Legal
Privacy Policy
Last updated: April 19, 2026
Velox Enterprises LLC (“Velox,” “we,” or “us”) operates veloxenterprises.com. This Privacy Policy explains what information we collect, how we use it, and your rights.
1. Information We Collect
Information you provide
- Contact forms: name, email address, phone number, business name, project details
- Intake and quote forms: same as above plus website URL, industry, and project scope
- Payment: processed by Stripe — we do not store card numbers on our servers
Information collected automatically (with your consent)
If you accept cookies, we collect analytics data through Google Analytics 4 (GA4) and Meta Pixel. This includes pages visited, time on site, general location (city/country), device and browser type, and referring source. This data is aggregated and used to improve the site. If you decline cookies, neither GA4 nor Meta Pixel is loaded.
Cookies
We use a single first-party cookie (velox-consent) to remember your cookie preference (accepted or declined), with a 1-year expiry. No tracking cookies are set unless you accept. See our Cookie Policy section below.
1.5 Legal Basis for Processing (EU/UK visitors)
We process your personal data on the following legal bases under the UK GDPR and EU GDPR:
- Contract — to respond to your inquiry and deliver services you have purchased.
- Legitimate interests — to operate and improve our website and communicate about your account.
- Consent — for analytics cookies. You can withdraw consent at any time via the cookie banner or by emailing us.
- Legal obligation — to comply with tax, accounting, and regulatory requirements.
International transfers. We are based in the United States. If you are in the EU, UK, or another region with data-transfer restrictions, your personal data will be transferred to and processed in the United States by us and our US-based processors (Stripe, Vercel, Google, Meta, Resend, Calendly). Where required, these transfers rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or the processor's participation in the EU-US Data Privacy Framework.
1.6 California Residents — Categories of Personal Information (CCPA/CPRA)
In the past 12 months we have collected the following categories of personal information, as defined by the California Consumer Privacy Act as amended by the California Privacy Rights Act:
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Identifiers | Name, email, phone | You (forms) | Respond, bill, deliver |
| Commercial info | Services purchased | You, Stripe | Fulfill, invoice |
| Internet/network activity | Pages viewed, referrer | Automatic (with consent) | Analytics |
| Geolocation (general) | City, country | Automatic (with consent) | Analytics |
| Inferences | Buyer-intent scoring | Derived | Lead prioritization |
We do not collect: biometric data, health data, precise geolocation, sensitive personal information as defined by the CPRA, or data from children under 13. We do not sell or share personal information for cross-context behavioral advertising. Retention: see Section 4.
2. How We Use Your Information
- To respond to inquiries and deliver the services you purchase
- To send project updates, invoices, and service communications (transactional only)
- To analyze site performance and improve our marketing (only with your consent)
- To comply with legal obligations
We do not sell your personal information to third parties. We do not send unsolicited marketing emails to people who have not submitted a form or purchased from us.
3. Third-Party Services
- Stripe — payment processing. Subject to Stripe's Privacy Policy.
- Resend — transactional email delivery. Subject to Resend's Privacy Policy.
- Vercel — website hosting. Processes server logs. Subject to Vercel's Privacy Policy.
- Google Analytics 4 — site analytics (loaded only with consent). Subject to Google's Privacy Policy.
- Meta Pixel — ad retargeting (loaded only with consent). Subject to Meta's Data Policy.
- Calendly — appointment booking (if you choose to book a call). Subject to Calendly's Privacy Policy.
4. Data Retention
We retain form submissions and client records for as long as the client relationship is active plus 3 years, or as required by law. You may request deletion at any time (see Section 6). Analytics data is retained per Google's and Meta's standard retention policies.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Opt out of analytics tracking (decline cookies or email us)
- Opt out of the sale or sharing of your personal information (see Section 7)
To exercise any of these rights, email hello@veloxenterprises.com. We will respond within 30 days.
7. Do Not Sell My Personal Information
We do not sell your personal information. We do not share your personal data with third parties for their direct marketing purposes without your consent.
The analytics tools we use (GA4, Meta Pixel) are loaded only with your explicit consent. If you previously accepted cookies and wish to opt out:
- Clear your browser cookies — your preference resets and the banner will reappear
- Email hello@veloxenterprises.com to request removal of any data we hold about you
For a dedicated opt-out page, visit veloxenterprises.com/do-not-sell.
8. Children's Privacy
Our Services are not directed to children under 13 (per the Children's Online Privacy Protection Act, COPPA, 15 U.S.C. §§6501–6506). We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact us at hello@veloxenterprises.com and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will note the “Last updated” date at the top of this page. Material changes will be communicated via email to active clients.
10. Contact
Velox Enterprises LLC
500 8th Ave FRNT 3, New York, NY 10018
hello@veloxenterprises.com