Login

Country

Cart

Your cart is empty

Privacy policy

Last updated: July 28, 2026

Viva Velo is a trading name of BLOOM DESIGN STUDIO LTD, a company registered in the United Kingdom ("Viva Velo", "we", "us", "our"). This Privacy Policy explains how we collect, use and share your personal information when you visit vivavelowear.com, shop with us, or otherwise interact with our store and services (the "Services"). Our store is hosted on Shopify and orders are shipped from Mallorca, Spain.

For the purposes of the UK GDPR and EU GDPR, BLOOM DESIGN STUDIO LTD is the data controller of your personal information.

1. Information We Collect

  • Contact details: name, billing and shipping address, email, phone.
  • Payment information: processed by PCI-compliant providers such as Shopify Payments. We do not store full card data.
  • Account information: username, password, preferences.
  • Order and transaction information: items viewed, cart contents, wishlist, purchases, returns, exchanges.
  • Communications: emails, contact forms, support requests, social messages.
  • Device and usage information: IP address, browser, device type, pages viewed, clicks, referring URLs, collected via cookies and similar technologies.
  • Marketing preferences and engagement.

We collect this information directly from you, automatically through the Services, and from service providers and partners (including Shopify, payment processors, shipping carriers, analytics providers).

2. How We Use Your Information

  • Provide the Services, process orders and payments, arrange shipping from our Mallorca fulfilment operation, and handle returns and exchanges.
  • Manage your account and provide customer support.
  • Personalise your experience and improve our products and Services.
  • Send marketing communications where you have opted in.
  • Prevent fraud and keep the Services secure.
  • Comply with legal, tax and regulatory obligations in the UK and Spain.

3. Legal Bases (UK and EEA)

We rely on the following legal bases under the UK GDPR and EU GDPR:

  • Performance of a contract: to process and deliver your orders, manage returns and exchanges, and provide customer support.
  • Legitimate interests: to operate, secure and improve the Services, and to prevent fraud.
  • Consent: for marketing communications and non-essential cookies. You can withdraw your consent at any time.
  • Legal obligation: for tax, accounting, customs and other regulatory obligations in the UK and Spain.

4. How We Share Information

We share personal information only with the following categories of recipients:

  • Shopify: hosts our store and processes information on our behalf and, for certain features, as an independent controller (shopify.com/legal/consumer-privacy-policy).
  • Service providers: payment processing, shipping carriers and fulfilment partners in Spain, IT and cloud hosting, email and SMS providers, analytics, customer support and reviews platforms.
  • Marketing and advertising partners: where you have given consent.
  • Professional advisors: legal, accounting, insurance.
  • Authorities or other third parties: where required by law, to enforce our terms, or in connection with a corporate transaction such as a merger or sale of assets.

We do not sell your personal data.

5. Cookies and Tracking

  • We use cookies and similar technologies to run the site, remember preferences, analyse traffic and support marketing.
  • You can manage your preferences via our cookie banner or your browser settings.
  • See our Cookie Policy for a full list of cookies, their purpose, provider and duration.

6. Where Your Data Is Processed

Your personal data is processed within the United Kingdom and the European Economic Area (EEA). We do not transfer your personal data outside the UK or EEA.

7. Data Retention

We keep personal information only for as long as necessary for the purposes set out in this policy. Typical retention periods are:

  • Order and transaction records: 6 years, to comply with UK and Spanish tax and accounting obligations.
  • Account information: for the life of your account, plus up to 12 months after closure.
  • Marketing consent and preference records: until you withdraw consent, plus up to 3 years for evidence purposes.
  • Customer support communications: up to 3 years after the last interaction.
  • Cookies and usage data: as set out in our Cookie Policy.

After these periods we securely delete or anonymise the data.

8. Your Rights

Under the UK GDPR and EU GDPR, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Delete your personal information ("right to be forgotten").
  • Object to or restrict processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time where we rely on consent.
  • Opt out of marketing via the unsubscribe link in our emails or by contacting us.
  • Lodge a complaint with a supervisory authority (see Section 9).

To exercise any of these rights, email info@vivavelowear.com. We may need to verify your identity first. We will respond within one month, as required by law. We will not discriminate against you for exercising your rights.

9. Complaints

If you believe we have not handled your personal data properly, you can lodge a complaint with:

  • United Kingdom: Information Commissioner's Office — ico.org.uk
  • Spain: Agencia Española de Protección de Datos (AEPD) — aepd.es
  • Other EU/EEA countries: your local data protection authority.

We would appreciate the chance to address your concerns first, so please consider contacting us before filing a complaint.

10. User-Generated Content

Any reviews or content you post in public areas of the Services are visible to others. Please do not share information you wish to keep private.

11. Children's Data

The Services are not directed at children under 16 (or the applicable age of digital consent in your country, whichever is higher). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and secure hosting through Shopify, to protect your personal data. No system is completely secure, so we cannot guarantee absolute security.

13. Third-Party Links

The Services may link to third-party websites and platforms. We are not responsible for their privacy practices and encourage you to read their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where changes are significant, provide additional notice (for example via email or a banner on the site).

15. Contact

BLOOM DESIGN STUDIO LTD (trading as Viva Velo) 124 City Road London, EC1V 2NX United Kingdom

Registered in England and Wales.

Email: info@vivavelowear.com