Privacy Policy

Velnariq is a trading name used by Sandeep Dabas, a sole trader in England and Wales, and is the controller for the personal data described here. Contact privacy@velnariq.co.uk for privacy matters.

We use account details, contact information, business identity and Companies House information, assessment answers, owner-provided evidence, uploaded document content, generated outputs, support correspondence, subscription status, billing contact and invoice information, and security or technical logs.

Payment card details are entered on Stripe-hosted payment pages. Velnariq does not receive or store full card numbers or card security codes.

We process information to create and secure accounts; provide assessments, reports and subscriptions; verify business identity; respond to support requests; prevent misuse; maintain financial records; and meet legal obligations. Depending on the activity, our lawful bases are performance of a contract, steps requested before a contract, legitimate interests in operating and protecting the service, and compliance with law.

Where consent is legally required for a separate activity, it will be requested specifically and may be withdrawn without affecting earlier lawful processing.

Authorised assessment evidence may be supplied to configured AI services to generate structured analysis. Velnariq applies provenance, evidence-reference and unsupported-claim checks, but generated outputs can still be incomplete and require human review. Do not submit information you are not authorised to share.

We use carefully selected providers for hosting and infrastructure, database and private document storage, authentication email, payment and subscription processing, business registry and public-web research, and AI-assisted analysis. These currently include Vercel, Neon, Resend, Stripe, Companies House, Brave Search and OpenAI where the relevant feature is used.

We share only what is reasonably necessary for the service. Providers may process data outside the UK; where required, we rely on appropriate contractual or legal transfer safeguards.

Account and assessment information is kept while needed to provide the service, resolve disputes, maintain security and meet legal obligations. Financial records, invoices and related transaction records are normally retained for at least six years. Retention may be longer where law or an active dispute requires it. Data no longer required is deleted or anonymised in line with operational procedures.

We use tenant isolation, server-side authorisation, protected secrets, restricted internal roles and private document storage. No internet service is risk-free. Report a suspected security issue to security@velnariq.co.uk.

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may complain to the UK Information Commissioner’s Office. We may need to verify identity and may retain information where legally required. Send requests to privacy@velnariq.co.uk.

Our current cookie use is limited to strictly necessary authentication, security and service-operation purposes. See the Cookie Notice. We will request consent before using non-essential cookies where required.

We may update this policy when the service, providers or legal requirements change. The effective date identifies the version applying when an acknowledgement is recorded.