Privacy Policy

Last updated: October 29, 2026

1. About this Privacy Policy

This Privacy Policy explains how Veil Bath Vanity ("Veil", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit veilbathvanity.com (the "Site"), shop with us online, create or use an account, contact customer service, join a promotion, submit a review or other content, or otherwise interact with us.

This Policy applies to customers, Site visitors, trade and business contacts, and other individuals with whom we interact. If a different privacy notice is presented for a specific service or interaction, that notice will apply to that service or interaction instead.

Please read this Policy carefully. By using the Site, you acknowledge the practices described here. If you do not agree with them, please do not use the Site or provide personal information to us.

2. Personal information we collect

The information we collect depends on how you interact with Veil, and may include:

• Identifiers and contact information: your name, email address, telephone number, billing and shipping addresses, account username or identifier, and your social-media handle when you contact us through social media.
• Account and authentication information: account credentials (stored in encrypted/hashed form by our platform), saved preferences, address-book entries, and information used to verify or secure your account.
• Order, transaction, and commercial information: products you viewed, saved to a wishlist, ordered, returned, or reviewed; order and reference numbers; purchase amounts and discounts; delivery and fulfillment information; payment or financing status; and your warranty, return, refund, and customer-service history.
• Payment information: payment card and other payment details are collected and processed directly by the payment provider you select at checkout. We do not receive or store your complete card number on our servers. We may receive limited information such as the payment method, the last four digits of a card, payment status, and transaction identifiers, which we use for order confirmation, fraud screening, refunds, and recordkeeping.
• Device and Site activity: IP address, browser and device type, operating system, cookie or device identifiers, approximate location derived from your IP address, referring pages, campaign information, pages and products viewed, searches, clicks, scrolling and session interactions, cart and checkout activity, and timestamps.
• Preferences and marketing information: email and SMS preferences, cookie and privacy choices, wishlist and back-in-stock selections, referral activity, survey responses, product interests, and inferences about preferences we may draw from your activity.
• Communications and support information: emails, chat messages, contact-form submissions, call notes, feedback, questions, photographs of products or damage that you send us for support, and other information you choose to provide when communicating with us.
• Reviews and user-generated content: ratings, review text, display name, photographs, videos, answers to product questions, and information used to associate a review with a genuine purchase.
• Trade and business information: if you open or apply for a trade or business relationship, your company name, job title, business contact details, and business or resale documentation that you choose to submit.

Please do not provide sensitive personal information that we have not requested. In particular, do not send complete payment-card information, account passwords, Social Security numbers, government identification, or health information through a contact form, chat, review, or email unless we specifically request it through an approved secure method. Where we do process information treated as sensitive under applicable law, we use it only as reasonably necessary to provide the goods or services you requested, to secure accounts and transactions, to comply with the law, or for another legally permitted purpose. We do not use sensitive personal information to infer characteristics about you.

3. How we collect personal information

We collect personal information:

• Directly from you, including when you place an order, create an account, complete a form, contact us, subscribe to communications, enter a promotion, request a return or warranty service, or submit a review.
• Automatically, through the Site and technologies such as cookies, pixels, tags, local storage, analytics tools, and server logs, as described in Section 5.
• From service providers and partners, including our e-commerce platform and hosting providers, payment providers, shipping, freight and delivery providers, analytics and advertising partners, review platforms, and fraud-prevention providers.
• From other people or public sources, such as when someone purchases a product for you, lists you as a delivery or authorized contact, refers you to us, or interacts with us about you through a public platform.

4. How and why we use personal information

We may use personal information to:

• provide the Site, accounts, wishlists, back-in-stock alerts, and other features you request;
• process payments, orders, delivery, pickup arrangements where offered, returns, exchanges, refunds, and warranty claims;
• communicate with you about orders, accounts, delivery appointments, security alerts, policy changes, and service updates;
• respond to your questions and provide customer support, including reviewing photographs you send us for damage, defect, or warranty assessment;
• personalize content and product recommendations and remember your preferences;
• operate, test, analyze, troubleshoot, secure, and improve our Site, products, services, advertising, and customer experience;
• send and measure marketing email and, where you have opted in, SMS messages, and to honor your opt-out choices;
• administer promotions, referral programs, surveys, and trade or business relationships;
• request, verify, publish, moderate, and respond to product or store reviews;
• detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
• comply with legal, tax, accounting, recordkeeping, and regulatory obligations; enforce our agreements; and establish, exercise, or defend legal claims; and
• evaluate or complete a merger, financing, acquisition, reorganization, or sale of all or part of our business.

