Privacy Policy

Last updated: 01 November 2026

Vero Bello, Keizersgracht 391 A, 1016 EJ Amsterdam, the Netherlands ("Vero Bello", "we", "us" or "our"), operates two websites and the digital services made available through them (collectively, the "Services"):

• verobello.store (the "Store"), where products are offered for sale; and
• verobello.cards (the "Prayer Card Service"), where prayer cards for Apple Wallet and prayer pages are made available.

We are the controller of the personal information described in this Privacy Policy.

This Privacy Policy describes how we collect, use, disclose and otherwise process your personal information when you visit, access or use the Services, make a purchase, add or use a prayer card, or otherwise communicate with us.

The two Services work differently. Part 1 describes the Store. Part 2 describes the Prayer Card Service. Part 3 describes the connection between them. Part 4 applies to both.

If there is a conflict between our Terms of Service and this Privacy Policy with respect to the collection, processing, use or disclosure of personal information, this Privacy Policy controls.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of information as described below.

When we use the term "personal information," we mean information that identifies you, relates to you, describes you, or can reasonably be linked to you or another identifiable person. Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably be linked to an identifiable person.

Part 1 — The Store (verobello.store)

What we collect

Depending on how you interact with the Store, we may collect or process the following categories of personal information:

• Contact information, including your name, billing address, shipping address, telephone number and email address.
• Financial and payment information, including payment method, payment confirmation, transaction details and other information associated with payments. Card details, and the details of Apple Pay and Google Pay payments, are processed directly by our payment provider and are not stored by us.
• Account information, if you create a customer account, including your username, password or other credentials, and your preferences.
• Transaction information, including products you view, add to your bag, purchase, return, exchange or cancel, together with your transaction history.
• Communications with us, including the content of emails and other correspondence you send to us.
• Device and usage information, including your browser, device, IP address and how you navigate the Store, collected through cookies, server logs and, where permitted, analytics.
• Card visit information: if you arrive from a link on a Vero Bello prayer card, the random serial number of that card, as described in Part 3.

Sources

We collect this information directly from you; automatically from your device when you use the Store; from our payment provider; and, for visits from a prayer card, from the Prayer Card Service.

How we use it

• To provide the Store: to process payments, produce and fulfill orders, arrange shipping, administer returns and refunds, and respond to requests.
• To communicate with you: to send order confirmations, shipping, refund and other transactional messages, and to respond to your messages.
• Security and fraud prevention: to protect the Store, detect or prevent fraud and abuse, and secure payments.
• Analytics: to understand how the Store is used, measure sales and improve the Store, where permitted by applicable law.
• Card prices and attribution: to recognize a visit that began from a prayer card, to apply any prices offered for such visits, and to understand which purchases follow from a card, as described in Part 3.
• Legal and compliance purposes: to keep business and tax records, comply with applicable law, and establish, exercise or defend legal claims.

We do not currently send marketing emails from the Store. If we begin to do so, we will send them only where permitted by applicable law, and each will include a way to unsubscribe.

Whom we share it with

• Payment provider, which processes card, Apple Pay and Google Pay payments, and may use device and transaction information to prevent fraud.
• Production and fulfillment partner, which prints and ships your order and receives the items ordered and your name, shipping address and, where needed for delivery, your telephone number or email address.
• Shipping carriers and customs authorities, as needed to deliver your order.
• Hosting provider, which hosts the Store, its database and its backups.
• Email delivery provider, which sends our transactional emails. That provider records whether an email was delivered and, where tracking is enabled, whether it was opened and which links were clicked.
• Analytics provider, as described under Cookies below.
• Professional advisers, authorities and parties to a business transaction, as described in Part 4.

Cookies and similar technologies on the Store

The Store uses cookies and similar technologies to operate the bag and checkout, keep you signed in where you have an account, remember a visit from a prayer card, prevent fraud and, where permitted, measure use of the Store. These include:

• Shopping cookies set by the store software, which keep your bag and checkout session.
• Payment cookies set by our payment provider on checkout pages, used to process payments and prevent fraud.
• vb_devotion: a random identifier, kept for seven days, set only when you arrive from a prayer card (Part 3).
• Analytics cookies: the Store uses a web analytics service to measure page views, product views, additions to and removals from the bag, checkout and purchases. For visitors in Europe, analytics are off until consent is given. Advertising features and the analytics provider's data sharing are turned off.

