Privacy Notice

Last updated: 23 October 2025

1. Introduction

At Vaeliou, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Notice explains how Vaeliou Ltd. (operator of Vaeliou Intelligence) and Cyberconnecting OÜ (operator of Vaeliou Services) collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our Vaeliou Intelligence platform or Vaeliou Services, you consent to the practices described in this Privacy Notice.

2. Who We Are

2.1 Data Controllers

Vaeliou Ltd. Address: 27 Old Gloucester Street, London, WC1N 3AX, UK company number 16813280. Email: privacy@vaeliou.com Role: Controller for Vaeliou Intelligence platform.
Cyberconnecting OÜ Address: Sepapaja 6, 15551 Tallinn, Estonia Company Number: 14478260 Email: privacy@vaeliou.com Role: Controller for Vaeliou Services (mentoring, development, and advisory services).

3. Definitions

For clarity, we use the following terms:

Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation performed on personal data (e.g., collection, storage, use, disclosure).
Data Subject: The individual whose personal data is processed.
Controller: The entity determining the purposes and means of processing personal data.
Processor: A third party processing personal data on behalf of the controller.

4. What Personal Data We Collect

We collect and process the following categories of personal data:

4.1 Data Collected from All Users

Contact Information: Name, email address, phone number, company name, and job title.
Account Information: Username, password, and account preferences.
Technical Data: IP address, browser type, device information, operating system, and usage data (e.g., pages visited, session duration).
Communication Data: Emails, chat logs, and other correspondence with our support or sales teams.

4.2 Data Collected from Vaeliou Intelligence Users

Investment Data: Investment criteria, startup profiles, and analytical reports.
Startup Information: Business plans, financial data, and progress updates.
Payment Information: Billing address, payment method, and transaction history.

4.3 Data Collected from Vaeliou Services Users

Session Data: Mentoring session notes, feedback, and scheduling information.

4.4 Data Collected Automatically

Cookies and Tracking Technologies: We use cookies and similar technologies to collect usage data and improve our services. See Section 7 for details.
Log Data: Server logs automatically record information such as IP addresses, browser types, and access times.

5. How We Use Your Personal Data

We process your personal data for the following purposes and legal bases:

5.1 Vaeliou Intelligence

Matching Management: Process investment criteria and startup data to provide screening, analytics, and reporting.
Customisation: Tailor the platform to your investment thesis and preferences.

5.2 Vaeliou Services

Mentoring and Advisory: Use session data to provide personalised guidance and track progress.
Community Engagement: Facilitate connections with experts and peers.

6. How We Share Your Personal Data

We do not sell your personal data. We may share your data with:

Service Providers: Third-party processors who assist in delivering our services.
Legal and Regulatory Authorities: When required by law or to protect our rights.
Affiliates and Partners: With your consent, we may share data with trusted partners (e.g., accelerators, investors) for collaboration.

6.1 International Transfers

We prioritise the use of European-based providers to ensure that your personal data remains within the EU/EEA and is subject to GDPR protections.

All providers used by Vaeliou (except LinkedIn) are configured to process and store data exclusively within the EU/EEA.
No personal data is transferred outside the EU/EEA.

7. Cookies and Tracking Technologies

We use Simple Analytics for anonymised analytics to:

Enhance user experience.
Analyse website traffic and usage patterns.

7.1 Simple Analytics

Purpose: Simple Analytics is a privacy-friendly, European-based analytics tool that does not use cookies or collect personal data.
Data Collected: Aggregated data such as page views, referrers, and device types. No IP addresses or personally identifiable information (PII) are collected.
Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in improving our services).

For more details, see Simple Analytics’ Privacy Policy.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.

To exercise your rights, contact us at privacy@vaeliou.com.

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

To exercise your rights, contact us at privacy@vaeliou.com.

10. Data Security

We implement technical and organisational measures to protect your personal data, including:

Encryption (TLS/SSL).
Access controls and authentication.
Regular security audits and monitoring.
Data minimisation and anonymisation.

11. Third-Party Services

11.1 LinkedIn

Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside of the UNITED STATES LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.

LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.

LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy.

For details, see LinkedIn’s Privacy Policy.

11.2 Payplug

We use Payplug, a French payment service provider, to process payments for Vaeliou Intelligence and Vaeliou Services.

Data Collected: Payment card details, billing address, and transaction information.
Data Location: All payment data is processed and stored within the EU.
Security: Payplug is PCI-DSS compliant and uses encryption to secure your payment information.
Legal Basis: Art. 6(1)(b) GDPR (contract performance).

For more details, see Payplug’s Privacy Policy.

11.3 Simple Analytics

We use Simple Analytics for website and app analytics. Simple Analytics is a privacy-friendly, European-based analytics tool that does not use cookies or collect personal data.

Data Collected: Simple Analytics collects anonymised data such as page views, referrers, and device types. It does not collect IP addresses or any personally identifiable information (PII).
Data Location: All data is processed and stored exclusively within the EU.
Retention Period: Data is retained for analytical purposes in accordance with Simple Analytics’ privacy policy.
Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in improving our services).

For more details, see Simple Analytics’ Privacy Policy.

12. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

13. Updates to This Privacy Notice

We may update this Privacy Notice periodically. We will notify you of material changes via email or a prominent notice on our website. Your continued use of our services constitutes acceptance of the updated notice.

14. Contact Us

For questions or concerns about this Privacy Notice or your personal data, contact:

Vaeliou Ltd.: privacy@vaeliou.com
Cyberconnecting OÜ: privacy@vaeliou.com