Your information,
handled with care.

Information we use

Depending on how you use Velvet Market, this can include:

• contact, account and communication details;
• seller profile, listing, image and moderation information;
• order, delivery, refund and support information once secure checkout is activated;
• age or identity-check outcomes and session references where a check is required; and
• technical information needed to run and secure the website.

Do not send identity documents or sensitive evidence to us by ordinary email unless we provide a secure route.

Why we use it

We use information to respond to enquiries, operate accounts and seller memberships, review listings, provide checkout and delivery support, investigate reports, prevent fraud, protect users, meet legal obligations and improve the security of the service.

Our legal bases are performance of a contract or steps you ask us to take before one; legitimate interests such as platform safety, fraud prevention and service administration; consent where required for marketing or non-essential cookies; and legal obligation where applicable.

Providers and sharing

We use service providers where needed to host the site, provide email or support, process payments, perform age or identity checks, help with delivery, and obtain professional advice. We share the minimum information needed for that service. We do not sell personal information.

For age and identity verification, we use Didit. Didit runs the verification journey directly. The public website receives the verification outcome and a session reference needed to apply our adults-only access rule; it does not collect identity-document images, selfies or biometric data through the verification button. Didit’s verification privacy notice explains its handling of verification data. Our payment provider is not yet active and will be named here before payments open.

How long we keep it

We keep enquiries for up to 12 months unless there is a continuing reason to keep them. We keep a Didit verification outcome and session reference only for as long as needed to apply the adults-only access rule, protect the service, respond to fraud or safety concerns, or meet legal obligations. Identity evidence is handled by Didit under its own privacy notice. Closed content complaint cases and their change history are retained for 24 months after closure, unless a legal hold or active dispute requires longer. Account, transaction, moderation and other support records are kept only for as long as needed for the service, legal obligations, fraud prevention or disputes. The detailed retention schedule for payments and marketplace accounts will be confirmed before payments open.

Marketing and cookies

Marketing is optional. You can unsubscribe at any time using the link in a message or by contacting us. Service, safety and legal messages may still be sent where needed. We use essential technology needed to run and protect the site. If we add non-essential analytics or advertising cookies, we will first provide a cookie notice and any required choices.

Your rights

Subject to legal limits, you may ask for access, correction, deletion, restriction or portability of your information, or object to certain processing. You may withdraw consent at any time where consent applies. Contact us using the email above. You can also complain to the Information Commissioner’s Office.

Last updated: 27 October 2026. We will update this notice before introducing a new provider or material new use of personal information.