Your browser or device may allow you to control certain cookies or similar technologies. Disabling certain technologies may affect the availability or operation of portions of the Store. Where applicable law requires consent before certain cookies or similar technologies are used, we will seek that consent as required.

How long we keep it

We keep order and payment records for as long as needed to fulfill and support the order, and afterwards for as long as we are required to keep business and tax records. Backups of the Store are made weekly by our hosting provider and replaced on its schedule.

Part 2 — The Prayer Card Service (verobello.cards)

No account, but not no record

You do not need an account, a name, an email address or a telephone number to use a prayer card, and we do not ask for them. That does not make the use of a card completely anonymous. A card has a random serial number, and the records below are kept against it. Your device's connection to our servers, and to Apple's, also involves an IP address.

What we keep about a card

When you add a card, our servers create a record that contains:

• a random serial number and random codes used in the card's own links and in its share link;
• the kind of card, the dates of its devotion, the time zone used to turn its day, and the hour of its daily reminder, or that no reminder is wanted;
• the time the card was created and first added to a Wallet;
• for cards that track progress, which readings and prayer pages have been opened, so that each can be marked as done;
• if the card came from someone else's invitation, the share code of the card that invited it, which forms a record of which card invited which; and
• the settings you choose on the card's settings page.

What Apple Wallet gives us

When a card is added to Apple Wallet, Wallet registers it with our servers and gives us a device library identifier and a push token for that card on that device. We use them only to send the card its updates and reminders. They do not tell us who you are, your Apple ID or your telephone number. When a card is removed from Wallet, Wallet normally tells our servers, and we delete that registration; a push token that Apple reports as no longer valid is also deleted.

When Wallet registers a card, we set the card's time zone from the approximate region of the connection, as provided by our hosting provider. We store the time zone; we do not store the IP address. You may change the time zone on the card's settings page.

We also record the time Wallet last fetched an updated card, so that the settings page can confirm that an update has reached your device.

Use counts and page views

We record a time-stamped entry, against the card's serial number, when a card is downloaded, added to a Wallet or removed from it, when a link on the back of the card is opened, when the card's share link or invitation is opened by someone, when someone adds a card through that invitation, when a daily prayer link is opened on another device, and when the card's link to the Store is used. We also record each page served by the site, with the time and the page's address, and the card's serial number only where the page's address contains the card's own code. These entries do not contain a name, an email address, an IP address or a browser identifier.

There is no analytics or advertising tag on the pages of verobello.cards.

Updates and reminders

To update a card or deliver its reminder, our servers send a notification through Apple's push notification service to the push token for that card. The notification carries no content; your device then fetches the updated card from our servers.

Storage in your browser

• vb_<kind> (for example vb_rosary): a cookie holding the serial number of the card your browser was given, kept for 400 days, so that a second tap returns the same card rather than a new one.
• vb_touch: a cookie, kept for one year, set only on a computer with a touch screen, so that the site shows the right layout.
• Prayer counts: the prayers you count on a prayer page are kept in your browser's local storage under the day's date, and are cleared on a later day. They are not sent to us.
• Cards seen: a list of the kinds of card opened in this browser is kept in local storage, so that the site does not suggest a card you already have. It is not sent to us.
• Reviewers and testers who are given a password may receive a session cookie for that purpose.

Email

The Prayer Card Service does not send email to card holders. If you write to us, we keep your message and our reply in our mailbox.

Server logs and security

Our hosting provider processes IP addresses and request information to deliver the site, and keeps its own logs under its own retention schedule. Our application holds an IP address in memory for up to one hour to limit repeated downloads, and does not write it to our database. Our application logs record errors and technical messages sent by Wallet; they are not used to identify anyone.

How long we keep it

• A card that is never added to a Wallet is deleted after thirty-three days.
• A card that has been added to a Wallet is kept, including after it is removed from Wallet. We do not currently delete such cards automatically.
• Use counts, page views and invitation records are kept after a card is deleted, so that counts remain correct. We do not currently delete them.
• Wallet registrations are deleted when a card is removed from Wallet and Wallet tells us, or when Apple reports the push token as no longer valid.

