Privacy Policy

VeloGrid Labs provides business systems, CRM implementation, automation, AI solutions, website development and consulting services. This Privacy Policy explains what information we collect when you visit our website or engage our services, why we collect it, and the choices you have.

We keep data collection deliberately minimal. We only ask for information that is genuinely required to respond to an enquiry, scope a project or deliver a service.

Depending on how you interact with us, we may collect the following categories of information:

• Contact details you submit — name, business email, phone number, company name and country.
• Business context you provide — industry, company size, service interest, estimated budget and preferred timeline.
• Message content — anything you choose to write in a form, email or chat.
• Technical data — IP address, browser type, device type, referring page and pages viewed.
• Cookie and analytics data — as described in our Cookie Policy.
• Project data — information shared with us during a paid engagement, handled under the confidentiality terms of your contract.

We do not intentionally collect special category data (such as health, biometric or political data) through this website.

• Responding to enquiries and preparing proposals or quotations.
• Delivering, supporting and improving the services you have engaged us for.
• Sending service-related communications such as project updates and invoices.
• Improving our website experience and understanding which content is useful.
• Meeting legal, accounting and record-keeping obligations.
• Preventing fraud, abuse and security incidents.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

Where GDPR or UK GDPR applies, we rely on the following lawful bases:

• Consent — for optional cookies, analytics and marketing communications.
• Contract — to provide services you have requested or to take steps before entering a contract.
• Legitimate interests — to operate, secure and improve our business, balanced against your rights.
• Legal obligation — to comply with tax, accounting and regulatory requirements.

We use a small number of cookies to keep the site working and, with your consent, to understand how it is used. Full detail, including categories and how to control them, is available in our Cookie Policy.

We may use privacy-respecting analytics to measure aggregate traffic, page performance and which content leads to enquiries. Analytics data is used in aggregate and is not used to build advertising profiles.

Analytics is only activated where consent has been given, or where the analytics provider operates in a cookieless, non-identifying mode.

We work with a limited set of trusted providers to run our business. These may include:

• Website hosting and content delivery providers.
• CRM and customer relationship platforms used to manage enquiries.
• Email and communication providers.
• Analytics providers.
• Payment and accounting providers for invoicing.

Each provider only receives the information required to perform its function and is bound by its own contractual and data protection obligations.

We operate with clients and providers in multiple countries, so your information may be processed outside your country of residence. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We apply reasonable technical and organisational measures appropriate to the sensitivity of the information we handle. These include encrypted connections, access controls, least-privilege principles and vetted providers.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we do commit to acting quickly and transparently if an incident affects your data.

• Enquiry data — retained while the opportunity is active and for a reasonable follow-up period thereafter.
• Client project data — retained for the duration of the engagement and any agreed support period.
• Financial records — retained for the period required by applicable tax and accounting law.
• Analytics data — retained in aggregate form only.

When information is no longer required, it is deleted or irreversibly anonymised.

Subject to your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information.
• Object to or restrict certain processing.
• Withdraw consent at any time, without affecting prior lawful processing.
• Request a portable copy of information you provided to us.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us using the details at the end of this policy. We aim to respond within 30 days.

For individuals in the European Economic Area, VeloGrid Labs acts as a data controller for information collected through this website, and as a data processor for client data handled during a project engagement.

Where we act as a processor, processing is governed by the data processing terms of the relevant client agreement, including instructions, confidentiality, sub-processor disclosure and deletion on termination.

For individuals in the United Kingdom, equivalent rights apply under the UK GDPR and the Data Protection Act 2018. Complaints may be directed to the Information Commissioner's Office (ICO).

California residents may request disclosure of the categories of personal information collected, request deletion, and opt out of any sale or sharing of personal information.

VeloGrid Labs does not sell or share personal information as those terms are defined under the CCPA/CPRA. You will never be discriminated against for exercising your privacy rights.

Our services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

We may update this Privacy Policy as our services, providers or legal obligations change. The revision date at the top of this page always reflects the current version, and material changes will be highlighted on the website.