Privacy & Cookies Policy.

1. Who we are

Veltro Software is operated by Conor Murray, a sole trader based in Belfast, United Kingdom ("Veltro", "we", "us"). We are the data controller for personal data collected through this website and our related services. You can contact us about anything in this policy at conormurray@veltrosoftware.co.uk or on 07476 998153.

2. What we collect and why

We collect personal data in the following situations:

• Booking a demo — your name, email address, phone number and any notes you provide, so we can hold the appointment, send confirmations and reminders, and follow up.
• Using the website chat — the messages you send and any contact details you share, so the assistant can answer your questions and, with your agreement, book you in or pass your enquiry to us.
• Calling or texting us — your phone number and call/message history, including automated text replies if we miss your call.
• Emailing us — your email address and the contents of your message.

Our lawful bases under UK GDPR are: taking steps at your request before entering a contract (bookings and enquiries), and our legitimate interests in running and promoting our business (responding to messages, following up on enquiries). Where we send marketing, we rely on consent or the soft opt-in, and every message includes a way to opt out.

3. Who processes data on our behalf

We use a small number of trusted service providers ("processors") to run Veltro. They only process data on our instructions:

• HighLevel Inc. — our CRM and communications platform, which stores contacts, bookings, messages and call records.
• Vercel Inc. — hosts this website.
• Cloudflare Inc. — powers the website chat infrastructure.
• Anthropic — provides the AI model that generates chat responses. Chat messages are processed to produce replies.
• Mailgun / Sinch — delivers transactional email.
• Microsoft 365 — our business email.

Some of these providers are based in, or store data in, the United States. Where personal data is transferred outside the UK, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision.

4. How long we keep data

We keep enquiry and booking data for as long as needed to respond and provide our services, and for up to 24 months after our last contact so we can deal with follow-up questions. Data we must keep for legal or accounting reasons is kept for the period the law requires. You can ask us to delete your data at any time (see section 6).

5. Cookies

This website keeps cookies to a minimum. We use strictly necessary cookies and similar technologies needed for the site and the chat widget to function — for example, remembering your chat conversation so it doesn't reset on every page. These do not require consent. We do not currently use advertising or cross-site tracking cookies. If we introduce analytics or marketing cookies in future, we will ask for your consent first and update this policy.

You can block or delete cookies in your browser settings at any time; the site will still work, though the chat may not remember your conversation.

6. Your rights

Under UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time, where consent is our lawful basis.

To exercise any of these, email conormurray@veltrosoftware.co.uk. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to resolve it directly first.

7. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed, and significant changes will be highlighted on this page.