If you would like the record of your card deleted, write to us and include the card's settings link (MANAGE on the back of the card), which is how we can identify the card without knowing who you are.

Whom we share it with

The card records are kept by our hosting provider. Device library identifiers and push tokens are shared with Apple only to deliver updates. We do not sell card records or share them with advertisers.

Part 3 — From a Card to the Store

The back of a card may carry a link to the Store. When you follow it, the Prayer Card Service records that the card has used its Store link, and sends you to the Store with a signed link that contains the card's random serial number. That link can be used once and expires after ten minutes.

When the Store accepts the link, it sets the vb_devotion cookie in your browser, containing a random identifier, and keeps the card's serial number on the Store's server against that identifier for seven days, so that the Store can recognize the visit and apply any prices offered to card holders.

If you place an order during that visit, the card's serial number is saved with the order. The order also contains your name, contact details and shipping address. This means that our Store records can connect a particular prayer card to a particular purchase and purchaser. We use this connection to understand which purchases follow from the cards. We do not send your name, address or order details to the Prayer Card Service, and we do not use the connection to change the content of your card.

Part 4 — Both Services

Legal bases

Where the law of the European Economic Area or the United Kingdom applies, we rely on: the performance of a contract, to process orders and to provide a card you have asked for; our legitimate interests, to operate, secure and improve the Services, to understand how they are used and to connect card visits to purchases; your consent, for analytics cookies where consent is required; and legal obligations, to keep business and tax records.

Other disclosures

We may also disclose personal information:

• to third parties when you direct us to disclose information or otherwise consent to the disclosure;
• to our affiliates or entities within our corporate group;
• to government authorities, courts, regulators, law-enforcement bodies or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security or property; and
• to parties involved in an actual or proposed merger, acquisition, financing, restructuring, sale of assets, insolvency or similar business transaction.

Third-party websites and links

The Services contain links to third-party websites, including daily readings published by the USCCB, Magnificat and Wikipedia, and use third-party services such as Apple Wallet. We are not responsible for the privacy, security or other practices of third parties. Information provided directly to a third party is subject to that party's terms and privacy policies.

Children's data

The Services are not directed to children, and we do not knowingly collect personal information from children in violation of applicable law. If you believe that a child has provided personal information to us improperly, please contact us so that we can review the matter and take appropriate action.

Security

We use administrative, technical and organizational measures that we consider appropriate to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. No method of electronic transmission, storage or security is completely secure, and we cannot guarantee absolute security.

Your rights and choices

Depending on where you live and applicable law, you may have rights relating to your personal information. These may include the right to request access to, correction of, deletion of or portability of your personal information, or to object to or restrict certain processing. Where we rely on consent, you may withdraw it at any time.

Some rights are subject to exceptions or limitations under applicable law. We may need to verify your identity before processing certain requests. For a prayer card, we verify the request by the card's settings link rather than by your identity.

Where permitted by applicable law, an authorized agent may submit a request on your behalf. We may require evidence of the agent's authority and may also need to verify your identity directly.

To submit a privacy request, contact us using the information provided below.

You may stop a card's reminders on its settings page, and stop its updates entirely by removing it from Apple Wallet.

Complaints

If you have a complaint or concern regarding our handling of personal information, please contact us using the information below. Depending on your location, you may also have the right to lodge a complaint with a competent privacy or data-protection authority; in the Netherlands, this is the Autoriteit Persoonsgegevens.

International transfers

Vero Bello and the service providers we use may process or store information in countries other than the country in which you are located, including the United States. Where required by applicable law, we use appropriate safeguards or other lawful mechanisms for transfers of personal information between jurisdictions.

Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, Services, technologies, legal requirements or other circumstances. When we make changes, we may revise the "Last updated" date at the top of this Privacy Policy and take additional steps where required by applicable law.

Contact

Vero Bello Keizersgracht 391 A 1016 EJ Amsterdam The Netherlands

Email: avemaria@verobello.cards