Privacy Policy

VELT is a digital networking platform that allows individuals and businesses to create and share digital profiles.

Profiles may be shared using a unique VELT link, QR code, Apple Wallet pass, NFC card, NFC keyring or another method chosen by the user.

Our legal details are:

Velt Technology Ltd
66 Paul Street
London
EC2A 4NA
United Kingdom

Company number: 17294186
ICO registration reference: C1999952
Privacy contact: hello@velt.uk

The information we collect depends on how a person uses VELT.

2.1 Account information

When a user creates an account, we may collect:

• Name.
• Email address.
• Login and authentication information.
• Account type or membership plan.
• Account status.
• Subscription status.
• Account preferences.
• Records relating to account creation, access and administration.

Passwords must not be stored in plain text. Authentication credentials are handled through Supabase Auth, the managed authentication service used by VELT (provided through Lovable Cloud).

2.2 Profile information

Users decide what information to add to their VELT profile.

Profile information may include:

• Profile photograph.
• Business logo.
• Job title.
• Employer or business name.
• Biography or personal introduction.
• Telephone number.
• Email address.
• Business address.
• Website.
• Social-media accounts.
• Portfolio links.
• Booking links.
• Review links.
• Contact links.
• Other standard platform links.
• Up to 10 custom links and the labels selected by the user.
• Other content voluntarily added to the profile.

Some profile information is intended to be shared with people who receive or access the user’s profile.

Users should only publish information they are comfortable sharing with others.

2.3 Uploaded files and documents

Users may upload images, logos, CVs and other supported documents.

These files may contain personal information selected by the user, including employment history, education, qualifications, skills and contact information.

Users should not upload information that is unnecessary for their VELT profile or CV.

Users should avoid uploading highly sensitive information such as passport details, bank information, medical records, criminal-record information or national insurance numbers unless VELT has expressly requested that information for a clear and lawful purpose.

Uploaded files are stored using Supabase Storage (provided through Lovable Cloud).

2.4 Subscription and payment information

When a customer purchases a subscription or product, Stripe processes the payment.

Stripe may collect payment-card details, billing details and information needed to complete or verify the transaction.

VELT does not receive or store full payment-card numbers or card security codes.

We may receive limited payment information from Stripe, including:

• Customer or transaction identifiers.
• The product or subscription purchased.
• Payment status.
• Billing status.
• Subscription-renewal information.
• Refund or dispute information.
• Limited billing details where needed for records and support.

Stripe processes personal information under its own privacy terms as an independent service provider.

2.5 Contact-form and support information

When someone submits a website enquiry, Formspree processes the form submission on our behalf.

We may collect:

• Name.
• Email address.
• Telephone number, where provided.
• Business name.
• The content of the enquiry.
• Any other information voluntarily included in the message.

When users contact us directly, we also retain the information required to understand and respond to their request.

2.6 QR codes, profile links, Apple Wallet passes and NFC products

VELT may create or associate a unique profile link with a QR code, Apple Wallet pass or NFC product.

We may process:

• The unique profile identifier.
• The profile or account associated with the item.
• Information needed to create or manage an Apple Wallet pass.
• Product-order and fulfilment information.
• Technical information generated when a profile link is accessed.

NFC cards and keyrings direct compatible devices to the relevant VELT profile or service. VELT does not use the NFC product itself to continuously track a person’s physical location.

2.7 Technical and usage information

When someone visits or uses VELT, we may automatically receive limited technical information, including:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Approximate location derived from the IP address.
• Date and time of access.
• Pages or features accessed.
• Referring page.
• Session and authentication information.
• Error, diagnostic and security information.

VELT does not use a third-party analytics, advertising or session-recording service. With the user’s consent where required, VELT records limited first-party profile statistics — such as a profile view or a link opened, together with a coarse device family, an approximate traffic source and a random per-session identifier — in our own database, so that profile owners can understand how their profile is performing. Non-essential analytics technologies are not activated before the user has made a cookie choice.

We may use personal information to:

• Create and administer VELT accounts.
• Authenticate users and protect account access.
• Build, display and maintain user profiles.
• Provide profile links and QR-code functionality.
• Create and manage Apple Wallet passes where requested.
• Link NFC products to the correct profile or destination.
• Process subscriptions, purchases, refunds and billing queries.
• Provide customer support.
• Respond to contact-form submissions and enquiries.
• Send essential service messages relating to accounts, payments, security or material platform changes.
• Maintain, troubleshoot and improve the platform.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Enforce our Terms & Conditions and Acceptable Use Policy.
• Protect our legal rights and the rights of users and third parties.
• Comply with legal, regulatory, accounting and tax obligations.

