Pick the one that suits how you like to decide.
Same Veloċi, five ways to get to know it. Switch whenever you like.
Privacy policy · United Kingdom
Version 23 October 2026 · Veloċi is run by Your Dream Creator Pty Ltd, ABN 85 603 545 722, ACN 603 545 722.
We are not open for orders in the United Kingdom just yet. There is some paperwork to finish first, and we would rather do it properly than sell around it, so prices here are for reference.
It is your billing address that decides this, not your passport. If yours is in Australia, the United States or New Zealand, you can order today.
Otherwise email [email protected] and we will tell you the day we open here.
Both say the same thing. The full version is the one that governs; it is on this page whether or not you switch to it.
| What | Why we need it |
|---|---|
| First-party funnel A pseudonymous visitor ID for up to 90 days, a session ID, referral source and funnel steps sent to our Cloudflare-hosted service. Advertising click IDs are excluded without advertising permission. | To understand visits and progress through the builder. It follows the regional analytics choices below, including waiting for Accept when the country is unknown. No thanks or a browser privacy signal switches it off. |
| Optional measurement Usage and device information, conversion events and masked session insights go to Google Analytics 4 and Microsoft Clarity. Meta Pixel receives page-view, device and cookie information and, when present, the fbclid advertising click ID for advertising measurement; Meta may associate these with a Meta account. These providers may process data outside Australia. | To understand visits, builder and checkout starts and verified purchases, and measure advertising results. Meta receives page views, builder starts, checkout starts and verified purchases (order value, currency and a one-way hashed order reference) from our integration. See Retention for the periods. |
| Order details Your name, business name, email, phone, business address, and your ABN or equivalent if you give us one. When you search for an Australian business, we send the name you enter to ABN Lookup and use its public business details to help you choose the registrant. | To take payment, send your access link, invoice you, and register a domain in your name. |
| Your site content The words and photos you put into the builder. | So your build saves and your published site works. |
| Payment A payment reference, and a saved payment method only if you asked us to keep one. | To charge you once, and to let you add a domain or mailbox in one tap if you chose that. |
| Technical IP address, browser and device, and the time of key actions such as opening your access link. | To keep the service working and secure, and to show your bank what happened if a payment is disputed. |
| Support What you write to us and what we write back. | To answer you, and to see if a problem is recurring. |
| Traffic to sites we host A daily count of page requests for each site we host. No visitor is identified: no cookie, no IP address, no browser, no page path. | So we can tell you how your site is doing, and so we know which of our own addresses are worth keeping. |
| Consent records What you agreed to at checkout, with the time, policy version and IP address. | To prove what was agreed, to you and to your bank. |
Only the services that make the product work. Each one gets the minimum it needs, nothing more.
| Service | What it does | Where |
|---|---|---|
| Cloudflare | Hosting, CDN, storage of builds and published sites, DNS | Global edge; account region United States |
| Stripe | Payments, tax calculation, invoicing. Card numbers never reach our servers | United States, Ireland |
| Resend | Transactional email — access links, receipts, renewal reminders | United States |
| Synergy Wholesale | Domain registration, business mailboxes | Australia |
| Openprovider | Domain registration for some endings | Netherlands |
The current list is always at veloċi.com/subprocessors.
Only as long as there's a reason. When the reason ends, so does the record.
