How Velsyr collects, uses, and protects your personal information — wherever in the world you're visiting from.
Velsyr ("Velsyr," "we," "us," or "our") is a web design and digital branding studio operated by an individual based in Kolkata, India, serving clients worldwide. This Privacy Policy explains what personal information we collect through velsyr.vercel.app and any successor domain (the "Site"), how we use it, who we share it with, and the rights available to you.
This policy applies regardless of where you are located. If you are in the European Economic Area (EEA) or United Kingdom, we process your data in line with the General Data Protection Regulation (GDPR) and UK GDPR. If you are a California resident, Sections 10 reflects your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). If you are in India, we honour the applicable provisions of the Digital Personal Data Protection Act, 2023 (DPDPA). Where local law grants you stronger rights than described here, local law prevails.
Velsyr is currently operated as an individual / sole-proprietor business (not yet a registered company) based in Kolkata, West Bengal, India. For the purposes of applicable data protection law, Velsyr acts as the "data controller" for personal information collected through the Site.
Because Velsyr is an individual-run studio rather than a registered corporate entity, formal requests (data access, deletion, complaints) are handled personally by the site owner — see Section 15 for direct contact details.
We collect information in three ways: what you give us directly, what we collect automatically, and what we receive from third parties.
| Category | Examples | When collected |
|---|---|---|
| Contact details | Full name, email address, phone / WhatsApp number | Audit request form, contact form, WhatsApp chat |
| Business information | Business type, industry, existing website URL, budget range, project brief | Request-audit form, discovery calls |
| Project & billing data | Invoicing details, billing address, payment confirmation (not full card numbers) | Once a project is confirmed |
| Communications | Emails, WhatsApp messages, call notes, meeting recordings (if any) | Throughout our working relationship |
| Content you supply | Logos, copy, images, credentials you share for building your site | During active projects |
We do not knowingly collect sensitive categories of data (health, religion, biometric, political opinions) and ask that you avoid including such details in messages or briefs to us.
If you're located in the EEA/UK, we rely on one of the following legal bases for each use of your data:
We use essential cookies to run the Site and, where you consent, analytics cookies to understand how visitors use it. We do not use cookies to build advertising profiles or sell data to ad networks. Full details — including how to opt out — are in our Cookie Policy.
We never sell your personal information. We share it only in these limited circumstances:
We do not permit any third party to use your data for their own independent marketing purposes.
We are based in India. Because we serve clients globally, your information may be processed and stored on servers located outside your home country — including in India and wherever our hosting and infrastructure providers operate (which may include the United States or the EU).
Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards recognised under GDPR, such as Standard Contractual Clauses adopted by our service providers, or transfers to jurisdictions recognised as providing adequate protection. By using the Site or engaging our services, you understand your data may be processed outside your country of residence.
You may request earlier deletion — see Section 10.
We apply reasonable technical and organisational safeguards, including:
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work to reduce risk at every stage and will notify you promptly if a breach affecting your data occurs — see Section 13.
The Site and our services are directed at businesses and individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
If we become aware of a security incident that compromises your personal data, we will notify affected clients without undue delay, and in any case within the timeframe required by applicable law (e.g. 72 hours under GDPR where feasible), along with the nature of the breach and steps we're taking to address it.
We may update this Privacy Policy as our services, tools, or legal obligations evolve. Material changes will be reflected by updating the "Last updated" date above, and where changes are significant, we'll notify active clients directly by email. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.
For any privacy question, data request, or complaint, reach us at:
Reach out and we'll get back to you within 24–48 hours.