Privacy policy

Controller

Velnor. You can reach the person responsible for processing your data at [email protected].

What data we handle

Whatever you provide through the contact form, over WhatsApp or when contracting: name, email, your website URL, the message, and — to issue the invoice — your tax ID and address. Nothing else.

Why

Only to answer your enquiry and, if we decide to work together, manage the service. We don't send marketing or newsletters without your permission.

Legal basis and retention

The basis is your consent when contacting us. We keep the data as long as needed to assist you and meet our legal obligations; after that we delete it.

Recipients and providers

We don't sell your data or hand it over for others' own purposes. To provide the service we rely on providers that process it in order to give us that service; we may also disclose data where legally required.

Contact form (Cloudflare and Brevo). Cloudflare hosts the site and runs anti-spam verification with Turnstile, which loads when the form opens; Brevo sends the message by email. Basis: your consent when contacting us. Retention: as long as it takes to handle your enquiry and any applicable legal obligations.

WhatsApp (Meta Platforms). If you message us on WhatsApp we process your number and the content of the conversation: it is the channel we reply on and, if you contract, the channel the service is delivered through. Basis: your consent in using that channel and, if you contract, performance of the contract. Retention: while the relationship lasts and the invoicing obligations apply.

AI model provider. The text of the conversation and what you tell us about your business is sent to an AI model provider, which processes it so we can draft replies and build your site. Basis: enabling the service you ask us for. Retention: while the conversation and the delivery of the service last.

Stripe (payments). Payment is handled by Stripe from the checkout itself: your card number is processed by Stripe and we don't store it. To issue the invoice we process your tax ID and address. Basis: performance of the contract and the legal obligation to invoice. Retention: invoices for the period set by law.

Email forwarding (only if you contract it). If you contract domain email, messages are routed through the provider we tell you about when you contract, which processes them to deliver that service. Basis: performance of the contract. Retention: while the service lasts.

International transfers

Some of these providers may process data outside the European Economic Area. We don't announce a specific region here because it depends on each provider: ask us before contracting and we will confirm it in detail. Whenever a transfer takes place, European rules require an adequate safeguard (an adequacy decision or standard contractual clauses).

Your rights

You can access, rectify, erase, restrict or object to the processing of your data, and request portability, by writing to [email protected]. You may also lodge a complaint with your data protection authority.