| What | How long | Why |
|---|---|---|
| Meta advertising measurement | Meta lists _fbp and _fbc browser cookies with a 90-day lifetime. Cookie lifetimes and Meta's separate retention of received event data require confirmation before release. | Page views, browser identifiers and the fbclid advertising click ID help Meta measure advertising and may be associated with a Meta account. Awaiting legal review. |
| Optional measurement | GA4: 14 months for user and event data; user retention resets on new activity. Clarity: playback 30 days; click/heatmap data and labelled or favourited sessions 9 months. | To understand consented visits and improve the service. GA4 aggregate standard reports are not limited by its user/event retention setting. |
| Order and tax records | 7 years | Australian tax law requires records be kept this long. We cannot delete these earlier. |
| Sanctions screening checks | 7 years | When you order, your business name, contact name and registrant details are compared with Australia's consolidated sanctions list, and the check is recorded with its date whether or not anything matched. The record is our proof that we took the precaution the law asks for, so it is kept as long as the order record. |
| Abuse reports and removal notices | 7 years | The report, when we received it, what we did and when. We promise on the abuse page to keep this record. |
| Your site content and builds | While your account is open, then 90 days | So you can come back to an unfinished build, and so a published site does not vanish the moment a card fails. |
| Domain and mailbox records | For the life of the service, then 7 years | Registry obligations and the tax record above. |
| Support conversations | 24 months | Long enough to see a repeat problem; short enough not to hoard. |
| Traffic counts for hosted sites | 60 days | A rolling window, aggregate only. Old days drop off automatically. |
| Marketing consent | Until you withdraw it | One click in any email. |
| Payment records | Held by Stripe under their retention rules | We keep only a reference, never a card number. |
If you stop using Veloċi we can keep your account open with nothing but your email address, so you can come back without us holding anything else. Ask and we'll do that, or delete everything we're allowed to delete.
Wherever you are, you can:
Email [email protected] and a person will answer. We don't charge for this and we won't treat you differently for asking.
If we don't resolve it, you can complain to the Information Commissioner's Office (ico.org.uk).
Your Dream Creator Pty Ltd (ACN 603 545 722), trading as Adam's Media and publishing the Veloċi service, is the controller of the personal information described in this policy. ABN 85 603 545 722. Business address: Suite 17, 89-97 Jones Street, Ultimo NSW 2007, Australia. Contact: [email protected].
This policy is issued in accordance with the UK GDPR and the Data Protection Act 2018.
Representative. We have not yet appointed a representative under Article 27, and accordingly we do not offer the service to, or knowingly accept orders from, individuals in this market. This section will name the representative and their contact details before we begin offering the service here.
| Category | Detail | Purpose | Lawful basis |
|---|---|---|---|
| First-party funnel | A pseudonymous visitor ID for up to 90 days, a session ID, referral source and funnel steps sent to our Cloudflare-hosted service. Advertising click IDs are excluded without advertising permission. | To understand visits and progress through the builder. It follows the regional analytics choices below, including waiting for Accept when the country is unknown. No thanks or a browser privacy signal switches it off. | Consent in the countries and territories listed below; elsewhere the regional defaults and saved choice apply. Country comes from the hosting edge, not the selected market |
| Optional measurement | Usage and device information, conversion events and masked session insights go to Google Analytics 4 and Microsoft Clarity. Meta Pixel receives page-view, device and cookie information and, when present, the fbclid advertising click ID for advertising measurement; Meta may associate these with a Meta account. These providers may process data outside Australia. | To understand visits, builder and checkout starts and verified purchases, and measure advertising results. Meta receives page views, builder starts, checkout starts and verified purchases (order value, currency and a one-way hashed order reference) from our integration. See Retention for the periods. | Consent for EU and UK visitors; elsewhere the regional defaults and saved choice below apply. Browser privacy signals override permission. Advertising wording and legal bases awaiting legal review |
| Order details | Your name, business name, email, phone, business address, and your ABN or equivalent if you give us one. When you search for an Australian business, we send the name you enter to ABN Lookup and use its public business details to help you choose the registrant. | To take payment, send your access link, invoice you, and register a domain in your name. | Performance of our contract with you |
| Your site content | The words and photos you put into the builder. | So your build saves and your published site works. | Performance of our contract with you |
| Payment | A payment reference, and a saved payment method only if you asked us to keep one. | To charge you once, and to let you add a domain or mailbox in one tap if you chose that. | Performance of our contract, and consent for the saved method |
| Technical | IP address, browser and device, and the time of key actions such as opening your access link. | To keep the service working and secure, and to show your bank what happened if a payment is disputed. | Our legitimate interest in running a service that is not defrauded |
| Support | What you write to us and what we write back. | To answer you, and to see if a problem is recurring. | Performance of our contract with you |
| Traffic to sites we host | A daily count of page requests for each site we host. No visitor is identified: no cookie, no IP address, no browser, no page path. | So we can tell you how your site is doing, and so we know which of our own addresses are worth keeping. | Our legitimate interest in understanding usage of our own service |
| Consent records | What you agreed to at checkout, with the time, policy version and IP address. | To prove what was agreed, to you and to your bank. | Legal obligation and our legitimate interest in defending a dispute |
We do not collect special categories of personal data, and we do not knowingly collect information from children. We do not carry out automated decision-making producing legal or similarly significant effects.
