Privacy Notice
This notice explains how Vellinx Ltd handles personal information, and which part applies to you.
In short, Vellinx is a tool that helps businesses research the organisations and people they have a genuine reason to approach, so that their contact is relevant rather than generic. Most of what we handle is professional, business-context information about people in work roles, and we set deliberate limits on what we look at.
Which part applies to you:
- If a business has researched or approached you using Vellinx, read "People we research to produce positioning intelligence".
- If we have contacted you about Vellinx itself, read "People we contact about Vellinx".
- If you have visited this website, read "Visitors to this website".
- If you have contacted us or made a complaint, read "People who contact us or make a complaint".
Whichever applies, you have rights over your information, including the right to object, and you can reach us at privacy@vellinx.com. Both are set out below.
Who we are and how to contact us
Vellinx Ltd is the controller of the personal information described in this notice. We are registered in England and Wales, company number 17186897, with our registered office in London SW1W.
For anything to do with your personal information, including exercising your rights or making a complaint, contact us at privacy@vellinx.com.
We have not appointed a data protection officer. We are not required to, given our size and the kind of processing we do, and we have recorded that as a considered decision rather than an oversight; we will appoint one if that position changes.
This notice is version 1 and was last updated on 15 June 2026. If we change how we handle personal information, we will update the notice and change the date.
People we research to produce positioning intelligence
What we do. Vellinx is a tool used by businesses to research the organisations they have a genuine reason to approach, and the people in the relevant roles at those organisations, so that when they make contact it is informed and relevant rather than generic. If you are a senior or decision-making professional at such an organisation, a Vellinx user may research you in your professional capacity, and this section explains what that involves.
How it works. When a user has a specific account and a small number of named people they have a real business reason to contact, Vellinx gathers professional information about that account and those people from sources that are already publicly available, and uses AI to draw it together into a short briefing for the user. The briefing is the user's starting point for their own judgement, not settled findings about you: claims about you are tied to their source, carry a marker of how current and how confident they are, and inferences are put as possibilities for the user to weigh, not as facts. A person at the user's organisation reviews and decides; nothing about you is decided automatically.
What we look at, and what we do not. We work with professional, business-context information: your name, your role and employer, and publicly evidenced signals about your likely professional priorities and the context of your organisation. We are built not to seek, infer, store or surface special-category information, such as health, beliefs or politics. That exclusion is set when the AI is instructed, not applied as an afterthought to its output. We do not profile your private life or character, and we do not hold your contact details.
Where it comes from. We do not collect this information from you. It comes from publicly available and similar openly accessible professional sources, retrieved through our search provider at the time a user runs the research. Because it does not come from you, you may not be aware of the research until you receive a more informed approach, which is part of why this notice exists.
Why we are allowed to do this. Our lawful basis is legitimate interests. The interest is ours and our users': enabling a business with a real reason to approach you to do so relevantly, which is ordinary business-to-business practice that a professional in your position would reasonably expect. We have weighed this against your interests and rights and built in the limits described here to keep it fair. You have the right to object to this processing, set out in full below, and we honour an objection: we stop, and we suppress, so the same information is not gathered again.
Profiling and automated decisions. Producing the briefing involves profiling, in that we build a picture of your likely professional priorities. It does not involve any solely automated decision that has a legal or similarly significant effect on you: the output goes to a person's judgement, and a person decides. We use your information only for the purpose described here, not for unrelated purposes.
People we contact about Vellinx
If you are a business contact at an organisation that might use Vellinx, we may contact you about the product. This is separate from the research described above.
What we use, and where it comes from. We use business-context contact information: your name, role and employer, and a business contact route such as a work email address. This comes from our own research and from what we already know about the organisation, not from you directly.
Why we are allowed to do this. For contacting named people at companies and limited liability partnerships by business email, our basis is legitimate interests: ordinary business-to-business marketing that a professional would expect, weighed against your interests. For some channels and recipients the rules are different and we rely on your consent instead, for example messages on social platforms, and email to sole traders, unincorporated partnerships, or personal email addresses. Where we make marketing calls, we screen them against the Telephone Preference Service and its corporate equivalent first.
