Velavera

Privacy Policy

Last updated: June 2026

This policy explains what personal data Velavera Limited collects through its waitlist, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is Velavera Limited, a company registered in England and Wales. Our contact email is omar.dean@velavera.ai.

2. What we collect

When you join our waitlist, we collect:

Your email address — the only field on the waitlist form.
The date and time of your submission, captured automatically.
Basic referral source data if you arrive via a tracked link (e.g. which ad or post you clicked).

We do not collect health data, financial data, or any special-category data at this stage. We do not use cookies beyond those strictly necessary for the form to function.

3. Why we collect it and our lawful basis

We collect your email address to:

Notify you when early access opens — lawful basis: consent (Article 6(1)(a) UK GDPR). You gave consent by submitting the form.
Send occasional updates about Velavera's development — same lawful basis: consent.

You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email we send, or by emailing us directly.

4. How long we keep your data

We keep your email address on the waitlist until you unsubscribe or request deletion, or until 24 months after your sign-up date, whichever comes first. After that point we delete your data automatically.

5. Who we share your data with

We do not sell your personal data. We use the following third-party processors, each bound by their own GDPR-compliant terms:

Netlify — hosts this website and receives form submissions. Data is stored in the US under Standard Contractual Clauses.
Mailchimp (Intuit) — email marketing platform (if you are added to our mailing list). Data stored in the US under Standard Contractual Clauses.

We will not share your data with any other third party without your explicit consent, except where required by law.

6. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Erase your data ("right to be forgotten"). We will action erasure requests within 72 hours from our systems and propagate the deletion to third-party processors within 7 days.
Object to processing or withdraw consent at any time.
Data portability — receive your data in a machine-readable format.
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.

To exercise any of these rights, email us at omar.dean@velavera.ai. We will respond within 30 days.

7. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS (TLS 1.3). Form submissions are encrypted in transit.

8. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date above and notify waitlist members by email before the changes take effect.

9. Contact us

Any questions about this policy? Email us at omar.dean@velavera.ai.