The table below describes the operational providers used for purchases and websites. Optional Google Analytics, Microsoft Clarity and Meta Pixel measurement, their regional defaults and controls, are described under Cookies and local storage.
| Processor | Function | Location | Policy |
|---|---|---|---|
| Cloudflare | Hosting, CDN, storage of builds and published sites, DNS | Global edge; account region United States | cloudflare.com/privacypolicy |
| Stripe | Payments, tax calculation, invoicing. Card numbers never reach our servers | United States, Ireland | stripe.com/privacy |
| Resend | Transactional email — access links, receipts, renewal reminders | United States | resend.com/legal/privacy-policy |
| Synergy Wholesale | Domain registration, business mailboxes | Australia | synergywholesale.com/privacy-policy |
| Openprovider | Domain registration for some endings | Netherlands | openprovider.com/privacy-policy |
Meta Pixel shares page-view, device and cookie information with Meta for advertising measurement when permitted by the regional defaults and your choices below; Meta may match it with a Meta account. Our integration does not configure form contents or payment credentials as event parameters. Meta Events Manager automatic matching and automatic-event settings require confirmation before release. We may disclose information where compelled by law, and will tell you unless prohibited from doing so.
We are established in Australia and process personal information there. Content and site data are stored and served on Cloudflare's global network, and transactional email is delivered through a provider in the United States.
Australia is not the subject of an adequacy decision. Where personal information of individuals in the United Kingdom is transferred to us, that transfer is made on the basis of the Standard Contractual Clauses as implemented by the UK International Data Transfer Addendum, together with a transfer risk assessment and the technical measures described in section 6. A copy of the clauses relied upon is available on request. Until a representative is appointed we do not offer the service in this market, and this section is published so the position is transparent in advance.
| Category | Period | Reason |
|---|---|---|
| Meta advertising measurement | Meta lists _fbp and _fbc browser cookies with a 90-day lifetime. Cookie lifetimes and Meta's separate retention of received event data require confirmation before release. | Page views, browser identifiers and the fbclid advertising click ID help Meta measure advertising and may be associated with a Meta account. Awaiting legal review. |
| Optional measurement | GA4: 14 months for user and event data; user retention resets on new activity. Clarity: playback 30 days; click/heatmap data and labelled or favourited sessions 9 months. | To understand consented visits and improve the service. GA4 aggregate standard reports are not limited by its user/event retention setting. |
| Order and tax records | 7 years | Australian tax law requires records be kept this long. We cannot delete these earlier. |
| Sanctions screening checks | 7 years | When you order, your business name, contact name and registrant details are compared with Australia's consolidated sanctions list, and the check is recorded with its date whether or not anything matched. The record is our proof that we took the precaution the law asks for, so it is kept as long as the order record. |
| Abuse reports and removal notices | 7 years | The report, when we received it, what we did and when. We promise on the abuse page to keep this record. |
| Your site content and builds | While your account is open, then 90 days | So you can come back to an unfinished build, and so a published site does not vanish the moment a card fails. |
| Domain and mailbox records | For the life of the service, then 7 years | Registry obligations and the tax record above. |
| Support conversations | 24 months | Long enough to see a repeat problem; short enough not to hoard. |
| Traffic counts for hosted sites | 60 days | A rolling window, aggregate only. Old days drop off automatically. |
| Marketing consent | Until you withdraw it | One click in any email. |
| Payment records | Held by Stripe under their retention rules | We keep only a reference, never a card number. |
Where you ask for erasure, we will delete what we are not required to retain, and tell you plainly what must remain and why. Retained tax records are not used for any other purpose.
Data is transmitted over TLS and stored on infrastructure with access restricted to those who need it. Payment card data is handled entirely by Stripe under PCI-DSS and does not reach our systems. Access to production systems is limited and authenticated. We keep records of consent and of significant account actions so that a disputed transaction can be evidenced.
