements. We otherwise keep information only as long as needed for the purposes above.
Your rights
Depending on the circumstances, you can ask to access, correct, erase or restrict use of your personal information, object to processing, or receive a portable copy of it. Where we rely on consent, you can withdraw it at any time. This does not affect processing that was lawful before you withdrew consent.
Email support@shopvera.co.uk to exercise your rights. For processing where Shopify is an independent controller, you can also use Shopify’s privacy portal.
You can complain to the Information Commissioner’s Office at any time. You are also welcome to contact us so we can try to resolve your concern.
ICO: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes
We will update this policy when our use of personal information changes. The date at the top shows the latest version.