This policy explains how Velox Studio handles personal information when you visit our website or get in touch about our services. It is written to be clear and practical; have it reviewed by qualified legal counsel before relying on it for regulated industries, large-scale processing, or advertising compliance.
Summary
We collect limited information to run the site, respond to enquiries, and deliver projects if you become a client. We do not sell your personal information. Where we use analytics or email tools, we aim to configure them responsibly and document subprocessors below.
Who we are
Velox Studio operates this website and provides web design, development, and related digital services. For privacy requests, use the contact section on our main site (or the email you use for client work, if you are already engaged with us).
Information we collect
Information you provide
When you submit our contact or lead form, we may receive your name, email address, company or business type, budget range, project description, and any other fields you choose to fill in. If you email us directly, we process the contents of that message and standard email headers.
Information collected automatically
Like most websites, our hosting and infrastructure may log technical data such as IP address (often truncated or aggregated), browser type, device type, referring URL, and timestamps. This helps us secure the site, fix errors, and understand aggregate traffic patterns.
How we use information
- To reply to enquiries and qualify fit for our services.
- To prepare proposals, statements of work, invoices, and deliverables if you engage us.
- To operate, secure, and improve the website (including debugging and abuse prevention).
- To comply with law, enforce our terms, or protect rights and safety where required.
We do not use contact form data to train public AI models. If we ever introduce optional features that process submissions differently, we will update this policy and, where needed, obtain consent.
Legal bases (EEA / UK)
If data protection law in your region requires a "legal basis", we typically rely on: contract (steps before a contract or performing a contract), legitimate interests (running a professional site, security, limited analytics), and consent where we ask for it (e.g. non-essential cookies or marketing, if offered). You may object to certain processing where applicable law allows.
Cookies & similar technologies
We may use cookies or local storage for essential site function, preferences, or—when enabled—analytics and marketing pixels (for example Google Analytics, Meta Pixel, or similar). Those tools may set their own cookies and are governed by their providers' policies. You can control cookies through your browser settings and, where we provide one, a consent banner or preference centre.
Sharing & subprocessors
We share information with service providers who help us operate the business, such as hosting (e.g. Vercel or similar), email delivery (e.g. Resend), form/lead routing (e.g. webhooks or spreadsheets), analytics providers, and payment or accounting tools if you become a client. We choose vendors with reasonable security practices and use contracts or terms where appropriate.
We may disclose information if required by law, court order, or competent authority, or to protect Velox Studio, our users, or the public from harm or fraud.
Retention
We keep enquiry and client records only as long as needed for the purposes above, including legitimate business, accounting, and legal requirements. Technical logs may be retained for a shorter rotation unless needed for security investigations.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or export certain personal data, and to withdraw consent where processing is consent-based. You may also have the right to complain to a supervisory authority. To exercise rights, contact us via the contact form; we may need to verify your request.
International transfers
We may process data in countries where we or our providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) or other mechanisms recognised by applicable law.
Security
We implement reasonable technical and organisational measures—HTTPS, access controls on third-party dashboards, and least-privilege practices where feasible. No method of transmission or storage is completely secure; we encourage strong passwords on your side and caution when sharing sensitive information by email.
Children
Our services are directed at businesses and adults. We do not knowingly collect personal information from children under the age where parental consent is required in their jurisdiction. If you believe we have done so in error, contact us and we will delete it promptly where appropriate.
Changes to this policy
We may update this page to reflect new features, vendors, or legal requirements. The "Last updated" date at the top will change when we publish a revision. For material changes, we may also post a notice on the site or contact active clients where appropriate.
Contact
Questions about this policy or your data? Reach out through our contact form on the homepage, or use the business email you already have on file if you are a client.