Privacy Policy

Effective Date: April 2025

That Velvet Lady (“we”, “us”, “our”) operates https://thatvelvetlady.com (the “Site”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit the Site or subscribe to our newsletter.

We are committed to complying with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the European Union’s General Data Protection Regulation (GDPR). If you are located in another jurisdiction, we still aim to apply these standards as a baseline.

1. Who We Are (Data Controller)

That Velvet Lady is the data controller responsible for your personal data collected through thatvelvetlady.com. For any privacy-related questions, contact us at hello@thatvelvetlady.com.

2. Information We Collect

a. Information You Provide Directly

Email address — when you subscribe to our newsletter
Name and email — when you contact us via the Contact page
Comments you post on our articles (if commenting is enabled)

b. Information Collected Automatically

IP address, browser type, device type, and operating system
Pages visited, time spent, referring URL, and click behaviour
Approximate location (country/city level) derived from IP
Cookie and tracking pixel data (see our Cookie Policy for details)

c. Information from Third Parties

We use Google Analytics and advertising partners (such as Google AdSense and/or Mediavine) who may set cookies and collect usage data on our behalf. Affiliate link providers (Amazon Associates, RewardStyle/LTK, etc.) may also collect click and conversion data.

3. Legal Bases for Processing (GDPR)

Under GDPR, we process your personal data on one or more of the following legal bases:

Consent — for newsletter subscriptions, non-essential cookies, and advertising
Legitimate interest — for basic site analytics, security, and fraud prevention
Contract — when you request a service from us (e.g., a newsletter subscription)
Legal obligation — where required by applicable law

Under India’s DPDP Act, we process your data based on your consent or for legitimate uses as defined under the Act.

4. How We Use Your Information

To deliver and improve our content and Site experience
To send you our newsletter (only if you have subscribed)
To respond to your enquiries and messages
To display relevant advertising and measure ad performance
To analyse traffic and understand which content is most valuable
To detect and prevent fraud, abuse, and security incidents
To comply with legal obligations

5. How We Share Your Information

We do not sell your personal information. We share limited data with:

Analytics providers — Google Analytics
Advertising partners — Google AdSense, Mediavine, and their ad network partners
Affiliate networks — Amazon Associates, RewardStyle/LTK, and similar, when you click an affiliate link
Email service providers — for delivering our newsletter
Hosting and infrastructure providers — who host the Site
Legal and regulatory authorities — when required by law

6. International Data Transfers

Our Site is hosted and operated from India, and our service providers may be located in the United States, European Union, and other jurisdictions. Where data is transferred outside your country of residence, we rely on standard contractual clauses or equivalent safeguards as required by applicable law.

7. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Newsletter subscriber data is retained until you unsubscribe. Analytics data is typically retained for 14 to 26 months. Contact form submissions are retained for up to 2 years unless we need them longer to resolve an ongoing matter.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Right to access — request a copy of the personal data we hold about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your data (‘right to be forgotten’)
Right to restrict processing — limit how we use your data
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — at any time, where processing is based on consent
Right to lodge a complaint — with a supervisory authority (e.g., your local Data Protection Authority, or the Data Protection Board of India)

To exercise any of these rights, email us at hello@thatvelvetlady.com. We will respond within 30 days.

9. Children’s Privacy

Our Site is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Security

We use industry-standard technical and organisational measures to protect your data, including HTTPS encryption, secure hosting, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The ‘Effective Date’ at the top will reflect the latest version. Significant changes will be communicated via a notice on the Site or by email to our subscribers.

12. Contact Us

For any questions about this Privacy Policy or our data practices, email us at hello@thatvelvetlady.com.