Privacy Policy

Last updated: 18 June 2025

1. Introduction

("we", "us", "our") operates the website velqorinestavia.com and provides interior design services from our studio in London. We are committed to protecting the personal data of everyone who visits our website or contacts us about our services.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we keep it, and what rights you have in relation to it. It applies to all personal data processed by us in connection with the website and our business activities.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully. If you have any questions, our contact details are set out in Section 12.

2. Data Controller

The data controller responsible for your personal data is:

Legal entity
Registered address
Company registration number 16842753
VAT number GB 492817365
Website velqorinestavia.com
Privacy enquiries privacy@velqorinestavia.com

3. Personal Data We Collect

We collect personal data in the following categories, depending on how you interact with us.

3.1 Contact and Enquiry Data

When you submit an enquiry, request a consultation, or contact us by any means, we may collect:

  • Your full name
  • Your email address
  • Your telephone number (if provided)
  • Your postal address or project location (if provided)
  • The content of your message or enquiry
  • Any attachments or images you choose to send us
  • The date and time of your submission

3.2 Client and Project Data

If you engage our interior design services, we may additionally collect and process:

  • Billing name and address
  • Payment and invoicing information
  • Property address and relevant access details
  • Design preferences, style choices, and project requirements you share with us
  • Correspondence and meeting notes related to your project

3.3 Device and Technical Data

When you visit our website, certain technical information is collected automatically. This may include:

  • Your IP address
  • Browser type and version
  • Operating system
  • Pages viewed and time spent on each page
  • Referring URL (the page you visited before arriving at our site)
  • Date and time of your visit

This data is collected through standard server logs and, where you have given your consent, through cookies or similar tracking technologies.

3.4 Consent Data

Where we rely on your consent as a legal basis for processing (for example, for non-essential cookies or direct marketing communications), we keep a record of the consent you gave, including the date, the version of the notice presented to you, and the choices you made.

3.5 Data You Provide Voluntarily

If you subscribe to any newsletter or updates we may offer, or if you communicate with us through social media, we will collect the personal data you share in that context.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to help the site function correctly and to understand how visitors use it. Cookies are small text files placed on your device.

We use cookies in the following categories:

Category Purpose Legal basis
Strictly necessary Enable core website functions such as page navigation and form submission Legitimate interests (essential operation of the site)
Analytics and performance Help us understand how visitors interact with our pages so we can improve the user experience Consent
Functional Remember preferences you have set, such as language or display choices Consent

You can withdraw or adjust your cookie consent at any time by updating your preferences through the cookie settings on our website, or by adjusting your browser settings to refuse cookies. Please note that disabling strictly necessary cookies may affect how the website functions.

6. Recipients of Personal Data

We do not sell or rent your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the purposes set out in this policy:

  • IT and hosting providers: Companies that host our website and email systems, acting as data processors on our behalf under written contracts.
  • Professional advisers: Solicitors, accountants, and insurers where necessary in the conduct of our business.
  • Suppliers and contractors: Tradespeople, suppliers, or other professionals involved in delivering your interior design project, but only where you have been informed and where such sharing is necessary to carry out the work.
  • Analytics service providers: Where you have consented to analytics cookies, data may be shared with the provider of those analytics tools under appropriate data-processing agreements.
  • Authorities: HM Revenue and Customs, law enforcement, or other public bodies where we are required to disclose data by law or court order.

All processors we appoint are required to process your personal data only in accordance with our instructions and to implement appropriate security measures.

6.1 International Transfers

We aim to keep personal data within the United Kingdom and the European Economic Area wherever possible. If any transfer of personal data to a country outside the UK is necessary, we will ensure it is protected by an appropriate safeguard, such as the UK's International Data Transfer Agreement or equivalent approved mechanism, in accordance with UK GDPR requirements.

7. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and to meet our legal and regulatory obligations. The table below gives an overview of our typical retention periods.

Data category Typical retention period Reason
Enquiries that did not lead to a contract 12 months from the date of your last contact Legitimate interests in following up, then deletion
Client and project data (active clients) Duration of the project plus 7 years Legal obligation (UK tax and company record-keeping requirements)
Financial and invoicing records 7 years from the end of the relevant financial year Legal obligation (HMRC requirements)
Marketing consent records Until consent is withdrawn, plus 3 years Demonstrating compliance with data protection law
Website technical logs Up to 90 days Security monitoring and troubleshooting
Cookie consent records 13 months from the date consent was given Demonstrating compliance

At the end of each applicable retention period, we will securely delete or anonymise your personal data. Where anonymisation is applied, the resulting data can no longer identify you and is no longer considered personal data.

8. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Our security measures include, but are not limited to:

  • Use of encrypted connections (TLS/HTTPS) for data transmitted via our website
  • Password protection and access controls on internal systems
  • Limiting access to personal data to staff and contractors who have a genuine need to process it
  • Regular review of our information security practices

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at privacy@velqorinestavia.com.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, and we will notify you directly where required by law.

9. Your Rights

Under UK data protection law, you have the following rights in relation to your personal data. We will respond to any valid request without undue delay and within one month of receipt. In complex or multiple requests that period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.

  • Right of access: You have the right to request a copy of the personal data we hold about you and to receive information about how we use it. This is commonly known as a subject access request.
  • Right to rectification: You have the right to ask us to correct any inaccurate personal data we hold about you, or to complete any incomplete data.
  • Right to erasure: In certain circumstances, you have the right to ask us to delete your personal data. This right does not apply where we are required to retain data to comply with a legal obligation or to establish, exercise, or defend legal claims.
  • Right to restriction of processing: You have the right to ask us to restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
  • Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Right to object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time, and we will stop processing your data for that purpose immediately upon receipt of your objection.
  • Rights in relation to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. We do not currently carry out any such automated decision-making.
  • Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us using the details set out in Section 12. We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

10. Direct Marketing

We may, from time to time, send you information about our interior design services, studio news, or design inspiration where you have consented to receive such communications, or where we have a legitimate interest in contacting existing clients about our services.

You can opt out of receiving marketing communications from us at any time by:

  • Clicking the unsubscribe link included in any marketing email we send you
  • Emailing us at privacy@velqorinestavia.com with your request to stop receiving marketing communications

We will act on your opt-out request promptly. Please note that even if you opt out of marketing communications, we may still contact you in connection with services you have contracted with us, such as sending invoices or project-related correspondence.

12. Complaints and Contact Details

12.1 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we process your personal data, please contact our privacy team:

By email privacy@velqorinestavia.com
By post Privacy Enquiries

12.2 Right to Lodge a Complaint

If you are not satisfied with our response to your privacy enquiry, or if you believe we are not processing your personal data in accordance with UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the supervisory authority for data protection in the United Kingdom.

The ICO can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
United Kingdom
Website: ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, and we encourage you to contact us in the first instance.

13. Changes to This Privacy Policy

We review and update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. When we make material changes, we will update the "last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website or services after any update takes effect constitutes your acknowledgement of the updated policy.