The short version. We collect what you type into the Build Map form, and we record which ad or link brought you here. We use it to answer you and to build your map. We do not sell it, we do not run advertising trackers on this site, and you can ask us to delete all of it at any time.

Who we are

This site is operated by [LEGAL ENTITY NAME], trading as Velos Operations, of [REGISTERED ADDRESS]. Where privacy law makes someone accountable for decisions about your data, that is us. Questions, requests and complaints go to [PRIVACY CONTACT EMAIL].

What we collect

What you type into the form

Your name, email address, phone number, business name, website, the monthly revenue band you select, and whatever you write in the box about what is eating your week. Only the name and email are required — everything else you can leave blank, and the form will still send.

How you got here

When you arrive we record the campaign tags on the link you followed (utm_source, utm_medium, utm_campaign,utm_content), the page you landed on including its query string, and — if the link carried no tags — the website that referred you. This is how we tell which advertising is worth paying for. It is attached to your enquiry when you submit the form, and it is discarded if you never do.

What our hosting records on its own

Our host keeps ordinary server logs: IP address, browser user-agent, the pages requested and when. We use them to keep the site up and to stop abuse of the enquiry form. We do not use them to build a profile of you.

Why we hold it, and on what basis

To answer you and produce your Build Map. This is the thing you asked us to do, so we are acting on your request and on our legitimate interest in running a business you contacted.
To decide where to advertise. Our legitimate interest in not spending money on channels that do not work.
To keep the site standing. Our legitimate interest in security and availability.

We do not make automated decisions that produce legal effects for you. An AI agent drafts a first reply, but a person reads and approves it before anything is sent — that gate is built into our own system, not a promise on a page.

Who else touches it

We keep the list short on purpose, and everyone on it processes your data on our instructions:

Vercel — hosts this site and our internal system, and keeps the server logs described above.
Supabase — the database your enquiry is stored in.
Anthropic — drafts the first reply to your enquiry. Your name, business, website and what you wrote are sent for that draft. It is not used to train their models.
Our email and calendar providers — to actually reach you and book the call.

We do not sell your data, we do not rent it, and we do not hand it to advertising networks. Some of these providers operate in the United States; where that means an international transfer, it is covered by the standard contractual protections those providers offer.

Cookies and tracking

This site sets no cookies. There is no advertising pixel and no analytics script on any page. The web fonts are served from our own domain, so simply loading a page here does not call out to anybody else.

The one thing we do store in your browser is the campaign information described above, held in sessionStorage so it survives you clicking through to this page and back. It never leaves your browser unless you submit the form, and it is erased when you close the tab.

If we ever add an advertising pixel or analytics, this page changes before it goes live, and anything that needs consent will ask for it.

How long we keep it

If you become a client, for as long as we work together and then for as long as tax and contract law require us to keep the records. If you do not, we keep the enquiry for up to 24 months so that a later conversation starts from context rather than from nothing — then we delete it. Server logs roll off far sooner. You can shorten any of this by asking.

Your rights

Wherever you are, we will honour these:

A copy of what we hold about you.
Correction of anything wrong.
Deletion — and unless the law requires us to keep a record, we will actually delete it rather than flag it hidden.
An objection to us using your details to follow up, which we will action immediately.
Your data handed back in a portable format.

Email [PRIVACY CONTACT EMAIL] and we will respond within 30 days. We will not ask you why. If you are in the UK or EU and you think we have handled this badly, you can also complain to your national data protection authority.

Security

Your enquiry travels to us over TLS and is stored in a database with row-level access control. The public site holds no database credentials at all — it forwards to our internal system over an authenticated channel, which is why a compromise of this marketing site could not expose client records. Access inside Velos is limited to the people who need it.

Children

This is a service sold to businesses. It is not directed at anyone under 18, and we do not knowingly collect their information. If you believe a child has sent us something, tell us and we will remove it.

Changes

When this policy changes, the date at the top changes with it. If a change matters — new categories of data, a new processor, a different purpose — we will say so plainly here rather than quietly reissuing the page.

Contact

[PRIVACY CONTACT EMAIL] reaches a person, not a queue.