Privacy notice
Who is responsible
Notice and contact-permission version: 2026-09-05.
Velocidub OÜ (registry code 17477433) is the controller for the personal data submitted through the enquiry form on this website.
Registered address: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia. Registry-listed contact: admin@velocidub.com.
What the form collects
We collect your selected offer or privacy-request type, name, email, public content or offer URL, source and target language, goal, optional notes, contact permission and the notice version. Privacy requests omit the URL and language fields and require a short description.
The record also contains a reference number, request identifier, submission and update times, handling status, origin host, country when supplied by Cloudflare and a user-agent string truncated to 200 characters. A payload hash and idempotency key help recognise retries without creating another enquiry.
Please do not submit passwords, payment details, member lists, confidential analytics or sensitive personal information. There is no file upload.
Why we use it
We use the submitted details to assess and reply to your enquiry or handle your privacy request. The form asks for consent to contact you about that request. It does not ask for marketing consent or add you to a marketing list.
You may withdraw contact consent through the privacy-request form or registry-listed email. Withdrawal does not affect processing already lawfully carried out. We handle applicable data-rights obligations and keep only the data needed for the disclosed purposes.
Abuse prevention and verification rely on our legitimate interest in protecting the form and database from automated or excessive submissions. The form cannot save a new request without its required fields, contact permission and security check.
Security checks and anti-abuse records
We process your IP address for abuse prevention and pass it to Cloudflare Turnstile for verification. Our D1 database stores a deterministic IP hash with an attempt count and window timestamp, not the raw IP. These records are pseudonymous personal data, not anonymous. They are scheduled for deletion 48 hours after the current window start, normally within the next daily sweep, up to 24 hours later. Continued activity can start a new window; cleanup failures can delay removal.
The form admits up to ten attempts per IP-derived bucket in an anchored one-hour window, not a rolling window. Failed security checks consume attempts. The saved-enquiry limit is three per normalised email in a rolling twenty-four-hour period. Recognised retries of a saved request do not consume another attempt.
Application logs do not contain your name, email, URL, notes, raw IP or IP hash. They record request outcome codes and may include the selected offer and reference number.
Hosting, storage and access
Cloudflare, Inc. provides website hosting through Workers, enquiry storage through D1 in the EU jurisdiction, and the Turnstile security check. The EU database setting does not mean all Cloudflare network or verification processing occurs only in the EU. Cloudflare’s privacy policy describes its processing and international transfers: https://www.cloudflare.com/privacypolicy/
Velocidub OÜ accesses enquiries through the authenticated Cloudflare D1 Tables inbox. No enquiry fields are available through a public read endpoint. The form confirmation is a saved reference, not an email notification or a response from a person.
We set no website cookies and use no analytics or advertising script. Turnstile processes technical signals for its security check under Cloudflare’s policies. Form drafts and retry snapshots stay in page memory; we do not write their personal data to local storage or session storage. Reloading or leaving the page loses that in-memory draft.
Enquiry retention
Enquiries are scheduled for deletion 90 days after submission. Daily cleanup normally deletes them within 24 hours afterward. Service or cleanup failures can delay deletion; this is not a guaranteed deadline during a failure. You can request earlier deletion through the privacy-request form or admin@velocidub.com.
Deletion removes the live enquiry row. Independently keyed anti-abuse records follow their own disclosed lifecycle. Receipt recovery is not available after the corresponding enquiry has actually been deleted. A later submission is then treated as a new request.
Recovery copies and operator backups
After actual deletion, enquiry and anti-abuse records may remain recoverable in Cloudflare D1's point-in-time recovery for up to seven further days. This period starts after deletion, not after the scheduled expiry. Private operator backups made before a migration are deleted within seven days of creation. We do not copy enquiries into email notifications, GitHub issues, CI artifacts or public files.
Restoring a database can restore deleted records. Any applicable deletion requests need to be reapplied after recovery. We do not claim that every recovery copy disappears immediately when a live row is deleted.
Your rights and how to request them
Depending on the circumstances and applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, or withdraw consent. We may need proportionate information to establish that a request concerns your data. Do not send identity documents in the initial form.
Send a privacy request through the enquiry form (choose 'Privacy request') or to admin@velocidub.com. Requests through the form are stored in the same protected database and get a reference number; we do not confirm receipt by email.
Privacy-request form: /enquire/?request=privacy
You may complain to the Estonian Data Protection Inspectorate or your competent supervisory authority. Estonian Data Protection Inspectorate: https://www.aki.ee/en
- Choose Access to request a copy or information about your data.
- Choose Deletion to request earlier removal; include your enquiry reference if you have it.
- Choose Other for correction, withdrawal, objection or another privacy question.