Privacy policy.

Who we are

This privacy policy explains how Veltis AI Ltd ("Veltis AI", "we", "our", or "us") uses personal data when you visit www.veltisai.com or email us.

Veltis AI Ltd is the controller of this data. A controller decides why and how personal data is used. We are a company registered in England and Wales, company number 16935228. We have offices in London, United Kingdom, and the Greater Philadelphia Area, Pennsylvania, USA.

You can contact us about privacy at info@veltisai.com.

What this policy covers

This policy covers our marketing website and emails you send to us. It does not cover our product at login.veltisai.com. Our client contracts govern the data our clients put into that product.

We sell software to pharmaceutical and life sciences companies. Our website is for business visitors.

Information we collect

Emails you send us

Our website has no web forms. If you email info@veltisai.com, we receive:

• Your name and email address
• Your company name and job title, if you include them
• Anything else you write in your message or attach to it

We use this to reply to you, to tell you about our services when you ask, and to discuss possible work together.

Job applications

If you email careers@veltisai.com, we receive your CV and anything else you send. This often includes your contact details, work history, education, and skills. We use it to assess your application and to contact you about it.

Please do not send sensitive information, such as health details, unless you need us to make an adjustment for you. If you do send it, we use it only for that purpose.

Page analytics

If you click Accept, we use Umami to count visits to our pages. Umami is an analytics tool that we host on our own server at stats.rxdxnow.com. It does not use cookies. The analytics script file may download when you open a page, but it sends nothing until you click Accept. If your browser sends a Do Not Track signal, we do not collect analytics.

When analytics is on, your browser sends us:

• The page address and page title, without search parameters or page anchors
• The site that referred you
• Your browser language and screen size

Our server also receives your IP address and browser details with each request. Umami uses them to record your approximate location, your browser, your operating system, and your device type. It also combines them with a secret value to create a visit identifier. This lets us count unique visitors without knowing who they are. The secret value changes on a regular schedule, so the identifier cannot link your visits over the long term. Umami does not store your IP address.

We do not send form contents to analytics. We use analytics only to see which pages people read, so we can improve the site. We do not use it to identify you or to target advertising.

You can change your choice at any time below. Clicking Decline withdraws your consent. It does not affect analytics collected before you declined.

Accept analytics Decline analytics

Other information collected automatically

• Cloudflare: Our site is delivered through Cloudflare, a network that speeds up and protects websites. Cloudflare processes your IP address and browser details to deliver pages and to block attacks. Cloudflare may set a security cookie, such as __cf_bm, to tell people apart from bots. See Cloudflare's privacy policy.
• Google Fonts: We load fonts from Google. When your browser requests a font, Google receives your IP address and browser details. See Google's privacy policy.
• Local storage: Your browser stores your analytics choice on your device so we do not ask again. We do not receive this value.

We do not use:

• Advertising cookies
• Tracking pixels
• Social media tracking

We do not sell your personal data. We do not use it for automated decisions that affect you.

Our legal reasons for using your data

UK and EU data protection law requires a legal reason, called a lawful basis, for each use of personal data. We rely on these:

• Emails you send us: Our legitimate interest in replying to business inquiries and running our business. If you ask about buying our services, we also rely on taking steps you request before a contract.
• Job applications: Taking steps you request before a possible employment contract, and our legitimate interest in hiring the right people.
• Page analytics: Your consent. You can withdraw it at any time with the Decline button above.
• Cloudflare and Google Fonts: Our legitimate interest in delivering a secure website that displays correctly.
• Your analytics choice in local storage: This is strictly necessary to remember your choice, so it needs no consent.

Where we rely on legitimate interests, we have checked that our interests do not override your rights. You can ask us for details.

You do not have to give us any personal data. If you apply for a job without sending your details, we cannot consider your application.

Who we share data with

We share personal data only with service providers that help us run our business. They act on our instructions and must protect your data:

• Microsoft: Hosts our email through Microsoft 365.
• Cloudflare: Delivers and protects our website.
• Google: Serves our website fonts.

We may also share data if the law requires it, or to protect our legal rights. If we sell or merge our business, the new owner may receive the data under this policy.

International transfers

Microsoft, Cloudflare, and Google are based in the United States and may process your data there. Our team in the United States may also read emails you send us.

We protect transfers from the UK to the United States through the UK Extension to the EU-US Data Privacy Framework, also called the UK-US data bridge. It covers US companies that have signed up to it. For transfers from the European Economic Area (EEA), we rely on the EU-US Data Privacy Framework. Where a provider is not covered, we use the UK International Data Transfer Addendum or the EU Standard Contractual Clauses. These are contract terms approved by regulators. You can ask us for a copy of the safeguards we use.

How long we keep data

• Inquiry emails: Up to 2 years after our last contact with you, unless you become a client. Client records follow our contract and legal duties.
• Job applications that do not succeed: Up to 9 months after we tell you the outcome. This covers the period in which a legal claim about hiring can be made. We keep your CV longer only if you agree that we can consider you for future roles.
• Successful job applications: These become part of your employee record.
• Analytics records: Up to 2 years.
• Your analytics choice: Stays in your browser until you clear it or change your choice.

Cloudflare and Google keep their own records under their own policies.

Your rights

If you are in the UK, the UK GDPR gives you rights over your personal data. If you are in the EEA, the EU GDPR gives you the same rights. You can:

• Access: Get a copy of your personal data.
• Correction: Ask us to fix data that is wrong or incomplete.
• Deletion: Ask us to delete your data.
• Restriction: Ask us to limit how we use your data.
• Portability: Get data you gave us in a format you can move.
• Objection: Object to any use based on our legitimate interests.
• Withdraw consent: Withdraw consent at any time. This does not affect earlier use.

These rights have some limits. To use them, email info@veltisai.com. We reply within one month. We may need to confirm your identity first.

How to complain

If you are unhappy with how we use your data, please tell us first at info@veltisai.com. We acknowledge complaints within 30 days and tell you what we are doing about them.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. Visit ico.org.uk/make-a-complaint or call 0303 123 1113. If you are in the EEA, you can complain to the data protection authority in your country.

Visitors in the United States

We do not sell personal information. We do not share it for targeted advertising. We do not use sensitive personal information to infer things about you. If you live in a US state with a privacy law, you can ask to access, correct, or delete your personal information at info@veltisai.com. We do not treat you differently for making a request.

Data security

We use technical and organizational measures to protect personal data from loss, misuse, and unauthorized access. These include encrypted connections to our website and access controls on our systems. No system is fully secure, so we cannot guarantee security.

Children's privacy

Our website is for business users. It is not meant for children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy. When we do, we post the new version on this page and change the "Last updated" date. If a change matters to you, we tell you before it takes effect where we can.

Contact us

Veltis AI Ltd
Registered in England and Wales, company number 16935228
Email: info@veltisai.com