Legal bases where applicable. If laws such as the GDPR or UK GDPR apply to our processing of your information, we generally rely on: performance of a contract (or steps you request before entering one) for orders, delivery, returns, warranties, accounts, and requested support; legal obligations for tax, accounting, and regulatory records; our legitimate interests for security, fraud prevention, customer support, service improvement, and direct marketing where permitted and not overridden by your rights; and your consent for non-essential cookies, electronic marketing, and other activities where consent is required. You may withdraw consent at any time; withdrawal does not affect processing already carried out lawfully.

5. Cookies and similar technologies

We and our service providers use cookies, pixels, tags, local storage, and similar technologies (together, "Cookies") when you interact with the Site, our advertisements, or our communications. Some Cookies operate only during a browser session; others remain for a defined period or until you delete them.

How we use these technologies:

• Strictly necessary and security: to operate the storefront and checkout, maintain your cart, remember privacy choices, authenticate users, process orders and payments, prevent fraud, protect the Site, and provide features you request.
• Functional and preference: to remember settings and provide wishlists, forms, back-in-stock alerts, reviews, chat, and other optional functions.
• Analytics and performance: to understand visits and interactions, measure traffic and conversions, diagnose errors, and improve the Site.
• Advertising and measurement: to attribute purchases or other actions to campaigns, measure advertising performance, build or use advertising audiences, and, where permitted, show you more relevant advertising.
• Communications: to deliver and measure transactional messages and, where permitted, marketing email and SMS.

Categories of providers. Depending on the page, feature, and your choices, the technologies on the Site may involve our e-commerce platform and hosting providers, payment providers selected at checkout, analytics and advertising services (such as Google and Meta services), email and customer-communication services, review platforms, and security or fraud-prevention services. These providers may receive information such as your IP address, device and browser information, cookie or device identifiers, approximate location, referring URLs, campaign information, pages viewed, searches, clicks, cart and checkout activity, purchase or conversion events, and limited transaction details. Providers used for payment, fulfillment, reviews, communications, fraud prevention, or another service you request may also process the contact, order, payment-status, fulfillment, or account information needed to provide that service.

Your Cookie and advertising choices. Where consent is required, non-essential analytics, advertising, and preference technologies operate according to the choices you make through any cookie banner or settings control presented on the Site. You may also block or delete Cookies through your browser settings, although disabling strictly necessary Cookies may prevent checkout, account, cart, or other features from working. Certain U.S. state privacy laws may treat advertising-related disclosures as a "sale", "sharing", or use for targeted advertising even when no money is exchanged; Section 14 explains how to opt out where that applies. Clearing Cookies, changing browsers, or using another device may require you to set your preferences again. We do not currently respond to browser "Do Not Track" signals that are not legally recognized opt-out preference signals.

Chat and interactive services. When you use chat, contact forms, or other interactive features, we and the providers supporting those features may collect and retain the messages and information you submit, and use them to provide support, troubleshoot and secure the Site, prevent fraud, resolve requests or disputes, and improve our services. Please do not enter payment-card numbers or other sensitive information into chat unless we direct you to an appropriate secure method.

6. How we disclose personal information

We may disclose personal information to:

• Platform and service providers that host or support our Site, accounts, payments, fraud prevention, customer service, communications, reviews, analytics, marketing, and business operations;
• Shipping, freight, delivery, and warehouse providers that need information to quote, schedule, deliver, or support an order, including delivery-appointment calls or messages to the phone number you provide;
• Advertising, analytics, and social-media partners for measurement, attribution, audience creation, and targeted advertising, subject to applicable consent and opt-out rights;
• Review and user-content platforms that collect, verify, display, or moderate reviews and related content;
• Professional advisers such as lawyers, accountants, auditors, and insurers, and financial institutions involved in a transaction;
• Government authorities or other parties when required by law, or when reasonably necessary to protect rights, safety, property, our users, or the public;
• Parties to a business transaction such as a merger, financing, acquisition, restructuring, bankruptcy, or sale of all or part of our business; and
• Other parties at your direction or with your consent.

We do not sell personal information for money. However, our use of advertising and analytics technologies may be considered a sale, sharing, or targeted advertising under some U.S. state privacy laws. The categories potentially involved include identifiers, device and Site activity, commercial information, approximate location, and inferences. Section 14 explains how to exercise an applicable opt-out.

