Last updated 8 August 2026.
Velvet Sylph LLC runs velvetsylph.com. This explains what we collect, why, and what we do not do. Questions go to contact@velvetsylph.com and a real person answers.
The short version
We collect what we need to take your order, send you a bottle, and write to you if you asked us to. We do not run advertising trackers, we do not sell your information, and we do not share it with anyone except the companies that actually handle payment and delivery.
Our Commitment to Your Privacy
When you order: your name, email address, shipping and billing address, and your phone number if you give us one. Also what you bought and when.
When you join The Letter: your email address.
When you make an account: your email address and a password, which is stored scrambled and cannot be read by us.
Automatically: our server keeps standard logs including your IP address, browser type and the pages you requested. These are used to run and secure the site, including blocking repeated failed logins, and they age out on their own.
Payment
Card payments are handled by Stripe. Your full card number goes to Stripe, not to us, and we never see or store it. We keep a record of the amount, the last four digits, and whether the payment succeeded.
Stripe’s scripts load on our checkout, including a fraud-prevention script, which Stripe uses to tell real shoppers apart from card testing. Stripe’s own privacy policy governs what they do with it.
The Keyholders membership
If you join The Keyholders, it is a paid membership that renews once a year at $12 until you cancel. To renew it without asking you to type your card in again, Stripe stores your payment method against your customer record and we charge it on the renewal date. We hold the reference Stripe gives us, never the card number.
You can cancel at any time from your account, or by writing to contact@velvetsylph.com. Cancelling stops the next renewal. We will tell you before the first renewal so it is never a surprise charge.
Store credit earned through the membership is held against your account so we can apply it to your next order.
Bot protection
Our forms and login are protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a script. To do that, Cloudflare sees your IP address and some browser characteristics. It does not track you across other websites and it is not an advertising product. This is here because the store has been targeted by automated card testing before, and it is what keeps that off your checkout.
Our mailing list runs on software installed on our own server, so subscriber addresses stay in our database rather than being uploaded to a third-party marketing platform.
If you join The Letter we will write about new scents, restocks and occasional offers. Every one of those has an unsubscribe link and it works immediately. Order and delivery emails are part of the service, so those keep coming as long as you have an open order.
Who else touches your information
- Stripe, to take payment, to store your payment method if you hold a membership that renews, and to prevent fraud.
- Cloudflare, whose Turnstile check screens our forms for bots.
- Our shipping carriers, who need your delivery address to deliver.
- WooCommerce Shipping, which we use to calculate rates and print labels.
- Akismet, which screens form submissions for spam.
- WooCommerce receives non-personal statistics about how the store itself is used. No customer details are included.
That is the whole list. We do not sell, rent or trade your information, and we do not hand it to advertisers or data brokers.
What we do not do
We do not run Google Analytics. We do not run a Meta, TikTok or any other advertising pixel. We do not retarget you around the internet after you visit. There are no advertising cookies on this site.
Cookies
The cookies here do four jobs: remember what is in your cart, keep you signed in if you have an account, let Stripe check that a payment is genuine, and let Cloudflare’s bot check know you have already passed it. That is all of them. None of them are advertising cookies.
How long we keep things
Order records are kept for as long as tax and accounting law requires, which in practice means several years. Membership records are kept while the membership is active and then with your order history. Subscriber addresses are kept until you unsubscribe. Server logs age out on their own within a short period.
Your choices
Write to contact@velvetsylph.com and you can ask us to show you what we hold about you, correct it, or delete it. We will do it. If you are in a state with specific privacy rights, such as California, those rights apply and this is how you use them. We will not treat you differently for asking.
You can unsubscribe from marketing email at any time from the link in any of those emails.
Children
This site is not intended for anyone under 18 and we do not knowingly collect information from children.
Changes
If this changes we will update the date at the top. If it changes in a way that matters, we will say so.
Contact
Velvet Sylph LLC
contact@velvetsylph.com