How to stop hearing from us. Every message we send carries a way to opt out, and we honour it. You can object to this marketing at any time, and where we rely on your consent you can withdraw it at any time; in each case we stop. Your rights are set out in full below.
Visitors to this website
This website carries no analytics, no tracking, and no cookies that we set. The only personal information created when you visit is the technical connection data our hosting provider logs to run and secure the site, such as your IP address and basic details of the request your browser makes.
Our basis for this is legitimate interests, in operating and keeping the site secure. We keep these logs for as long as our hosting provider retains them for that purpose. You have rights over this information, including a right to object, set out below.
People who contact us or make a complaint
When you contact us, including to exercise a right or to make a complaint about how we handle personal information, we use what you give us to deal with your request and to keep a record of it.
What we hold. Your name and the contact route you use, what you tell us or the substance of your complaint, and any personal information the request or complaint concerns.
Why we are allowed to do this. For handling a complaint, or a request to exercise your rights, our basis is our legal obligation to deal with them. For other enquiries, our basis is our legitimate interest in responding to you.
How long we keep it. We keep this for as long as we need to handle your request or complaint and to show that we handled it, then review it for deletion. The full position on retention is set out below.
Who we share information with, and transfers outside the UK
We do not sell personal information, and we do not share it except as set out here.
Who receives it. The briefing we produce is made available to the business that requested it, which is the point of the research. Beyond that, the only others who handle personal information on our behalf are our service providers, acting on our instructions and under contract: providers of AI services that carry out the analysis and the search, and providers of IT infrastructure such as hosting and email. We do not give any of them the freedom to use the information for their own purposes.
Transfers outside the UK. Some of these providers are based in the United States, so some personal information is transferred there. Where it is, we put appropriate safeguards in place for the transfer, such as the UK International Data Transfer Addendum, and you can ask us for details at privacy@vellinx.com.
How long we keep information
We keep personal information only for as long as we need it for the purpose we collected it for, and then we delete it or reduce it to what we still need.
For the research described above, each record is dated from when it was produced, and that date is the anchor for how long we keep it. For complaints and other contact, we keep the information for as long as we need to handle the matter and to show that we handled it, then review it for deletion. For website logs, we keep them for as long as our hosting provider retains them to run and secure the site.
If you object and we suppress your information, we keep a minimal record of that objection itself, so we can continue to honour it and not gather the same information again.
Your rights
You have rights over the personal information we hold about you, and you can exercise any of them by contacting us at privacy@vellinx.com. We may need to confirm your identity first, and we will respond within the time the law allows, normally one month.
Your rights are:
- Access: to be told whether we hold information about you and to receive a copy.
- Rectification: to have inaccurate information corrected, and incomplete information completed.
- Erasure: to have your information deleted, where the law requires us to.
- Restriction: to ask us to limit how we use your information while a question about it is resolved.
- Objection: dealt with separately below, because it works differently depending on the processing.
- Portability: to receive certain information in a reusable format. This applies only where we process on the basis of your consent or a contract, which is limited in our case, so for most of what we do it does not apply.
Your right to object. For the research we carry out and for our own marketing, your right to object is absolute: if you object, we stop, and we suppress your information so it is not gathered again. For the website logs, which we keep to run and secure the site, you can also object, and we will stop unless we have compelling grounds to continue that override your interests.
Withdrawing consent. Where we rely on your consent, for example for certain marketing channels, you can withdraw it at any time, and we stop. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
If you are unhappy with how we have handled your information or your request, you can complain, as set out below.
How to complain
If you have a concern about how we handle your personal information, please raise it with us first. Email privacy@vellinx.com with "Data protection complaint" in the subject line, and we will acknowledge your complaint within 30 days and respond without undue delay.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk. We would appreciate the chance to address your concern first, but you can approach the ICO at any time.
Changes to this notice
We may update this notice from time to time, for example if we change how we handle personal information. When we do, we update the version number and the date on the notice. If a change materially affects you or your rights, we will take reasonable steps to make it prominent, rather than relying on the updated notice alone.
Version 1 · Last updated 15 June 2026.