Privacy policy

1. Who we are

Vellum Systems is the implementation services arm of Vellum AI Group Ltd, a company registered in England and Wales (Company No. 17129362). When this policy says "we" or "us", it means Vellum AI Group Ltd.

2. What we collect on this website

We collect the minimum information required to operate this site and respond to enquiries:

• Form submissions: if you submit the contact form, we receive the information you provide (name, organisation, role, email, country, your message, and stage of process).
• Cookie consent: if you accept or decline cookies, that preference is stored in your browser's local storage. We do not transmit this to a server.
• Server logs: our hosting provider (Cloudflare) logs basic request data (IP address, user agent, requested URL, timestamp) for security and operational purposes.

We do not use third-party analytics, advertising trackers, or behavioural profiling tools on this website.

3. How we use what we collect

Form submissions are used to respond to your enquiry. We do not add you to a mailing list, share your information with third parties, or use it for marketing purposes without your explicit consent. If we exchange substantive correspondence (e.g. during a discovery engagement), the relevant correspondence is retained as part of our business records.

4. Where your data is stored

Form submissions are processed by Formspree (our form provider). Server logs are held by Cloudflare. Correspondence is stored in standard business systems. Where we engage with you on a project, project data is held in the deployment environment we and you agree on — typically your environment, not ours.

5. How long we keep your data

Enquiry form submissions are retained for 24 months. Correspondence relating to active or recently active engagements is retained for the duration of the engagement plus six years (consistent with standard UK business record-keeping). Server logs are retained according to Cloudflare's standard retention policy.

6. Your rights

Under UK and EU data protection law, you have the right to access the personal data we hold about you, to request correction or deletion, to object to certain processing, and to lodge a complaint with the UK Information Commissioner's Office (ICO).

To exercise any of these rights, email [email protected]. We aim to respond within 30 days.

7. Changes to this policy

If we change this policy, the "last updated" date at the top of this page will be updated. Substantive changes will be flagged on this page.

8. Contact

Questions about this policy: [email protected]