Seller compliance, data privacy, and cookies

When you receive form submissions, book appointments, or accept card payments on your site, your customers are trusting you with their personal information. Here is how véltica protects that data under the hood and what responsibilities you hold as the business owner.

How véltica protects your customers’ data and how cookie consent works on published sites

The architecture of sites published on véltica is built to minimize unnecessary data collection and comply with modern privacy regulations:

• Privacy-friendly analytics: built-in metrics in Analytics → Visits are counted on the server without placing third-party advertising cookies or tracking your visitors across other websites.
• Encrypted connections (HTTPS) by default: both your .veltica.com subdomain and any custom domain you connect or buy through véltica include an automatic SSL certificate so form submissions and booking details always travel encrypted.
• Payments processed directly by Stripe: your buyers’ full card numbers are never stored on your site or on véltica’s servers; they are processed directly by Stripe under the PCI-DSS banking security standard.
• Cookie and marketing consent:
  • If you connect external measurement tools or custom head code (such as Google Analytics 4 or ad pixels), you must respect visitor cookie consent wherever your country’s laws or your visitors’ regional laws require it (such as the GDPR in Spain and the European Union).
  • On your contact forms, you can add a marketing consent checkbox (“I want to receive news and updates”) so only people who explicitly opt in are subscribed to email marketing campaigns (for example, in Omnisend).
• Honoring privacy rights (ARCO, GDPR, CCPA): if a customer writes to the contact email listed in your Privacy policy asking to access, correct, or delete their personal data, you can look them up by email in Contacts and edit or permanently delete their contact record along with all associated messages.

Responsibilities when selling or booking appointments online (acceptable use rules and Stripe requirements)

When you publish offers in your catalogue or connect Stripe Connect in Settings → Stripe, payments are processed as direct charges on your own connected account. To keep your account in good standing and avoid holds or blocks, keep these core rules in mind:

1. Visible identity and policies: always keep your trading name, address, and contact email up to date in Settings → Business information, and publish your privacy, terms, and refund policies in Settings → Policies. Both card networks and Stripe require buyers to see who they are buying from and what the refund or cancellation terms are before paying.
2. Permitted activities and products: you may not use véltica or your payment gateway to sell illegal goods, counterfeits, fraudulent content, or services listed on Stripe’s restricted businesses list.
3. Honoring deliveries and appointments: deliver physical goods, digital files, or booked services within the timeframes promised in your offer. If you need to cancel an already-paid appointment or run out of stock on a product, let the customer know and issue the appropriate refund from Sales → Payments to avoid the buyer opening a bank dispute (chargeback).
4. Responding to disputes on time: if a buyer files a dispute with their bank, you’ll see a banner alert in your dashboard and under Sales → Payments. Remember that bank deadlines for submitting evidence or accepting a dispute are strict and set directly by Stripe.