VELT does not sell personal information.

VELT does not currently use account information to send general marketing newsletters.

If marketing communications are introduced in the future, the Privacy Policy and relevant consent controls will be updated before that processing begins.

UK data-protection law requires us to have a lawful basis for each use of personal information.

Depending on the circumstances, we rely on the following lawful bases.

4.1 Contract

We use personal information where it is necessary to:

• Create and operate a user’s account.
• Provide a subscription or purchased service.
• Display and deliver the profile features requested by the user.
• Process an order.
• Provide customer support connected with the service.
• Manage payments, subscriptions, cancellations and refunds.

4.2 Legitimate interests

We may use personal information where it is necessary for our legitimate business interests and those interests are not overridden by a person’s rights.

These interests may include:

• Operating and improving VELT.
• Securing accounts and systems.
• Preventing fraud and misuse.
• Responding to general business enquiries.
• Keeping appropriate business records.
• Understanding and resolving technical problems.
• Establishing, exercising or defending legal claims.

4.3 Legal obligation

We may use or retain information where necessary to comply with legal obligations, including tax, accounting, consumer-protection, regulatory and law-enforcement requirements.

4.4 Consent

We rely on consent where required, including for non-essential cookies and similar technologies.

A person may withdraw consent at any time through Cookie preferences or by contacting hello@velt.uk. Withdrawing consent does not affect processing that took place before consent was withdrawn.

Each VELT profile is associated with a unique profile address.

A profile may be accessed through its link, QR code, Apple Wallet pass, NFC product or another method through which the profile address has been shared.

A difficult-to-guess profile address reduces casual discovery, but it is not a password, private vault or guarantee that a profile cannot be found or shared.

Anyone who receives a working profile link may be able to open the profile and share that link with somebody else.

Users are responsible for deciding:

• What information to place on their profile.
• Whether information should be displayed publicly or shared with others.
• Who receives their profile link, QR code, pass or NFC product.
• Whether an uploaded document contains information suitable for sharing.

Users can update or remove profile information through the controls currently available in their account.

Where implemented, VELT may use reasonable measures such as search-engine indexing restrictions to reduce unintended discovery of profile pages. Such measures do not guarantee that information will never be copied, indexed or redistributed.

At VELT, privacy isn’t just a policy—it’s built into the platform.

Every VELT digital profile can be protected using Premium Access™, an optional security feature that gives profile owners greater control over who can view their information.

When Premium Access™ is enabled, visitors must enter the correct access code before protected profile information is displayed. This helps reduce unauthorised access if a profile link, QR code, Apple Wallet pass or NFC product is copied, shared or discovered by someone who has not been given permission by the profile owner.

Unlike traditional NFC business cards that simply direct anyone to a public profile, VELT allows profile owners to decide whether an additional verification step is required before their information is shown.

Premium Access™ can be enabled, disabled or updated at any time through the user’s VELT account, allowing profile owners to balance accessibility with privacy depending on how they choose to share their digital identity.

VELT NFC products are designed to provide access to a user’s VELT profile rather than storing copies of personal information directly on the NFC chip itself. Where Premium Access™ is enabled, the access-code verification takes place before protected profile information is displayed.

Premium Access™ is designed to provide an additional layer of access control and help reduce unauthorised access. It does not prevent an authorised visitor from copying or sharing information after they have been granted access. Users should therefore only include information they are comfortable sharing with authorised recipients.

This feature forms part of VELT’s wider commitment to protecting user privacy, giving profile owners greater control over how their information is accessed and shared.

We may share limited personal information with trusted service providers where necessary to operate VELT.

These are:

• Stripe, for payment and subscription processing.
• Formspree, for contact-form processing.
• Supabase, for database, authentication and file-storage services (provided through Lovable Cloud).
• Lovable, for website and application hosting, essential service email delivery and error diagnostics.

VELT does not use a third-party analytics, advertising, remarketing, session-recording or CAPTCHA provider.

We may also disclose personal information:

• Where required by law, court order or a lawful request from an authority.
• To investigate suspected fraud, abuse or security threats.
• To protect the rights, property or safety of VELT, our users or others.
• In connection with a business reorganisation, investment, merger, acquisition or sale, subject to appropriate confidentiality and data-protection safeguards.

Service providers are permitted to use personal information only as needed to provide their services or as otherwise allowed under their own legal obligations.

Some service providers may process information outside the United Kingdom.