7. Reviews and user-generated content

Submitting a review is voluntary. If you submit one, your rating, review text, display name, photographs, videos, or other content may become public and may be displayed on the Site and distributed by us and by the review platform and its partners. Review submission, verification, moderation, and publication are also governed by the applicable provider's terms and privacy policy.

We may invite customers with a genuine purchase or service experience to submit an honest review, whether positive or negative. We do not condition customer support, refunds, warranty service, discounts, or other benefits on providing a positive review, or on changing or removing a review.

If you send us content directly, or give us permission to use content you posted on social media, we may process your account name, post, caption, photographs, videos, and related information to review, respond to, publish, or promote that content. Public content may be copied or shared by other users or platforms beyond our control. You may ask us to remove content that we control through our Contact page, although removal may not affect copies previously shared by third parties, or information we are legally permitted or required to retain.

8. Email, SMS, and other communications

We send transactional communications when needed to service an order, account, delivery, return, replacement, or other request you make. We send marketing email where permitted and in accordance with your choices; you may unsubscribe at any time through the link in any marketing email, and unsubscribing never affects transactional messages about an order you placed.

Where an SMS program is offered and you opt in, message frequency varies and message and data rates may apply. You may opt out of SMS by replying STOP, and get assistance by replying HELP or contacting us through our Contact page. Consent to marketing SMS is not a condition of purchase. We may keep a suppression record so we can honor your opt-out. The SMS section of our Terms & Conditions gives additional detail where an SMS program is active.

Mobile information, SMS opt-in data, and SMS consent will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes. We may disclose this information only to service providers, telecommunications carriers, and platform providers that help us operate the messaging program, and when required by law.

9. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to complete transactions, maintain accounts, honor preferences and warranties, prevent fraud, resolve disputes, enforce agreements, and meet tax, accounting, legal, and regulatory requirements. Retention periods vary with the type and sensitivity of the information, the nature of our relationship with you, applicable legal requirements, and whether the information is needed for an actual or anticipated dispute. Order records, for example, are kept for the periods needed to administer the 90-day return window, supplier warranty claims, accounting, and tax obligations. When information is no longer needed, we take reasonable steps to delete, de-identify, or securely dispose of it. Review content and public posts may remain available according to the applicable platform's rules.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful loss, misuse, unauthorized access, alteration, and disclosure, including encrypted transmission for checkout and account pages and access controls for internal systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your account credentials, using a unique password, and signing out of shared devices.

11. International data transfers

Veil is based in the United States, and our Site is intended for customers in the United States. We and our providers may process information in the United States and in other countries where we or they operate. Those countries may have data-protection laws different from those in your location. Where applicable law requires a transfer mechanism, a provider may rely on an adequacy decision, approved contractual clauses, or another lawful mechanism, as described in that provider's privacy notice or data-processing terms.

12. Automated processing and profiling

We and our providers may use automated tools to generate fraud or security risk indicators, help review transactions, personalize the Site, recommend products, measure marketing, and create advertising audiences. We do not currently use solely automated processing to make decisions that produce legal or similarly significant effects about consumers. If this practice changes, we will provide any notice and rights required by applicable law.

13. Your privacy rights and choices

Depending on where you live and subject to legal exceptions, you may have the right to:

• know whether we process your personal information, and obtain information about our collection, use, and disclosure;
• access your personal information, or receive a portable copy of it;
• correct inaccurate personal information;
• delete personal information;
• restrict or object to certain processing;
• withdraw consent where processing relies on consent;
• opt out of the sale or sharing of personal information, targeted advertising, or certain profiling;
• limit certain uses or disclosures of sensitive personal information, where applicable;
• appeal our decision regarding a privacy request, where applicable; and
• exercise your privacy rights without unlawful discrimination.

How to submit a request. Send your request through our Contact page with the subject line "Privacy Request". Please describe the right you wish to exercise and the information or account involved. For an opt-out of sale, sharing, or targeted advertising, you may use the same contact methods.

We may request information reasonably necessary to verify your identity and authority, and we will use verification information only to process your request. If we cannot verify a request, we may be unable to fulfill it. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct verification of your identity. We will respond within the period required by applicable law and explain any denial. To appeal a denial where applicable law provides an appeal right, reply to our decision or contact us through our Contact page with the subject line "Privacy Appeal" and explain the basis for your appeal. To submit a complaint about our privacy practices, contact us through our Contact page with the subject line "Privacy Complaint"; we will review it and respond as required by applicable law.

