Privacy Policy
This explains what information we collect, why we collect it, and what we do with it. In short: we use it to run our service, we don't sell it, and we don't hand it to anyone for their own marketing.
Last updated: 19 August 2026
Before you publish this: every highlighted field below needs your real details filling in, and this document should be reviewed by someone qualified before you rely on it. It is a solid, honest starting point written to match how Velta actually operates — it is not legal advice, and it has not been checked by a solicitor.
Contents
1. Who we are
Velta is a marketing agency providing advertising, Google Business Profile management, reputation management, lead capture and related services to service businesses.
This policy is issued by [LEGAL COMPANY NAME], a company registered in England and Wales under company number [COMPANY NUMBER], with its registered office at [REGISTERED ADDRESS]. We trade as Velta.
For the personal information described in this policy, we are the data controller — meaning we decide why and how it is used. Section 5 covers the separate situation where we handle data on behalf of a client.
2. What we collect
When you visit this website
Our host records standard technical information such as your IP address, browser type and the pages you requested. This is ordinary server logging, used for security and to keep the site working.
When you book a call or get in touch
When you book a call, fill in a form or email us, we collect what you give us — typically your name, email address, phone number, business name and whatever you tell us about your business. Our booking calendar is provided by GoHighLevel, so that information is captured in their system.
When you become a client
We collect the information needed to deliver and bill for the service: contact details for you and your staff, business and billing details, access to the accounts we manage on your behalf, and records of our work and correspondence.
Recorded and automated calls
Where we provide call handling or AI phone answering, calls may be recorded or transcribed so the service can function. Where we do this for a client, that client is responsible for telling callers and obtaining any consent their local law requires.
3. Why we use it
We use personal information to:
- respond to enquiries and arrange calls
- provide, support and improve the services you have asked for
- send service-related messages about your account
- take payment and keep accounting records
- keep our systems secure and prevent misuse
- meet our legal obligations
Under UK data protection law we rely on: performance of a contract where we are delivering a service you have bought; legitimate interests where we are responding to a business enquiry, running our business or protecting our systems; consent where we send marketing you have opted into, which you can withdraw at any time; and legal obligation where the law requires us to keep records.
4. Who we share it with
We do not sell personal information, and we do not share it with third parties for their own marketing.
We do use trusted suppliers to run the service. They process data on our instructions, under contract, and may only use it to provide their service to us. The main ones are:
- GoHighLevel (HighLevel, Inc.) — our CRM, booking calendar, email and SMS platform. Most contact information we hold sits here.
- Netlify — hosting for this website.
- Google and Meta — where we run advertising or manage a Google Business Profile for a client.
- Payment and accounting providers — to take payment and keep our books.
- Voice AI and telephony providers — where AI call answering or call tracking forms part of the service.
We may also disclose information where the law requires it, or to protect our rights, and to a buyer if the business is ever sold — in which case this policy would continue to apply to information transferred.
5. Data we handle for clients
When we run campaigns, review requests or lead capture for a client, we handle personal information belonging to their customers and enquirers. For that data the client is the controller and we act as their processor: we only use it to deliver the agreed service, we do not use it for our own purposes, and we do not use one client's data to benefit another.
If you are a member of the public who has contacted one of our clients and you want your information corrected or removed, contact that business directly — they decide what happens to it. If you contact us instead, we will pass your request to them.
6. International transfers
We are based in the United Kingdom and many of our suppliers, including GoHighLevel, are in the United States. That means personal information may be transferred outside the UK. Where it is, we rely on the safeguards permitted by UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so your information keeps an equivalent level of protection.
7. How long we keep it
We keep personal information only as long as we need it:
- Enquiries that don't become clients — up to 24 months, then deleted.
- Client records — for the life of the relationship and then as long as needed for legal and accounting purposes, which in the UK is generally six years.
- Call recordings and transcripts — [YOUR RETENTION PERIOD], unless a client instructs otherwise.
- Server logs — a short period, set by our hosting provider.
8. Your rights
If you are in the UK or EU, you have the right to ask us for a copy of the personal information we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we relied on it.
To exercise any of these, email us using the details in section 12. We will respond within one month.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you came to us first so we can put it right.
US residents. Depending on your state, you may have similar rights, including the right to know what we collect and to request deletion, and the right not to be discriminated against for exercising them. We do not sell personal information or share it for cross-context behavioural advertising. Contact us using the same details and we will handle your request.
9. Cookies
This website does not set advertising or analytics cookies of its own.
Our booking page embeds a scheduling widget from GoHighLevel, which may set its own cookies in order to function. That is covered by GoHighLevel's own privacy notice.
You can block or delete cookies in your browser settings. If we later add analytics or advertising tracking to this site, we will update this section and ask for consent where required.
10. Security
We use encrypted connections, access controls and reputable suppliers, and we limit access to personal information to people who need it to do their job. No system is perfectly secure, but if a breach occurred that put your rights at risk we would tell you and the regulator as the law requires.
11. Changes to this policy
We may update this policy as our service changes. The date at the top shows when it was last revised. If we make a significant change we will make that clear on this page.
12. Contact us
For anything about this policy or your information:
[LEGAL COMPANY NAME] (trading as Velta)
Email: [PRIVACY EMAIL, e.g. privacy@velta-agency.com]
Address: [REGISTERED ADDRESS]
ICO registration number: [ICO NUMBER]