Privacy policy.

1. Who we are and what this covers

Veleria ("Veleria", "we", "us", "our") is a custom software development studio based in Melbourne, Victoria, Australia. We are committed to handling personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

This policy covers personal information we collect through the veleria.com.au website, by email, by phone, and in the course of providing software development services. It does not cover software we build for clients — data handled inside client systems is governed by the client’s own privacy practices.

Contact for anything in this policy: contact@veleria.com.au or 0478 333 107.

2. Personal information we collect

Enquiries: when you contact us through the website form, email or phone we collect the details you choose to provide — typically your name, business name, email address, phone number, project type, budget range, timeline and a description of your project.

Clients: if you engage us, we additionally collect information reasonably necessary to deliver the project, such as billing details, ABN, content and materials you supply, account credentials you authorise us to use, and records of our communications.

Website analytics: our site collects standard technical information such as pages visited, approximate location (city level), device and browser type, referral source and campaign parameters. This is used in aggregate to understand site performance and is not used to personally identify you.

We do not knowingly collect sensitive information (such as health information) unless a project specifically requires it, in which case it is collected only with consent and handled with additional care.

3. How we collect it

Directly from you: via forms on this website, email, phone calls, video calls and documents you provide.

Automatically: through our website hosting and analytics tooling when you browse the site.

We do not buy personal information from data brokers and we do not scrape personal information from third-party sources.

4. Why we use it

To respond to your enquiry and provide a scoping call and quote.

To deliver, support and improve services you engage us for, including communicating about your project.

To issue invoices, keep business and tax records, and comply with legal obligations.

To maintain the security of our website and systems.

We will only send you marketing communications if you have asked for them, and every such message will include a way to opt out. We never sell personal information, and we never share it with advertisers.

5. Who we share it with

We disclose personal information only to the service providers needed to run our business: database and backend hosting (Supabase), website hosting and deployment (Vercel), email (Google Workspace / Gmail), payment processing (Stripe, where applicable), and accounting or professional advisers where required.

Each provider is bound by its own security and privacy programs. We do not authorise any provider to use your information for their own marketing.

We may also disclose information where required by law, court order or a regulator, or where reasonably necessary to protect our rights, safety or property.

6. Overseas disclosure

Some of the providers above store data on servers located outside Australia, including in the United States. By submitting information to us you acknowledge this storage. We take reasonable steps to ensure any overseas recipient handles personal information consistently with the APPs.

7. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Measures include encrypted connections (HTTPS) across our website, access controls and service-role separation on our database, two-factor authentication on core accounts, and limiting collection to what we actually need.

No system is perfectly secure. If you suspect any issue with information you have provided to us, contact us immediately at contact@veleria.com.au.

8. Data breaches

If a data breach occurs that is likely to result in serious harm, we will act in accordance with the Notifiable Data Breaches scheme under the Privacy Act — containing the breach, assessing the risk, and notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

9. Retention

Enquiry records are kept while relevant to a potential or ongoing engagement. Client and financial records are kept for the periods required by Australian tax and business record-keeping laws (generally at least five years).

When information is no longer needed, we take reasonable steps to delete it or de-identify it. You may request earlier deletion at any time, and we will comply unless the law requires us to retain the information.

10. Access, correction and deletion

You may request access to the personal information we hold about you, ask us to correct anything inaccurate, or ask us to delete it. Email contact@veleria.com.au with your request; we will verify your identity and respond within 30 days. There is no charge for making a request.

11. Cookies and analytics

Our website uses minimal cookies and similar technologies necessary for the site to function and to measure aggregate usage. We do not run third-party advertising cookies or cross-site tracking. You can control cookies through your browser settings; the site remains usable with cookies disabled.

12. Complaints

If you believe we have mishandled your personal information, contact us first at contact@veleria.com.au and we will investigate and respond promptly. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

13. Changes to this policy

We may update this policy from time to time as our services or the law change. The current version, with its last-updated date, will always be published on this page. Material changes will be noted here.