14. Additional information for California and other U.S. state residents

This section supplements the rest of this Policy and describes the categories of personal information we may have collected during the preceding 12 months and may collect going forward. "Sold" and "shared" use the meanings assigned by applicable U.S. state privacy laws. We do not sell personal information for money.

• Identifiers — Examples: name, postal address, email address, telephone number, IP address, account and cookie identifiers, advertising identifiers. Sources and purposes: Sections 3 and 4. Business-purpose disclosures: platform, payment, delivery, security, communications, review, IT, and professional-service providers. Sale/sharing: IP, cookie, device, advertising, and sometimes hashed contact identifiers may be disclosed to advertising and analytics partners for measurement or targeted advertising. Retention: the customer relationship, plus account, warranty, security, tax, and legal needs.
• Customer records information — Examples: name, address, telephone number, and payment information processed by payment providers. Sources and purposes: directly from you and from transaction providers, to complete and support transactions, delivery, returns, warranties, fraud prevention, and legal compliance. Business-purpose disclosures: platform, payment, delivery, fraud-prevention, customer-service, and professional-service providers. Sale/sharing: not sold or shared for targeted advertising as a complete customer record. Retention: completion of the transaction, plus returns, warranty, accounting, tax, fraud, dispute, and legal periods.
• Commercial information — Examples: products considered, purchased, returned, saved, or reviewed; transaction and delivery history. Sources and purposes: directly from you and from fulfillment partners, for commerce, support, personalization, analytics, and marketing. Business-purpose disclosures: commerce, payment, delivery, customer-service, review, analytics, and professional-service providers. Sale/sharing: product views, cart activity, and purchase or conversion events may be disclosed to advertising and analytics partners for measurement or targeted advertising. Retention: transaction, return, warranty, accounting, tax, fraud, analytics, dispute, and legal needs.
• Internet or other electronic-network activity — Examples: browsing, search, click, referral, session interaction, device, cart, checkout, and ad-engagement information. Sources and purposes: collected automatically through the Site for functionality, security, analytics, personalization, and advertising. Business-purpose disclosures: platform, IT, security, analytics, communications, and advertising providers. Sale/sharing: may be disclosed to advertising and analytics partners. Retention: consent and privacy settings, cookie duration, security and troubleshooting needs, and provider settings.
• Geolocation data — Examples: approximate city, state, or region derived from IP address. We do not collect precise geolocation. Sources and purposes: automatically, for localization, security, analytics, delivery estimation, and advertising. Business-purpose disclosures: security, analytics, delivery, and advertising providers. Sale/sharing: approximate location may be disclosed with device or advertising data. Retention: consent and privacy settings, security and analytics needs, provider settings.
• Sensory information — Examples: photographs or videos you choose to submit with a review, question, damage report, or support request. Sources and purposes: directly from you, for reviews, damage and warranty assessment, and support. Business-purpose disclosures: review, customer-service, hosting, and IT providers and, when you choose public posting, Site visitors. Sale/sharing: not sold or shared for targeted advertising. Retention: while the content or related request remains active, plus platform rules, removal requests, and legal or dispute needs.
• Professional or business information — Examples: company, title, business contact information, and resale or trade documentation you choose to submit. Sources and purposes: directly from you or your organization, to administer a trade or business relationship. Business-purpose disclosures: commerce, payment, delivery, and professional-service providers. Sale/sharing: not sold or shared for targeted advertising. Retention: the business relationship, plus tax and legal needs.
• Inferences — Examples: preferences and product interests drawn from the categories above. Sources and purposes: drawn from your activity and transactions, for personalization and marketing. Business-purpose disclosures: analytics, communications, and advertising providers. Sale/sharing: may be disclosed to advertising partners for targeted advertising where permitted. Retention: consent and privacy settings and provider settings.

Where your state law provides a right to opt out of sale, sharing, or targeted advertising, you may exercise it through our Contact page with the subject line "Do Not Sell or Share". Where a recognized opt-out signal such as Global Privacy Control (GPC) is presented by your browser and is legally recognized in your region, we will treat it as an opt-out for that browser or device to the extent required by law.

15. Children's privacy

Our store is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us through our Contact page and we will take steps to delete it.

16. Changes to this Policy

If we change this Policy, we will post the updated version on this page with a new "Last updated" date. Material changes will apply going forward; where the law requires notice or consent for a change, we will provide it.

17. Contact us

Veil Bath Vanity — Website: veilbathvanity.com — Contact page