Subject to the exceptions in the UK GDPR and the Data Protection Act 2018, you may:
Requests may be made to [email protected]. We respond within 30 days, without charge, and we do not discriminate against anyone who exercises a right. We may ask you to verify your identity where a request concerns an account.
You may complain to us first. You may also complain at any time to the Information Commissioner's Office (ico.org.uk).
Optional Google Analytics, Microsoft Clarity, Meta Pixel and our first-party funnel stay off until you allow them, with Accept or that purpose's switch, in the United Kingdom, the European Union, Iceland, Liechtenstein, Norway, Switzerland and the EU territories Guadeloupe, Martinique, French Guiana, Réunion, Mayotte, Saint Martin and Åland, and when the country cannot be determined. Elsewhere they run by default unless you saved No thanks or your browser sends Do Not Track or Global Privacy Control. Browser privacy signals override Accept. Country comes from the hosting edge, not browser language, timezone or the selected market; no identifier is created for this lookup.
On a phone, a short bar in the header says where cookie settings are after a few seconds, then the cookie drops to the row at the foot of the page. On larger screens nothing floats for the first 30 seconds on a page, or 60 seconds or more on a form or a page that fits one screen; where a choice is required, a thin bottom strip then asks about stats and ads for up to five seconds and the cookie settles in the row at the foot of the page; elsewhere the cookie opens Turn off and Keep on. Cookie settings opens the choice, with a separate switch for counting visits and for measuring ads. Browser privacy signals suppress the strip and override permission. The footer Cookie settings link remains available. No thanks switches optional measurement off; withdrawal reloads the page to stop loaded trackers and clears known first-party analytics cookies. The site-consent-v1 preference remains valid for up to 180 days. If the browser cannot save it, a functional measurement=off flag keeps the reloaded page off; a browser privacy signal can keep it off across pages.
The functional ckn-time session value holds only {strip, chip, m, s}: used strip and cookie time, the animation turn count and a shuffle seed; user scrolling ends the strip budget early. It contains no identifier and is not governed by the optional measurement choice. This policy covers the Veloċi site and builder on veloci.build. Google Analytics measures visits, builder starts, checkout starts and verified purchases. Microsoft Clarity provides masked session insights. Meta Pixel measures advertising results under the advertising permission: page views, builder starts, checkout starts and verified purchases. A purchase sends Meta the order value, its currency and a one-way hashed order reference, never your name, email address or the order reference itself. Our code sends these events manually and disables SDK automatic event configuration and history-triggered page views. Before Meta loads, the visible address is reduced to the path plus fbclid, when present; all other parameters and the fragment are removed. Meta remains excluded for private portals, admin pages and credential-bearing return documents even after their address is cleaned. The one exception is the page you return to after payment: once its address is cleaned to the path plus fbclid, when present, it may send the verified purchase alone, with no page view and no other event. Meta loads use a no-referrer policy; a document arriving with a sensitive referrer also stays excluded. Clarity remains suppressed on documents arriving with query strings or fragments, and on private portals. Meta Events Manager automatic matching and automatic-event settings require confirmation before release. Our integration does not configure form contents or payment credentials as event parameters. Google Ads conversion measurement remains disabled until configured; if enabled it follows these regional choices. No Meta advanced matching fields or Conversions API are configured in this release. Cloudflare Web Analytics remains in place. Essential build, sign-in and payment records and purchase deduplication markers are unaffected.
Our first-party funnel uses a pseudonymous visitor ID for up to 90 days and session storage to count steps once per visit. It follows the regional analytics choices above: it waits for Accept in consent-required countries and territories and when the country is unknown; elsewhere it runs by default unless you saved a refusal or your browser sends a privacy signal. Browser language, timezone and your selected market do not determine this. No thanks or a browser privacy signal switches it off in every region. Detail is at veloci.build/cookies.
We publish the version date at the top of this page. Where a change materially affects how we handle information already collected, we will tell affected customers by email before it takes effect.
Partner programme
That's the Starter bundle fee. They pay the same, and we never pay for reviews.