Data Controller
The data controller responsible for your personal information is VEL Academy, operating at:
- Website: https://vel.academy
- Email: info@vel.academy
VEL Academy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR).
Data We Collect
We collect only the data necessary to provide our services:
| Category | Examples | Source |
|---|---|---|
| Identity data | First name, last name | You provide it |
| Contact data | Email address | You provide it |
| Transaction data | Payment confirmation, order ID, purchased course | Payment platform (Digistore24) |
| Account data | Username, password (hashed), course progress | You provide it / auto-generated |
| Technical data | IP address, browser type, device, session duration | Collected automatically |
| Usage data | Pages visited, lessons watched, clicks | Collected automatically |
| Communication data | Messages sent to support, feedback | You provide it |
We do not collect sensitive personal data and do not store payment card details — all payments are processed securely by Digistore24.
How We Use Your Data
- To create and manage your account and grant access to purchased courses
- To process payments and send purchase confirmations
- To provide customer support and respond to your enquiries
- To send transactional emails (access instructions, receipt, course updates)
- To send marketing communications if you have opted in (you may unsubscribe at any time)
- To analyse website and platform usage so we can improve our services
- To comply with legal obligations (tax, accounting, fraud prevention)
- To issue certificates of completion
We will never sell your personal data to third parties.
Legal Bases for Processing (GDPR)
| Legal Basis | When We Rely on It |
|---|---|
| Contract (Art. 6(1)(b)) | Processing necessary to fulfil your course purchase and provide access |
| Legitimate Interests (Art. 6(1)(f)) | Analytics, fraud prevention, and improving our platform |
| Consent (Art. 6(1)(a)) | Marketing emails and non-essential cookies — you may withdraw consent at any time |
| Legal Obligation (Art. 6(1)(c)) | Tax records, accounting, and other statutory requirements |
Third-Party Service Providers
- Digistore24 — payment processing for all course purchases
- Google Analytics / Google Workspace — website analytics and email communications
- Email marketing service — transactional and promotional emails
- Cloudflare / hosting provider — website infrastructure and security
We do not allow any of these service providers to use your personal data for their own marketing purposes.
International Data Transfers
Some of our processors are located outside the EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) and transfers to countries with an EU adequacy decision.
You may request a copy of the safeguards we rely on by contacting us at info@vel.academy.
Cookies & Tracking Technologies
- Essential cookies — required for the website and login to function (no consent required)
- Analytics cookies — measure traffic and usage patterns — require your consent in the EEA
- Preference cookies — remember your language or display settings
- Marketing cookies — track conversions from advertising — require your consent
You can manage or withdraw cookie consent at any time through your browser settings or via our cookie banner.
Data Retention
- Account data — for the duration of your account plus 2 years after last login
- Transaction & tax records — 7 years as required by applicable accounting law
- Support communications — 2 years from the date of last contact
- Marketing data — until you unsubscribe or withdraw consent
- Analytics data — up to 26 months (aggregated and anonymised thereafter)
Your Rights Under GDPR (EEA Residents)
To exercise any of these rights, email us at info@vel.academy. We will respond within 30 days.
California Residents — CCPA Rights
- Right to Know — request disclosure of personal information collected about you
- Right to Delete — request deletion of your personal information
- Right to Correct — request correction of inaccurate personal information
- Right to Opt-Out of Sale / Sharing — we do not sell your personal information
- Right to Non-Discrimination — we will not discriminate for exercising CCPA rights
To submit a request, contact us at info@vel.academy with "CCPA Request" in the subject line. We will respond within 45 days.
Children's Privacy
VEL Academy is intended for adults (18 years and older). We do not knowingly collect personal data from children under the age of 16.
If you believe a minor has provided us with personal data, please contact us at info@vel.academy and we will delete it promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you by email or by displaying a prominent notice on our website at least 30 days before the change takes effect.
Contact Us
If you have any questions about this Privacy Policy or your personal data: