Skip to content

Cookie Policy

1. What does this Policy cover?

This Policy describes how velipet.com stores information on your terminal device and gains access to it – using cookies and related technologies: browser local storage (localStorage), session storage (sessionStorage) and similar mechanisms. Cookies are small text files saved on your device while you browse websites. There are two main types: • Session cookies: deleted automatically when you close your browser. • Persistent cookies: remain on your device for a set period or until you delete them manually. Local storage and session storage work in a similar way, except that the data are not sent to the server with every request – they stay in the browser and are read by page scripts. In the rest of this document, unless stated otherwise, the word “cookies” also covers these technologies. The rules for processing personal data are set out in the separate Privacy Policy.

2. Who is the data controller?

The controller of the velipet.com website and of the data processed by means of cookies and related technologies is: Proteine Resources sp. z o.o. Jesionowa 11, Masłomiąca 32-091 Michałowice, Poland KRS: 0000690446 VAT ID (NIP): 5130251192 REGON: 368033566 We have not appointed a Data Protection Officer. If you have questions about personal data protection or cookies, please contact us at: hello@velipet.com

3. Why do we use cookies and on what legal basis?

We use cookies and related technologies for the following purposes: • Ensuring the site works correctly: maintaining sessions, security, authentication. • Supporting the purchase process: remembering an unfinished Pack configuration, correctly completing a payment after you return from the provider's page, and handling links for repairing or completing a payment. • Remembering user preferences: the selected language (PL/EN) and cookie preferences. • Recognising returning users and checking eligibility for introductory offers. • Analytics: data about site traffic and events, which help us improve the service. • Form handling: protection against a submission form being sent multiple times. We do not currently use cookies for marketing or advertising purposes. Storing information on your device and accessing it requires your consent, unless it is necessary to provide a service you have requested or to transmit a communication over an electronic communications network – this rule is set by electronic communications law. The processing of personal data that follows the reading of such information is a separate matter; we state the GDPR basis for each category below.

4. Types of cookies on velipet.com

Below is a detailed list of the categories of cookies and related technologies used on our site:

Essential (always active) ✅

These cookies and browser-storage entries are necessary for the site to function correctly and to carry out the actions you yourself request. They do not require consent.

  • Supabase session: authenticating users – your customer account and staff accounts in the admin panel. Duration: session, until sign-out.
  • cookie-consent: remembering your cookie choices. Duration: 12 months.
  • Pack configuration (local storage): remembering an unfinished configuration in the Configurator so you do not have to start again after refreshing the page. Duration: until the order is completed or browser storage is cleared.
  • Payment attempt and return data (session storage): correctly completing a payment after you return from the provider's page. Duration: until the browser tab is closed.
  • Payment recovery token (session and local storage): handling the link for repairing a payment or completing an order, including when opened in another tab. Duration: until the operation is completed.
  • veli-last-submit: protection against the same form being submitted multiple times. Duration: session.

Legal basis: Article 6(1)(b) GDPR (performance of a contract and steps taken to conclude it) and Article 6(1)(f) GDPR (site security).

Recognising returning users ✅

These allow us to recognise that you have been here before, and not to present an introductory offer to someone who is not entitled to it.

  • veli_pid: recognising a returning customer so we can greet you with your dog's name and remind you of an unfinished package. It holds only an opaque, signed identifier (no personal data in its contents) and is not readable by page scripts (HttpOnly). It is set only after you yourself provide your details in the configurator or sign in to your account. Duration: 180 days.
  • veli_pzn: a technical “recognised” marker (holding no data) that stops the page flashing content before recognition. Duration: 180 days.
  • Device identifier: checking eligibility for an introductory offer and preventing repeated use of the same promotion. See section 3 of the Privacy Policy.

Legal basis: Article 6(1)(f) GDPR (the controller's legitimate interest in consistent communication and in preventing abuse of offers). You have the right to object – write to hello@velipet.com.

Functional ✅

These remember user preferences. They require consent.