Where a restricted international transfer occurs, VELT will use an appropriate lawful transfer mechanism where required. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another legally recognised safeguard.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

The retention period may depend on:

• Whether the account remains active.
• Whether the information is needed to provide the service.
• The type of subscription, purchase or enquiry.
• Legal, accounting and tax requirements.
• Fraud-prevention and security needs.
• The need to resolve disputes or enforce agreements.
• Backup and system-recovery processes.

Account and profile information will generally be retained while an account is active.

Following account closure or a valid deletion request, information will be deleted or anonymised when it is no longer required, subject to legal obligations, legitimate record-keeping needs and reasonable backup cycles.

Payment and transaction records may be retained for the period required by tax, accounting and legal rules.

Support enquiries may be retained for as long as needed to resolve the matter and maintain an appropriate record.

VELT uses cookies and similar browser technologies where necessary to operate the website and platform.

These may include technologies used to:

• Keep users signed in.
• Maintain account security.
• Remember cookie choices.
• Store essential settings.
• Process requests and prevent abuse.

Non-essential cookies, including analytics or behavioural-tracking technologies, are not activated until the user has provided valid consent.

Users can accept or reject non-essential cookies and can change their choice at any time through the Cookie preferences link in the footer.

Further information is available in the Cookie Policy.

VELT uses reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Depending on the relevant system, these measures include:

• Encrypted HTTPS connections.
• Secure authentication provided by our managed authentication service.
• Database access controls and row-level access rules.
• Restrictions on administrative access.
• Managed payment processing through Stripe.
• Software updates and vulnerability remediation.
• Backups and recovery controls provided by relevant infrastructure services.

No website, transmission method or storage system can be guaranteed to be completely secure.

Users are responsible for keeping their login details confidential, using a strong and unique password, and notifying us if they believe their account has been compromised.

VELT is not designed for children under 16.

People under 16 should not create an account or submit personal information through the platform.

If we learn that information has been collected from a child under 16 without appropriate authority, we will take reasonable steps to investigate and delete it where required.

VELT is not designed for the routine collection of special-category personal information.

Users should not upload unnecessary information about health, ethnicity, religion, political opinions, trade-union membership, genetics, biometrics used for identification, sex life or sexual orientation.

Users should also avoid uploading criminal-conviction information or government identification details unless VELT has expressly requested the information and has established an appropriate lawful basis and safeguards.

A CV may sometimes reveal sensitive information indirectly. Users should review documents before uploading them and remove information that is not needed for the intended purpose.

Depending on the circumstances and the lawful basis used, individuals may have the right to:

• Be informed about how their personal information is used.
• Request access to personal information held about them.
• Ask for inaccurate or incomplete information to be corrected.
• Ask for personal information to be deleted.
• Ask us to restrict the use of personal information.
• Object to certain uses of personal information.
• Receive certain information in a portable format.
• Withdraw consent where processing relies on consent.
• Complain to the Information Commissioner’s Office.

These rights are not absolute and may not apply in every circumstance.

To make a privacy request, email hello@velt.uk.

We may need to verify the requester’s identity before providing, correcting or deleting information. We will respond within the period required by applicable data-protection law.

Right to object

Where VELT relies on legitimate interests, individuals may object to the use of their personal information in certain circumstances.

VELT does not currently send general direct-marketing newsletters. If direct marketing is introduced, recipients will have the right to object to it at any time.

Users may update profile information using the controls available within their VELT account.

Users may remove supported profile images, logos, links and uploaded documents where the platform provides that control.

To request closure of an account and deletion of eligible personal information, email hello@velt.uk, or use the “Request account deletion” control in the Privacy and data section of your account.

Deletion is not instant. Some information may need to be retained for legal, accounting, security or dispute-resolution purposes, and copies may persist in routine backups for a limited period.

VELT does not currently provide an automatic self-service data-export download. A copy of your data can be requested through the same channel.

VELT profiles may contain links to websites and services controlled by users or third parties.

VELT does not control the privacy, security, availability or content of external websites.

Opening an external link may allow the third party to collect information under its own privacy policy.

Users are responsible for ensuring that the content and external links they add to their profile are lawful, accurate and appropriate.

VELT does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on users.

If this changes, we will update this policy before introducing the relevant processing and provide the information and safeguards required by law.

We may update this Privacy Policy when our services, technology, providers or legal obligations change.

The “Last updated” date at the top of the page shows when the policy was most recently revised.

Where a change materially affects how personal information is used, we will provide an appropriate notice through the platform, by email or through another suitable method.

For questions about this Privacy Policy or to exercise a data-protection right, contact:

Velt Technology Ltd
66 Paul Street
London
EC2A 4NA
United Kingdom

Email: hello@velt.uk
ICO registration reference: C1999952

Individuals also have the right to raise a concern with the Information Commissioner’s Office at any time.