Vellum

Privacy policy

Last updated 25 August 2026

Who we are

Vellum is a trading name of BAXARlabs, contactable at hello@vellumweb.com. We are the data controller for anything you submit through this site.

What we collect

When you send the brief we collect what you type into it: your business name, your Google listing or address, any existing website and social pages, what you tell us about the business, and your name, email and phone number. We also record the page you submitted from and the time you did it. Nothing else. There are no advertising cookies and no tracking cookies on this site.

Why we collect it

To draw up three websites for you and come back to you about them. That is the only purpose. Our lawful basis is legitimate interest — you asked us to get in touch, so replying is what you would reasonably expect. If you tick the consent box we take that as agreement to contact you about this enquiry; we do not add you to a mailing list.

Where it is stored

Enquiries are stored in a Supabase database hosted in the EU. The connection from this page can write an enquiry and cannot read any back out — that restriction is enforced by the database itself, not by this page.

How long we keep it

Enquiries are kept for 24 months and then deleted. If we go on to work together, your details move into our client records and are kept for as long as UK accounting rules require.

Who we share it with

Nobody. We do not sell, rent or share enquiry data. Our hosting and database providers process it on our behalf under contract and do not use it for their own purposes.

Your rights

Under UK GDPR you can ask for a copy of what we hold, ask us to correct or delete it, or object to us holding it at all. Email hello@vellumweb.com and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.