Legal
Privacy Policy
Last updated: 24 September 2026
This policy explains what personal data VELOR® collects through this website, why we collect it, how long we keep it and the rights you can exercise over it. We have kept it as plain as we can; where the law requires a formal term, we use it and explain what it means.
Who is responsible for your data
The data controller of the information collected through this website is Velor Solutions (VELOR®), with registered address at Bulevar del Hipódromo 215, Colonia San Benito, San Salvador, El Salvador, reachable at info@velor.sv. If we ever share responsibility with another entity, we will tell you before collecting your data.
We are a private intelligence and advisory firm. Enquiries received through this site are handled with the same confidentiality standards we apply to client work.
What we collect
We collect only what we need to answer you and to keep the site working.
- The data you type into the contact form: name, email address, phone number, organisation and the content of your message.
- The language you were browsing in and the date of your enquiry, so the reply reaches you in the right language and in the right order.
- Basic technical data: IP address, browser and device type, and pages visited, used for security and abuse prevention.
- Cookies or similar technologies where you have accepted them, limited to remembering your language preference and measuring site traffic.
Please do not send documents, credentials or special categories of data (health, biometrics, religious or political beliefs, sexual orientation) through the form. If such material becomes necessary, we will first agree a secure channel with you.
Why we use it and our legal basis
- To respond to your enquiry and, if you become a client, to perform our contract with you — Article 6(1)(b) GDPR.
- To protect our systems and detect abuse, spam or fraudulent submissions — Article 6(1)(f) GDPR, legitimate interest.
- To comply with legal obligations such as accounting, tax and record-keeping — Article 6(1)(c) GDPR.
- Where you have given consent, for optional cookies and analytics — Article 6(1)(a) GDPR, which you may withdraw at any time.
How long we keep it
Enquiry records are kept for 24 months from our last exchange with you. They may be kept longer when a legal claim, a contractual obligation or a regulatory requirement makes it necessary, and in no case beyond the five-year statutory limitation period.
Security logs are kept for 12 months. Data that tax or accounting law obliges us to preserve is kept for the period that law imposes.
Who can see it
We do not sell your data and we do not share it for advertising purposes.
- Trusted service providers that host our site, store our records and deliver our email, each bound by a data-processing agreement.
- Professional advisers (legal, tax, audit) where needed to establish or protect our rights.
- Public authorities where we are legally obliged to respond to a valid request.
International transfers
Our providers may process data outside El Salvador or the European Economic Area. When they do, we rely on recognised safeguards such as Standard Contractual Clauses or an adequacy decision, and we restrict what each provider is able to access.
Your rights
You may ask us for access to your data, its rectification, its erasure, restriction of processing, a portable copy of it, or object to processing based on legitimate interest. You may also withdraw consent at any time, without affecting processing already carried out.
Requests are free of charge. We answer within 30 days and may ask you to confirm your identity first. If we cannot satisfy your request, we will explain why and tell you how to complain.
You can also complain to the supervisory authority competent for you — in Spain, the Spanish Data Protection Agency (AEPD); in El Salvador, the authority designated under the Personal Data Protection Law — or bring the matter before the courts.
How we protect it
The site is served over HTTPS, access to records is limited to people who need them for their work, and we review those permissions regularly. No transmission over the internet is perfectly secure, which is why we ask you not to include sensitive material in a first message.
Minors
Our services are aimed at organisations and adults. We do not knowingly collect personal data from anyone under 18; if you believe a minor has written to us, tell us and we will delete the record.
Updates to this policy
We may update this page as our services or the law change. The date at the top of the page shows the last revision, and material changes will be announced on the site.
How to reach us
For anything in this policy, write to info@velor.sv with the subject line “Data protection”. You may also write to the postal address above.