Legal & Data ProtectionDraft legal text — Pending owner review before production release

Privacy Policy

Effective Date: March 1, 2025 · Last Updated: May 2025

1. Scope and Controller Identity

This Privacy Policy explains how Veyra Growth (“we”, “our”, or “the studio”) handles personal data submitted through this website, including contact audit enquiries, double opt-in newsletter subscriptions, and protected CMS administration sessions. Questions regarding data handling can be directed to hello@veyragrowth.com.

2. Information We Collect

  • Contact & Growth Audit Enquiries: When you submit our contact form, we collect your name, work email, optional company or store URL, selected partnership plan or service focus, and project message.
  • Newsletter Subscriptions (Double Opt-In): When you request our ecommerce creative and growth notes, we store your email address in a pending state alongside a cryptographic hash of a single-use confirmation token. Your subscription only becomes active after you explicitly confirm via the verification action.
  • Security & Rate-Limit Telemetry: To protect form endpoints and administrative routes from automated abuse, our server processes short-lived IP and email rate-limit counters and request timestamps.

3. How We Use and Store Your Data

We use submitted enquiry data exclusively to evaluate partnership fit, prepare requested growth audit notes, and respond to your inquiry. Contact leads are persisted in our server-side database before any external notification email is queued, ensuring enquiries are not lost if downstream mail providers experience transient outages. We do not sell, rent, or trade contact lists to third-party data brokers.

4. Cookies and Session Security

Public visitors can browse all pages, case studies, and service breakdowns without tracking or advertising cookies. Our protected CMS administration interface (/admin) uses a strictly necessary, HttpOnly, SameSite=Lax session cookie (veyra_cms_session) to authenticate authorized editors and administrators.

5. Data Retention and Your Rights

Unconfirmed newsletter requests expire automatically after 48 hours. Active subscribers may unsubscribe at any time using their single-click unsubscribe link or by contacting us directly. You may request access to, correction of, or deletion of any personal enquiry record held by Veyra Growth by emailing hello@veyragrowth.com.