Privacy
This website sets no cookies, runs no analytics, and collects nothing about you unless you fill in a form. We sell to organisations, so what little we do collect is business contact information. We are a Singapore company, and both the PDPA and the GDPR are covered below.
Most privacy notices are long because the site behind them does a lot. Ours is short because this one does very little, and we would rather tell you exactly what it does than pad it out.
Who we are
Vela Intelligence Pte. Ltd. (UEN 202630213Z), of 114 Lavender Street, #11-83 CT Hub 2, Singapore 338729, is the company behind this site and is responsible for the personal data described here.
We are established in Singapore, so the Personal Data Protection Act 2012 applies to us. Where we deal with people in the European Economic Area or the United Kingdom, the GDPR applies to that as well. Both are covered below, and where they differ we say so rather than averaging them into something vague.
Questions, requests and complaints about anything on this page go to contact@velaintelligence.com. That address reaches our designated data protection officer, and it is the contact to use for any of the rights set out below.
What this page covers
This page is about this website — what it collects from a visitor and what we do with it. It is not about the Vela platform. When a client deploys Vela, their documents and data are governed by the agreement and the deployment they choose, in the storage and region they configure, and this page has nothing to do with it. If that is what you came for, the data residency note is the honest answer.
What this website does not do
It sets no cookies of any kind. It runs no analytics, no tracking pixels and no advertising technology. It does not build a profile of you, and it does not share anything about you with data brokers or ad networks. There is no cookie banner because there is nothing to consent to.
What happens when you just read the site
Serving a page necessarily reveals your IP address and browser details to the systems that deliver it. Three parties are involved:
- Cloudflare hosts and delivers the site and protects it from abuse. It processes your IP address and request details for that purpose.
- Google Fonts serves the typefaces the site uses. Your browser requests them from Google, which receives your IP address.
- Font Awesome serves the icons, on the same basis.
We do not receive, store or analyse any of this. It is a consequence of the site being delivered to you at all, not something we collect.
What happens if you use the Value Creator Assessment
The assessment runs entirely in your browser. The figures you enter are not sent anywhere while you use it, and we never see them unless you decide to send them.
When you export the business case you may add your organisation, your name and your email so they are printed on your copy. A checkbox on that dialog, ticked by default, also sends those details and the figures your assessment produced to us. Untick it and nothing leaves your browser — you still get your document.
If you leave it ticked, we receive:
- the organisation, name and email you typed;
- the inputs you entered and the results the model produced;
- the date, and the country your request came from.
That arrives as a single email to our own inbox. It is not written to a database, not fed into any analytics tool, and not passed to anyone else.
Why we are allowed to do that
We sell to organisations, not to consumers. What the form collects is your work identity and figures about your firm — the organisation you work for, your work email, your name in a professional capacity. We do not run a consumer service and we have no interest in you outside that professional context. The two regimes treat that fact quite differently, so here is each one.
Under Singapore law. The PDPA carves business contact information out of its consent, notification and access obligations altogether — section 4(5). Business contact information means your name, position, business address and work email, given for business rather than personal reasons, which is exactly what the form asks for. The figures you enter are about your firm, not about you. So for the great majority of what we receive here, the PDPA's consent machinery simply does not engage.
Under the GDPR, where it reaches us, that carve-out does not exist. A named person at a company is still identifiable and a work email is still their personal data. So we need a lawful basis, and we rely on legitimate interests under Article 6(1)(f): following up with a business that has actively used a business tool, entered its own details, and been told on screen what would happen with them. We are not relying on consent, and we do not treat the ticked box as a consent record — it is a control that lets you opt out before anything is sent.
Being B2B does not put any of this outside the GDPR. What it does mean is that the balance the law asks us to strike — our interest in following up, weighed against your reasonable expectations — is a straightforward one to strike here. If you disagree, you can object and we will stop. That right is below, and it does not depend on our agreeing with you.
How long we keep it
We keep enquiries for 24 months from the date you send them, after which they are deleted. If you ask us to delete yours sooner, we will.
Who else sees it, and where it goes
The email is sent through Cloudflare Email Sending and received in Google Workspace, which is where our mail lives. Both act as processors for us and neither uses it for anything of their own. Nobody else receives it. We do not sell data, we have no advertising partners, and we do not pass enquiries to anyone.
We are a Singapore company, so if you are writing to us from Europe your details reach Singapore — you are contacting us here, rather than us moving your data out of the EEA. Singapore is not covered by a European adequacy decision. Its own data protection law is what protects the information once it arrives, alongside the commitments on this page, which we will honour wherever you are.
Your rights
Under the PDPA you can ask for access to what we hold about you and ask us to correct it. Under the GDPR you can additionally ask us to delete it, restrict what we do with it, hand it to someone else, and object to our processing.
We do not intend to make you work out which regime you fall under. Ask us for a copy, a correction or a deletion and you will get it, whichever list your right appears on.
Objecting to direct marketing is absolute. If you tell us to stop contacting you, we stop — we do not get to weigh it against our own interests, and you do not have to give a reason.
Email contact@velaintelligence.com and we will act on it. If we have handled something badly, tell us first and give us the chance to put it right. If that does not resolve it, you can complain to a regulator:
- in Singapore, the Personal Data Protection Commission;
- in the EEA, the supervisory authority where you live or work — you complain to your own country's regulator, not to one of ours;
- in the UK, the Information Commissioner's Office.
Changes
If we start collecting something new, this page changes before that happens, not after. The date at the top tells you when it last did.
Written to be read rather than to be defensible. If anything here is unclear or looks wrong, tell us at contact@velaintelligence.com and we will fix the page.