Your data, treated with care.

Velra Agency Limited (company number 16446246) is the controller responsible for the personal information described in this notice.

Registered office:
60 Tottenham Court Road, Suite 6114a
Fitzrovia, London W1T 2EW
United Kingdom

Studio:
Castledine House Business Centre
5 Heanor Road, Ilkeston
Derbyshire DE7 8DY
United Kingdom

Privacy enquiries may be sent to hello@velra.co.uk.

Depending on how you interact with Velra, we may collect:

• Your name, company, email address and optional telephone number.
• Your service interests, business goals, budget range, timeline, project context and correspondence.
• Materials you provide while discussing or delivering a project, such as briefs, content and brand assets.
• Contract, invoicing, transaction and project-management records.
• Lead-attribution information such as landing page, referrer, UTM parameters and advertising click identifiers.
• Technical information including browser user agent, inferred device category, country code and a one-way hashed IP value used for security and abuse prevention.
• Consent choices and analytics information where you permit optional measurement tools.

We generally collect this information directly from you. Attribution and technical information may also be received from your browser, Vercel or an advertising platform when you follow a campaign link.

• Enquiries and pre-contract discussions: to respond, understand your requirements and recommend an appropriate engagement. The lawful bases are taking steps at your request before entering a contract and our legitimate interest in operating our business.
• Client services: to plan, deliver, support and administer agreed work. The lawful bases are performance of a contract and our legitimate interests.
• Finance and compliance: to invoice, keep accounting records, establish or defend legal claims and meet legal obligations.
• Security: to prevent spam, misuse and attacks, based on our legitimate interest in protecting the site and our systems.
• Analytics and campaign measurement: to understand journeys and improve the site. Optional cookies and similar technologies are used only with consent.
• Marketing: to send relevant communications where you have consented or where another lawful route is available. Every marketing message will provide an appropriate way to object or unsubscribe.

Submitting a project enquiry does not automatically subscribe you to general marketing.

We disclose information only where necessary to operate Velra, deliver services or comply with law. Recipient categories may include:

• Supabase for database, authentication and media infrastructure.
• Vercel for website hosting, delivery and technical request information.
• Resend and relevant email providers for enquiry notifications and communications.
• Google or other analytics and campaign providers, but only where the required consent has been provided.
• Professional advisers, insurers, accountants and authorities where reasonably necessary.
• Specialist collaborators and suppliers engaged for a project, subject to appropriate confidentiality and data-protection arrangements.

We do not sell personal information.

Some providers may process information outside the United Kingdom. Where a restricted transfer occurs, we require an applicable safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with any required transfer assessment. You may contact us for more information about safeguards relevant to your information.

• Rate-limit events are automatically removed after approximately 24 hours.
• Enquiries that do not become projects are normally retained for up to 24 months after the last meaningful contact, unless a longer period is needed for a dispute, legal obligation or a continuing relationship.
• Client, contract, invoice and core project records are normally retained for six years after the relationship ends.
• Consent records are retained for as long as needed to demonstrate and respect your choice.
• Analytics retention is controlled through the relevant analytics configuration and is reviewed periodically.

When information is no longer required, we delete it or anonymise it where appropriate. Backup copies may remain for a limited period before being overwritten.

Essential technologies support security, authorised administration and remembering your privacy choices. Analytics and marketing technologies are optional and do not load until you permit them. You can change your choice using “Cookie settings” in the footer. See our Cookie Notice for details.

Depending on the circumstances, you may have the right to request access, correction, erasure, restriction, portability or objection to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

To exercise a right, email hello@velra.co.uk. We may need to verify your identity and normally respond within one month. Rights can be subject to legal limitations and exemptions.

You may first complain to Velra using the same address. You also have the right to complain to the Information Commissioner’s Office.

You are not legally required to submit an enquiry. However, without essential contact and project information, we may be unable to respond or provide requested services.

Velra does not use the information described here to make solely automated decisions that produce legal or similarly significant effects.

We use proportionate technical and organisational safeguards, including encrypted transport, access controls, server-side validation and restricted administrative access. No internet service can guarantee absolute security.

We review this notice when our services, providers or legal obligations change. Material changes will be identified on this page and, where appropriate, brought directly to affected people’s attention.