Legal
Privacy Policy
This policy explains what personal data Verso Cards processes when you browse the catalogue or place a guest order, why we process it, and the rights you have over it.
Last updated 23 September 2026
1. Who is responsible for your data
Verso Cards is the controller of the personal data described in this policy. Written enquiries about data protection can be sent to [email protected], and we answer within 30 days.
If a request concerns an order, please include the order number so we can locate the record without asking for extra identification.
2. Data we collect
- Order data — name, email address, phone number, shipping address, delivery notes, the items ordered and the totals shown at checkout.
- Support data — the content of messages you send us about an order, a condition question or a return.
- Technical data — IP address, browser and device type, referring page and pages viewed, collected in server and analytics logs.
- Local browser data — your bag contents, currency choice and cookie decision are stored in your browser, not on our servers.
3. Why we process it
- To accept, pack, ship and invoice an order (performance of a contract).
- To answer support, condition and return enquiries (performance of a contract).
- To keep commercial and tax records (legal obligation).
- To keep the website secure and to understand which catalogue pages are used (legitimate interests, and consent where analytics cookies are involved).
4. No account, no profiling
Verso Cards has no customer accounts, no loyalty programme and no advertising profiles. We do not use your data to make automated decisions about you, and we do not sell or rent personal data to anyone.
5. Who we share data with
We share only what a task requires: shipping carriers receive the delivery address, payment providers receive the amount and reference, and our hosting and email providers process data on our instructions under written agreements.
Where a provider is outside the European Economic Area, transfers rely on the European Commission's standard contractual clauses.
6. How long we keep it
- Order and invoice records: as long as accounting law requires, then deleted.
- Support correspondence: 24 months after the enquiry is closed.
- Technical and analytics logs: up to 14 months.
- Browser-stored bag and preferences: until you clear your browser storage.
7. Your rights
You can ask for access to your data, correction of inaccurate data, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
You also have the right to complain to your national data protection authority if you believe we have handled your data incorrectly.
8. Security and changes
Data is transmitted over encrypted connections and access is limited to the people who handle orders. If this policy changes, the updated version is published on this page with a new revision date.