Privacy Notice
Last updated: 26 September 2026
1. Introduction
At Vaeliou, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Notice explains how Vaeliou Ltd. (operator ofVaeliou Intelligence) and Cyberconnecting OÜ (operator ofVaeliou Services) collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By using our Vaeliou Intelligence platform or Vaeliou Services, you consent to the practices described in this Privacy Notice.
2. Who We Are
2.1 Data Controllers
- Vaeliou Ltd. Address: 27 Old Gloucester Street, London, WC1N 3AX, UK company number 16813280. Email: privacy@vaeliou.com. Role: Controller for Vaeliou Intelligence platform.
- Cyberconnecting OÜ Address: Maleva tn 2b-10, 11711 Tallinn, Estonia. Company Number: 14545186. Email: privacy@vaeliou.com. Role: Controller for Vaeliou Services (mentoring, development, and advisory services).
3. Definitions
For clarity, we use the following terms:
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation performed on personal data (e.g., collection, storage, use, disclosure).
- Data Subject: The individual whose personal data is processed.
- Controller: The entity determining the purposes and means of processing personal data.
- Processor: A third party processing personal data on behalf of the controller.
4. What Personal Data We Collect
We collect and process the following categories of personal data:
4.1 Data Collected from All Users
- Contact Information: Name, email address, phone number, company name, and job title.
- Account Information: Username, password, and account preferences.
- Technical Data: IP address, browser type, device information, operating system, and usage data (e.g., pages visited, session duration).
- Communication Data: Emails, chat logs, and other correspondence with our support or sales teams.
4.2 Data Collected from Vaeliou Intelligence Users
- Investment Data: Investment criteria, startup profiles, and analytical reports.
- Startup Information: Business plans, financial data, and progress updates.
- Payment Information: Billing address, payment method, and transaction history.
4.3 Data Collected from Vaeliou Services Users
- Session Data: Mentoring session notes, feedback, and scheduling information.
4.4 Data Collected Automatically
- Cookies and Tracking Technologies: We use cookies and similar technologies to collect usage data and improve our services. See Section 7 for details.
- Log Data: Server logs automatically record information such as IP addresses, browser types, and access times.
5. How We Use Your Personal Data
We process your personal data for the following purposes and legal bases:
| Purpose | Legal Basis | Data Categories |
|---|---|---|
| Provide and improve our services | Art. 6(1)(b) GDPR (contract performance) | All categories |
| User account management | Art. 6(1)(b) GDPR | Account, Contact, Technical Data |
| Payment processing | Art. 6(1)(b) GDPR | Payment Information |
| Customer support | Art. 6(1)(b) GDPR | Communication Data |
| Marketing and promotions | Art. 6(1)(a) GDPR (consent) | Contact, Technical Data |
| Analytics and service optimisation | Art. 6(1)(f) GDPR (legitimate interest) | Technical, Usage Data |
| Compliance with legal obligations | Art. 6(1)(c) GDPR | All categories |
5.1 Vaeliou Intelligence
- Matching Management: Process investment criteria and startup data to provide screening, analytics, and reporting.
- Customisation: Tailor the platform to your investment thesis and preferences.
5.2 Vaeliou Services
- Mentoring and Advisory: Use session data to provide personalised guidance and track progress.
- Community Engagement: Facilitate connections with experts and peers.
6. How We Share Your Personal Data
We do not sell your personal data. We may share your data with:
- Service Providers: Third-party processors who assist in delivering our services.
- Legal and Regulatory Authorities: When required by law or to protect our rights.
- Affiliates and Partners: With your consent, we may share data with trusted partners (e.g., accelerators, investors) for collaboration.
6.1 International Transfers
We prioritise the use of European-based providers to ensure that your personal data remains within the EU/EEA and is subject to GDPR protections.
- All providers used by Vaeliou (except LinkedIn) are configured to process and store data exclusively within the EU/EEA.
- No personal data is transferred outside the EU/EEA.
7. Cookies and Tracking Technologies
We use Simple Analytics for anonymised analytics to:
- Enhance user experience.
- Analyse website traffic and usage patterns.
7.1 Simple Analytics
- Purpose: Simple Analytics is a privacy-friendly, European-based analytics tool that does not use cookies or collect personal data.
- Data Collected: Aggregated data such as page views, referrers, and device types. No IP addresses or personally identifiable information (PII) are collected.
- Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in improving our services).
For more details, see Simple Analytics' Privacy Policy.
8. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.
| Data Category | Retention Period |
|---|---|
| Account Information | Until account deletion plus 6 months |
| Payment Information | 7 years (for tax compliance) |
| Session and Mentoring Data | 2 years after last session |
| Technical and Log Data | 14 to 25 months (Simple Analytics) |
| Marketing Data | Until opt-out or 3 years after collection |
To exercise your rights, contact us at privacy@vaeliou.com.
9. Your Rights
Under GDPR, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right of Access | Request a copy of your personal data. |
| Right to Rectification | Correct inaccurate or incomplete data. |
| Right to Erasure | Request deletion of your data (subject to legal obligations). |
| Right to Restriction | Restrict processing of your data. |
| Right to Data Portability | Receive your data in a structured, machine-readable format. |
| Right to Object | Object to processing based on legitimate interest or direct marketing. |
| Right to Withdraw Consent | Revoke consent for processing (e.g., marketing). |
| Right to Lodge a Complaint | File a complaint with a supervisory authority (e.g., Estonian Data Protection Inspectorate). |
To exercise your rights, contact us at privacy@vaeliou.com.
10. Data Security
We implement technical and organisational measures to protect your personal data, including:
- Encryption (TLS/SSL).
- Access controls and authentication.
- Regular security audits and monitoring.
- Data minimisation and anonymisation.
11. Third-Party Services
11.1 LinkedIn
The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States. For privacy matters outside of the United States, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.
With each call-up to one of the individual pages of this internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed at developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject, and for the entire duration of their stay on our internet site, which specific sub-page of our internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.
LinkedIn provides at linkedin.com/psettings/guest-controlsthe possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied atlinkedin.com/legal/cookie-policy.
For details, see LinkedIn's Privacy Policy.
11.2 Mollie
We use Mollie, a Dutch payment service provider, to process payments for Vaeliou Intelligence and Vaeliou Services.
- Data Collected: Payment card details, billing address, and transaction information.
- Data Location: All payment data is processed and stored within the EU.
- Security: Mollie is PCI-DSS compliant and uses encryption to secure your payment information.
- Legal Basis: Art. 6(1)(b) GDPR (contract performance).
For more details, see Mollie's Privacy Policy.
11.3 Simple Analytics
We use Simple Analytics for website and app analytics. Simple Analytics is aprivacy-friendly, European-based analytics tool that does not use cookies or collect personal data.
- Data Collected: Simple Analytics collects anonymised data such as page views, referrers, and device types. It does not collect IP addresses or any personally identifiable information (PII).
- Data Location: All data is processed and stored exclusively within the EU.
- Retention Period: Data is retained for analytical purposes in accordance with Simple Analytics' privacy policy.
- Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in improving our services).
For more details, see Simple Analytics' Privacy Policy.
12. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.
13. Updates to This Privacy Notice
We may update this Privacy Notice periodically. We will notify you of material changes via email or a prominent notice on our website. Your continued use of our services constitutes acceptance of the updated notice.
14. Contact Us
For questions or concerns about this Privacy Notice or your personal data, contact:
- Vaeliou Ltd.: privacy@vaeliou.com
- Cyberconnecting OÜ: privacy@vaeliou.com