Effective June 1, 2026
Privacy policy
1. Introduction
Effective Date: June 1, 2026
VERO (“VERO,” “we,” “our,” or “us”) respects the privacy of individuals who access our website, submit garments, purchase commissioned sculptures, or otherwise interact with our products and services. This Privacy Policy describes how we collect, use, disclose, and safeguard personal data in connection with our operations, including our website, commissioned artwork services, shipping and logistics processes, customer communications, and related business activities. This Privacy Policy is incorporated into and forms part of our Terms & Conditions and related policies.
2. Scope and Applicability
This Privacy Policy applies to personal data collected from customers, prospective customers, website visitors, marketing leads, and individuals who communicate or otherwise engage with VERO. VERO operates in the United States and may interact with individuals globally. Personal data may be processed in jurisdictions outside of an individual’s country of residence, including the United States and other jurisdictions in which our service providers operate.
3. Categories of Personal Data, Purposes of Use, and Disclosure Practices
VERO collects and processes personal data for legitimate business purposes, including order fulfillment, customer communications, marketing, analytics, and operational activities. The table below provides a detailed description of the categories of personal data collected, the purposes for which such data is used, and whether such data is sold or shared with third parties under applicable law.
4. Personal Data Disclosure Table
For each category below: the data collected, the business and commercial purposes, whether it is disclosed to service providers, whether it is sold, and whether it is shared for targeted advertising (cross-context behavioral advertising).
Identifiers — Name, email address, postal address, phone number, IP address, account identifiers. Purposes: account creation, order processing, customer communication, fraud prevention, analytics. Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: Yes.
Customer and Transaction Data — Order history, garment submissions, shipping details, payment-related information processed via third-party providers. Purposes: order fulfillment, production workflows, payment processing, shipping coordination. Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: No.
User-Generated Content — Photographs, garment images, videos, customer submissions, feedback, communications. Purposes: service delivery, personalization, marketing (where permitted), product improvement. Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: No.
Event and Lifestyle Data — Wedding date, wedding location, aesthetic preferences, customer-provided contextual information. Purposes: personalization of services, marketing content, customer experience enhancement. Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: No.
Internet and Network Activity — Browsing history, website interactions, cookie and tracking data, analytics data. Purposes: website functionality, analytics, advertising, remarketing. Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: Yes.
Photographic and Intake Documentation Data — Images of garments, packaging condition, intake documentation records. Purposes: quality control, insurance documentation, legal and risk management. Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: No.
Technical and Production Data — Scan data, garment geometry, modeling outputs, production artifacts. Purposes: service delivery, product development, quality assurance, analytics. Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: No.
Protected Characteristics (Incidental) — Information that may reveal marital status or other characteristics based on submitted materials. Purposes: personalization, service delivery, marketing content (where permitted). Disclosed to service providers: Yes. Sold: No. Shared for targeted advertising: No.
VERO does not sell personal data for monetary compensation. However, certain internet and device data may be “shared” for targeted advertising purposes as defined under U.S. state privacy laws.
5. Purposes for Processing Personal Data
VERO processes personal data as reasonably necessary to operate its business, including to process transactions, produce commissioned sculptures, manage garment intake and documentation, coordinate shipping and insurance, communicate with customers, and provide customer support. Personal data is also used to personalize the customer experience, conduct marketing and advertising activities, perform analytics, improve VERO’s technology and services, prevent fraud, and comply with legal obligations. VERO may also use personal data in connection with future partnerships with bridal salons, registries, preservation services, and related vendors, where permitted by law.
6. Sources of Personal Data
Personal data is collected directly from individuals through website interactions, order submissions, communications, and customer-provided materials. Personal data may also be collected through automated technologies such as cookies and analytics tools, from service providers including payment processors and shipping carriers, from social media platforms, and from publicly available sources where individuals have made information publicly available.
7. Disclosure of Personal Data
VERO discloses personal data to third parties only as necessary to operate its business. Such disclosures include sharing personal data with service providers that support payment processing, website hosting, analytics, communications, logistics, shipping, and production. Personal data may also be disclosed to professional advisors, legal and regulatory authorities where required, and to business partners in connection with service delivery or future partnership opportunities. Third-party recipients are authorized to use personal data solely to provide services to VERO unless otherwise permitted by applicable law. VERO requires that service providers process personal data only for specified business purposes and not for their own independent marketing or commercial purposes.
