Privacy Notice

Velori (velori.app) is operated by Bonginkosi Sibinda, trading as Velori ("we", "us"). We are the data controller for the personal data described in this notice. Contact: hello@velori.app.

• Account data — name and email address, used to create and secure your account (legal basis: contract performance).
• Planner data — saved places, itineraries, and trip dates, used to provide the planner service (contract performance).
• Newsletter data — your email if you join the weekly dispatch (consent; you can withdraw at any time).
• Partner applications — business and contact details submitted through "List with us" (contract performance / legitimate interests).
• Usage & device data — pages visited, clicks on partner links, approximate device and browser information, and IP address, used for security, fraud prevention, product improvement, and measuring which guides lead to bookings (legitimate interests).
• Support messages — correspondence when you contact us (legitimate interests).

Payment card details are collected and processed directly by Paddle, our Merchant of Record — we never see or store your full card number.

• Paddle — our Merchant of Record, for sale of memberships, subscription management, payments, tax compliance, and invoicing.
• Service providers — hosting, database, and email-delivery providers acting under contract (subprocessors).
• Affiliate networks — when you click a partner link, the network (e.g. CJ) and the partner (e.g. Booking.com, GetYourGuide) receive the click data needed to attribute the referral.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

Some providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep personal data only as long as needed for the purposes above — account data while your account is active, billing records for the period required by tax law — then delete or anonymise it. We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

Depending on where you live (including under UK/EU GDPR), you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. Email hello@velori.app and we will respond within one month. You also have the right to complain to your data-protection supervisory authority (in the UK, the ICO).

We use essential storage for sign-in sessions and your planner preferences, and a small amount of local storage for settings such as saved places on your device. You can clear these in your browser settings at any time; essential storage is required for the service to function.

If we change this notice we will update the date above and, for material changes, let members know by email.