Privacy Policy
Last updated: 8 July 2026
This policy explains what personal data Velinor collects, why we collect it, and what you can do about it.
Who we are
Velinor AI Ltd ("Velinor", "we", "us", "our") is a UK AI assurance and advisory firm registered in England & Wales (company no. 15700539). Our registered office is 55 Ringwood Road, Bath BA2 3JL, United Kingdom. We are registered with the Information Commissioner's Office (ICO registration ZB845813).
For any data protection enquiry, contact info@velinor.io.
What data we collect
Information you provide directly:
- Name, email, organisation, role and the content of your enquiry when you contact us or book a call.
- Information you provide during a discovery call, an assurance diagnostic, or an advisory engagement.
- Email address and organisation name if you subscribe to a Velinor briefing.
Information collected automatically:
- Server access logs — IP address, user agent, requested URL — retained for security and abuse prevention.
- Email engagement data (opens, clicks) for communications you have subscribed to.
We do not run advertising trackers, and we do not use Google Analytics or any third-party analytics on this website.
Publicly available data: the AI Blindspot Framework is calibrated against documented real-world AI failures drawn from public OSINT sources — regulator decisions, court rulings and established media. Where such cases reference individuals acting in a public or senior capacity, those individuals may be referenced in our published methodology. All such references are subject to editorial review and PII redaction.
How we use your data
- To respond to your enquiry and arrange a discovery conversation.
- To deliver the assurance and advisory engagements you have commissioned.
- To send briefings you have subscribed to.
- To improve our website, our framework and our services.
- To comply with our legal and regulatory obligations.
Legal basis for processing (UK GDPR)
- Consent — for briefing subscriptions. You may withdraw at any time.
- Contract — when you engage Velinor as a client, we process your data to deliver the contracted services.
- Legitimate interest — we process publicly available information about AI incidents to maintain the AI Blindspot Framework, having assessed that this does not override the rights of the individuals concerned, given the data is drawn from public-interest reporting and regulator publications.
Data sharing and processors
We do not sell your personal data. We share it only with:
- Google Workspace (Google Ireland Ltd) — email and document storage.
- LeadConnector / HighLevel Inc. — booking and CRM. The booking calendar on our Book page is not loaded until you choose to load it, so no third-party cookies are set unless you ask for them.
- Professional advisers (legal, accounting, insurance) where strictly necessary.
- Regulators or law enforcement where required by law.
A copy of our data processing agreement is available on request from info@velinor.io.
Data retention
- Enquiry data: up to 24 months from last contact, then deleted unless you become a client.
- Client data: the duration of the engagement plus 6 years, for accounting and legal purposes.
- Subscription data: until you unsubscribe, then deleted within 30 days.
- Server access logs: 90 days.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data, subject to legal obligations.
- Restrict our processing in certain circumstances.
- Object to processing based on legitimate interest.
- Receive your data in a structured, machine-readable format.
To exercise any of these rights, email info@velinor.io. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Information Commissioner's Office at ico.org.uk.
Security
Velinor holds Cyber Essentials certification. We apply appropriate technical and organisational measures to protect your data, including encrypted transport, enforced email authentication, access controls and regular review of our security posture. Our security practices and vulnerability disclosure policy are set out on our Trust & Security page.
Changes to this policy
We may update this policy from time to time. The "last updated" date above indicates the most recent revision.
Contact
Email: info@velinor.io
Post: Velinor AI Ltd, 55 Ringwood Road, Bath BA2 3JL, United Kingdom