Privacy Policy
This Privacy Policy explains how Velmorino collects, uses, stores and protects personal data when you visit our website, create an account or use our platform. It is written to meet the requirements of the UK General Data Protection Regulation and the Data Protection Act 2018.
1. Who we are
For the purposes of data protection law, the controller of your personal data is Velmorino, Corn Street 39, EC4N 7BJ London, GB. You can contact us about privacy matters at [email protected] or on +44 20 7946 0073.
2. Information we collect
We collect the following categories of information:
- Account information: name, email address, country of residence and a password stored in hashed form.
- Verification information: details we need to confirm identity where required by law, such as date of birth and identity document checks handled by approved providers.
- Usage information: pages viewed, features used, device type, browser, approximate location derived from IP address and timestamps.
- Communications: messages you send to our support team and your communication preferences.
We do not ask you to share private keys or seed phrases. Please never send these to anyone, including Velmorino staff.
3. How we use your information
We use personal data for the following purposes:
- to create and maintain your account and provide the Services;
- to secure the platform and detect fraud, abuse and unauthorised access;
- to meet legal obligations, including anti-money laundering and sanctions checks;
- to respond to enquiries and provide customer support;
- to understand how the website is used and improve its design and performance;
- to send service messages and, where you have opted in, marketing updates.
4. Lawful bases
Our lawful bases for processing include performance of a contract, compliance with legal obligations, our legitimate interests in running and securing a safe platform, and your consent where we rely on it. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Sharing your information
We do not sell personal data. We may share it with trusted service providers who process data on our behalf, such as hosting, analytics, identity verification and customer communication providers. These providers are bound by written contracts and may only act on our instructions. We may also disclose information where required by law, by a court order or by a competent regulator.
6. International transfers
Some of our providers may process data outside the United Kingdom. Where this happens, we use safeguards recognised by UK data protection law, such as approved contractual clauses or adequacy regulations, to protect your information.
7. Retention
We keep personal data only for as long as necessary for the purposes described above. Account records are generally retained for the duration of the relationship and for a period afterwards to satisfy legal, accounting and dispute-resolution requirements. Records held for anti-money laundering purposes are retained for the period set by applicable regulations.
8. Cookies
We use essential cookies to keep the platform secure and functional, and optional analytics cookies to understand site usage. Optional cookies are only set where permitted by law and, where required, with your consent. You can manage cookies through your browser settings.
9. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, logging and regular security reviews. No system is completely secure, so we cannot guarantee absolute protection. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the Information Commissioner's Office where required and inform you without undue delay.
10. Your rights
Under UK data protection law you have the right to access your personal data, to have inaccurate data corrected, to request erasure in certain circumstances, to restrict or object to processing, to request data portability, and to object to direct marketing at any time. To exercise these rights, contact us using the details above. We may ask you to verify your identity before responding. We aim to respond within one month.
11. Children
The Services are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.
12. Complaints and changes
If you have concerns about how we handle your data, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner's Office at ico.org.uk. We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date shown above.