8. Cookies and Tracking Technologies
VERO uses cookies and similar technologies to operate its website, maintain session functionality, support authentication, analyze website performance, and deliver advertising. Third-party technologies, including advertising networks and analytics providers, may collect information regarding user interactions with the website and across other online services for purposes of attribution and targeted advertising.
9. Use of Sensitive Personal Data
VERO processes sensitive personal data only as reasonably necessary to provide the Services or as otherwise permitted by applicable law. To the extent sensitive personal data is processed for purposes beyond service delivery, individuals may have the right to limit such processing or withdraw consent. VERO does not knowingly collect sensitive personal data for the purpose of inferring characteristics about individuals.
10. Legal Bases for Processing
Where the GDPR applies, VERO processes personal data on the following bases: performance of a contract, compliance with legal obligations, legitimate business interests, and, where applicable, consent.
11. De-Identified and Aggregated Data
VERO may de-identify or aggregate personal data such that it can no longer reasonably be used to identify an individual. De-identified data may include dress scan data, technical capture data, garment geometry data, and related outputs. VERO may retain, use, analyze, license, share, or otherwise utilize such de-identified data for research, analytics, product development, artificial intelligence and machine learning training, quality assurance, and commercial purposes. Once data is de-identified, it is no longer considered personal data under this Privacy Policy.
12. Individual Rights and Choices
Individuals may have rights under applicable data protection laws with respect to their personal data. Subject to applicable law and verification requirements, these rights may include the right to request access to personal data, request correction of inaccurate personal data, request deletion of personal data, obtain a copy of personal data in a portable format, and request that VERO restrict or object to certain processing activities. Individuals located in jurisdictions with enhanced privacy protections may also have the right to opt out of the sale or sharing of personal data for cross-context behavioral advertising purposes and to limit the use or disclosure of sensitive personal data.
Where required under applicable law, including certain U.S. state privacy laws, individuals may also have the right to appeal a decision made by VERO in response to a privacy rights request. VERO will provide information regarding the applicable appeal process in its response to such requests.
Individuals may exercise their rights by submitting a verifiable request to VERO using the contact information provided in this Privacy Policy or through available account settings, communication tools, or consent management mechanisms made available through VERO’s website or services. VERO may take reasonable steps to verify the identity of individuals submitting requests and may request additional information where necessary to process the request. Authorized agents may submit requests on behalf of individuals where permitted by law, subject to appropriate authorization and verification.
Certain information may be exempt from such requests under applicable law, including where retention is necessary for completing transactions, detecting security incidents, complying with legal obligations, exercising legal claims, or for other lawful purposes.
Individuals may opt out of receiving marketing communications from VERO at any time by using the unsubscribe mechanism included in such communications or by contacting VERO directly. Individuals may also manage preferences related to cookies, tracking technologies, and targeted advertising through browser settings, consent banners, or applicable third-party platforms, where available.
VERO will respond to verifiable requests within the timeframes required by applicable law. VERO will not discriminate against individuals for exercising their rights under applicable data protection laws.
13. Data Retention
VERO retains personal data for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide services, maintain business operations, comply with legal obligations, resolve disputes, and enforce agreements. Certain data may be retained for longer periods where required for fraud prevention, legal compliance, or legitimate business purposes. De-identified data may be retained indefinitely.
14. International Data Transfers
Personal data may be transferred to and processed in countries outside the jurisdiction in which it was collected. VERO implements measures designed to ensure that such transfers comply with applicable data protection laws.
15. Data Security
VERO implements reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction.
16. Children’s Privacy
VERO’s services are not directed to children under the age of 13, and VERO does not knowingly collect personal data from children under 13.
17. Changes to This Privacy Policy
VERO reserves the right to update this Privacy Policy from time to time. Updates will be reflected on the website, and the version in effect at the time of interaction will apply.
18. Contact Information
Individuals may contact VERO regarding this Privacy Policy or their personal data rights at:
hello@verostudio.com
+1 (212) 789-1070