Privacy notice

This notice explains how Velo and AmplioData OÜ handle personal data, both on this website and inside the Velo product when it runs on a customer site. It is written in plain language and is not a substitute for the full terms.

1. Who we are

Velo is a consent management product built and operated by AmplioData OÜ, a company registered in Estonia under Business Register code 17190588, working from Barcelona, Spain. When this notice says "we", it means AmplioData OÜ. Our full identification is set out in the legal notice. You can reach us about anything on this page at hello@veloconsent.com.

2. Two different roles

It matters which side of Velo you are on.

When you browse this website

AmplioData OÜ is the controller of the limited data we collect here, and this notice covers it.

When Velo runs on a customer's website

The website owner is the controller. Velo acts as a processor on their behalf, handling consent records under their instructions. Those visitors should read the privacy notice of the site they are visiting. Our obligations in that role are set out on the GDPR and data processing page.

3. What we collect on this website

• Your consent choice. When you answer the cookie banner, your choice and a coarse region read at the edge are kept, with a timestamp, so we can honour what you asked for. On this site that choice is stored in your browser and clears when you close it.
• Analytics and advertising. We do not run analytics or advertising cookies on this website today. If we add them, they will load only if you allow them through the banner, and we will update this notice and the cookie notice first.
• Things you send us. If you fill in a form or email us, we receive what you choose to share, such as your name, work email and message.

We host the fonts and other assets this site uses on our own infrastructure, so opening a page does not hand your data to a third party.

4. What Velo records inside the product

When Velo runs on a customer site, it records a pseudonymised consent log: the choice made, a coarse region detected from the request country at the edge, and a timestamp. Region detection performs no third party geolocation lookup. Velo does not build profiles, does not track visitors across sites, and never sells or shares this data.

5. Why we are allowed to use it

• Running and securing this website: our legitimate interest in operating, measuring and protecting the site (Article 6(1)(f) GDPR).
• Analytics or advertising, if we add them: your consent (Article 6(1)(a)), which you can withdraw at any time.
• Answering your message or enquiry: our legitimate interest in replying, or taking steps to enter a contract at your request (Article 6(1)(b)).
• Providing Velo to a customer: performing our contract with that customer.

6. How long we keep it

Your consent choice on this site sits in your browser and clears when you close it. Messages and enquiries you send us are kept for up to 24 months after our last exchange, unless we need them longer for a legal or accounting reason. Consent records inside a customer's site are kept for the retention window that customer sets. We do not keep personal data longer than we need it.

7. Where it is processed

This website and the Velo product run on Cloudflare Workers and storage at the edge. Where a customer configures it, processing stays within the EU. Where any data leaves the EU through a provider such as Cloudflare, the transfer relies on the European Commission's standard contractual clauses and, where it applies, the EU–US Data Privacy Framework.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or move it elsewhere. Where we rely on your consent, you can withdraw it at any time, which does not affect what we did before you withdrew. To exercise any of these, email hello@veloconsent.com. You can also complain to a supervisory authority: in Spain the Agencia Española de Protección de Datos (AEPD, aepd.es), in Estonia the Andmekaitse Inspektsioon, in the UK the Information Commissioner's Office, or the authority where you live.

9. Changes to this notice

If we change how we handle data, we will update this page and move the date at the top. Material changes will be made clear.