Privacy Notice
Version 2.0 · effective 25 August 2026
This notice explains how data is handled on the Velira website. We do not use advertising cookies, marketing pixels or behavioural analytics. The form sends only the information needed to answer your enquiry.
2. Data we process
- Enquiry data: your name or brand, chosen contact detail, brief and selected service format.
- Communications: later messages, approvals, files and decisions that you voluntarily send.
- Technical data: IP address, request time, URL, browser/device type and security logs that the hosting provider may process to deliver and protect the site.
- Local settings: the
veliraLanguagelocalStorage key remembers your language choice. In Velira Flow, business funnel figures are stored in your browser only after you choose to save them.
Do not send passwords, payment-card data, identity documents, health information or other sensitive data through the form.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answer an enquiry, clarify the brief and prepare a proposal | Steps requested before entering a transaction under Article 11 of the Ukrainian Personal Data Protection Law; where applicable, GDPR Article 6(1)(b). |
| Deliver the enquiry to the Velira operator through Telegram Bot API | Your separate active consent to this delivery channel and related international processing under Article 11 of Ukrainian law; where applicable, GDPR Article 6(1)(a) and, where necessary, Article 49(1)(a). |
| Protect the form, website and communications from spam and abuse | Our legitimate interest in security and reliability under Article 11 of Ukrainian law; where applicable, GDPR Article 6(1)(f). |
| Perform a contract, maintain records and protect legal claims | Contract performance and legal obligations under Article 11 of Ukrainian law; where applicable, GDPR Articles 6(1)(b), 6(1)(c) and 6(1)(f). |
We do not use enquiry data for newsletters or targeted advertising without separate, freely given consent. The first form checkbox only acknowledges this notice. The second is separate consent to Telegram Bot API delivery and is not marketing consent.
4. How the form works and recipients
Depending on the address from which you opened the site, its public version runs in one of the hosting environments below. Both environments are configured for Velira; the second does not receive your enquiry merely because the first is in use.
- OpenAI ChatGPT Sites hosts and supports the website and may process hosted data on our behalf under the Sites Data Processing Addendum.
- Netlify may provide the alternative website hosting and the form’s serverless function. In that case, Netlify processes request technical data and the information submitted through the form on our behalf under its service terms and Data Processing Agreement.
- Telegram Bot API delivers the enquiry to Velira’s private work chat only after your separate active consent. Telegram is an independent cloud service and handles that information under its own Privacy Policy and Bot Developer Terms.
- Contractors or advisers receive access only when needed for an agreed project, on a need-to-know basis and subject to confidentiality.
- Information may be disclosed where required by law or a valid request from a competent authority.
We do not sell personal data. An external website you choose to visit applies its own terms and privacy practices.
5. International processing
OpenAI Sites: technical data may be processed outside Ukraine and the EEA under the Sites DPA, including the transfer mechanisms stated there. OpenAI’s subprocessor list is available here.
Netlify: when the site is opened from the Netlify deployment, technical data and the enquiry may be processed in the United States and other countries where Netlify and its subprocessors operate. Netlify’s DPA includes international-transfer mechanisms, including Standard Contractual Clauses; Netlify determines its current terms and subprocessor list.
Telegram: enquiry content may be processed in countries where Telegram or its suppliers operate infrastructure. Telegram’s public terms do not give Velira a dedicated processor DPA or SCC for this scenario, so we do not claim equivalent contractual safeguards. The form therefore asks for separate explicit consent that takes this risk into account. If you do not want Bot API delivery, do not use the form; you may message the displayed work contact directly, which remains subject to Telegram’s own rules.
6. Retention
- Enquiries that do not become a project: up to 90 days after the last meaningful communication.
- Active-project materials: during delivery and agreed support; contract and payment records: for legally required periods or as necessary for legal claims.
- Technical logs: for the relevant hosting provider’s periods needed to operate and secure its service. For Netlify, log availability depends on the plan and is governed by its current logging documentation; other service records are retained under the provider’s DPA and terms.
- Language preference: until you change or clear this site’s data; monthly Flow figures: up to 12 months or until you select “Clear local data”.
We periodically review stored data and delete or anonymise information that is no longer needed.
7. Your rights
Depending on applicable law, you may request confirmation of processing, access, correction, deletion, restriction, objection or portability; withdraw consent where a particular activity relies on consent; and complain to the Ukrainian Parliament Commissioner for Human Rights or the competent data-protection authority in your country.
Before submission, you can withdraw Telegram consent by unticking the second checkbox. After submission, withdrawal does not make the earlier transfer unlawful, but you may ask Velira to delete the received enquiry; Telegram separately applies its own retention and procedures.
Send a request via Telegram @madbod_77 and identify the contact detail used in your enquiry. We may request minimal proof of identity to avoid disclosing another person’s data.
8. Cookies, automated decisions and children
The site does not set advertising or analytics cookies. Remembering your language is a local preference that you actively choose, so the current configuration does not use a cookie banner. If optional analytics or marketing technology is added later, it will not run before any consent required by law.
We do not make decisions with legal or similarly significant effects solely by automated means and do not profile visitors. The form is intended for adults and business representatives; minors should not submit information without a legal representative.
9. Security, changes and contact
We apply data minimisation, HTTPS, request-size limits, server-side acknowledgement checks, an anti-spam field and security headers. No transmission method is completely secure, so please do not send unnecessary or sensitive information.
A new version applies only from the date stated on this page and does not retrospectively change agreed terms. Privacy questions and requests: Telegram @madbod_77.