  • veli-lang: remembering the selected language (PL/EN). Duration: 12 months.
  • Sign-in hint (local storage): a prompt showing the sign-in method you last used, displayed on the sign-in page. Duration: until browser storage is cleared.

Legal basis: Article 6(1)(a) GDPR (user consent).

Analytics ✅

These help us understand how users interact with the site. Analytics scripts load only after analytics consent is given – until then they are neither downloaded nor executed.

  • Google Analytics 4 (loaded via Google Tag Manager): statistics on visits and on-site events (pages viewed, interactions, traffic sources). GA4 data retention period: 14 months.

Legal basis: Article 6(1)(a) GDPR (user consent).

Marketing ❌

We do not currently use marketing cookies on velipet.com. Should we introduce marketing cookies in future, we will say so in an updated version of this policy. Separate user consent will be required.

Legal basis (once introduced): Article 6(1)(a) GDPR (user consent).

5. Third-party cookies

Our site uses services from the following third parties, which may set their own cookies: On all pages: • Vercel Inc. (USA): website hosting. • Supabase Inc. (USA): application backend, user authentication. • Google Ireland Ltd. / Google LLC: Google Tag Manager and Google Analytics 4 (visit and event statistics) – scripts loaded only after analytics consent is given; and authentication, if you choose to sign in with a Google account. • Resend Inc. (USA): sending transactional e-mail (confirmations, notifications). In the purchase process only: • Stripe Payments Europe Ltd. (Ireland): the payment form for cards and for the Apple Pay and Google Pay wallets is loaded directly from the provider, which sets its own cookies to secure the transaction and detect fraud. • Krajowy Integrator Płatności S.A. (Tpay): handling BLIK payments and online transfers after redirection to the provider. • InPost S.A.: the collection point map tool, loaded directly from the carrier and started only once parcel locker delivery has been chosen. The payment providers' cookies serve to carry out the transaction you have requested and to prevent payment fraud; we treat them as essential. The above entities may process data outside the European Economic Area (EEA). Transfers take place on the basis of the safeguards provided for in Chapter V GDPR – a European Commission adequacy decision or standard contractual clauses compliant with Article 46(2)(c) GDPR. We recommend reading the privacy policies of the providers listed.

6. How long do we keep cookies?

The retention period depends on the category: • Session cookies and session storage: deleted automatically when the browser or tab is closed. • Preference cookies (language, consents): 12 months from being set. • Recognition of returning users: 180 days. • Local storage (Pack configuration, sign-in hint): until the order is completed or you clear it manually. • Analytics data in Google Analytics 4: the retention period is set to 14 months. • Third-party cookies: in accordance with those parties' policies. Exact retention periods may vary depending on updates made by service providers.

7. Managing your cookie preferences

You have full control over cookies: • Cookie banner: on your first visit we display a banner allowing you to accept all cookies, reject non-essential ones or manage your preferences. Rejecting is just as easy as accepting and does not limit your access to the site or to making purchases. • Cookie settings: you can change your preferences at any time by clicking “Cookie settings” in the site footer. Withdrawing consent does not affect the lawfulness of actions taken before its withdrawal. • Browser settings: you can delete or block cookies directly in your browser settings and clear local storage. ⚠️ Please note: deleting data saved in local storage will discard any unfinished Pack configuration, and blocking essential cookies may make it impossible to sign in and complete an order.

8. Your rights and policy updates

The rights available to you in connection with the processing of personal data – access, rectification, erasure, restriction, portability, objection and withdrawal of consent – and how to exercise them are set out in the Privacy Policy. You also have the right to lodge a complaint with the President of the Personal Data Protection Office. This cookie policy may be updated from time to time in connection with changes in the law, the introduction of new tools or changes in the scope of data processing. The current version of the policy is always available at velipet.com/cookie-policy. In the event of material changes we will inform users via the cookie banner or a notice on the site; if a change introduces a new category requiring consent, we will collect consent again.

Last updated: August 3, 2026