Help me understand my responsibilities
and protect my customers’ data.
Understand how your store handles personal information, which controls Vela provides and what you need to do as a merchant. This is a shared responsibility—not a certification or a substitute for legal advice.
My data handling
Your store uses managed hosting and service providers. Processing may take place across borders; review the Privacy Policy and Data Processing Agreement for responsibilities and safeguards.
Encryption
Connections use encryption in transit and stored records use managed encryption at rest. Additional requirements must be assessed and agreed in writing.
My customers’ privacy choices
Cookie preference controls and privacy templates help you explain your use of information. You remain responsible for the notices and services enabled on your store.
Access controls
Manage your staff permissions and review who has access to your store. Keep credentials secure and remove access when team members leave.
My store’s access boundaries
Store-level access rules restrict business records to authorised users. Any additional separation requirements need a written agreement.
Operational practices
Vela handles service maintenance and security investigations. Report suspected issues promptly and check your agreement for notification and support commitments.
What Vela handles. What I need to do.
What Vela handles
- · Managed hosting, encryption and store access boundaries.
- · Cookie preference controls and starter legal templates.
- · Platform-level patching, monitoring, incident response.
- · Investigation of reported service and security issues.
What I need to do
- · POPIA registration and lawful processing basis.
- · Customer-facing privacy notice and consent flows.
- · Staff access reviews and least-privilege role assignment.
- · Product, pricing, and contract terms with end-customers.
Note on regulatory wording: Vela does not claim POPIA, ISO, or PCI-DSS certification on this page. Specific certifications and audit reports available to a given merchant are confirmed in writing under contract.