Legal

Privacy
Policy.

Last updated: [DATE TO FILL IN]

This Privacy Policy explains how VelaOps (“we”, “us”, “our”) collects, uses and protects personal data when you visit velaops.ai or use our services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

VelaOps is a trading name of [LEGAL COMPANY NAME], a company registered in England and Wales (company number [COMPANY NUMBER]), with its registered office at [REGISTERED ADDRESS].

We are the data controller for any personal data we collect about you. If you have any questions about this policy or your data, contact us at hello@velaops.ai.

2. What data we collect

We collect the following categories of personal data:

  • Contact information: name, work email, company name — when you submit our contact form or sign up for our service.
  • Communication records: emails, call notes, and any other correspondence you share with us.
  • Business data: if you become a client, we process business data (e.g. prospect lists, CRM records, email content) strictly on your behalf to deliver the service.
  • Website usage data: IP address, browser type, pages viewed, and session duration, collected via [ANALYTICS PROVIDER — e.g. Vercel Analytics, Plausible, Google Analytics].

3. How we use your data

We use personal data for the following purposes:

  • To respond to your enquiries and deliver our services (lawful basis: contract).
  • To send you relevant updates if you've opted in (lawful basis: consent).
  • To operate and improve our website (lawful basis: legitimate interests).
  • To comply with legal obligations (lawful basis: legal obligation).

4. Data sharing

We only share personal data with:

  • Service providers who help us run our business (e.g. email infrastructure, hosting, analytics). These are bound by confidentiality and data processing agreements.
  • AI model providers (e.g. Anthropic, OpenAI) to operate the agent services — subject to their enterprise data handling terms.
  • Legal authorities where required by law.

We never sell your data.

5. International transfers

Some of our service providers are based outside the UK. Where data is transferred outside the UK, we rely on adequacy decisions or standard contractual clauses to ensure your data remains protected.

6. How long we keep data

We keep personal data only for as long as necessary. Contact enquiries are retained for [RETENTION PERIOD — e.g. 24 months]. Client business data is retained for the duration of our service agreement plus 6 months, unless you request deletion earlier.

7. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete your data (“right to erasure”)
  • Restrict or object to our processing
  • Request your data in a portable format
  • Withdraw consent at any time (where consent is the lawful basis)

To exercise any of these rights, email hello@velaops.ai. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies to operate the website and [OPTIONAL: analytics cookies to understand how visitors use the site]. You can control cookies via your browser settings.

9. Security

We take reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular security reviews. No system is perfectly secure, but we commit to notifying you promptly in the event of a data breach affecting your personal data.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website.

11. Contact

Questions about this policy? Email hello@velaops.ai.