Legal
Last updated: March 2026
This Privacy Policy explains how Velmio Limited collects, uses, and protects your personal data when you use our website or purchase our services.
Velmio Limited ("Velmio", "we", "our", "us") is a company incorporated in Hong Kong. We operate the website at velmio.io and provide AI education and consulting services. We are committed to protecting your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").
For data protection enquiries, contact us at: hello@velmio.io
We collect the following categories of personal data:
Identity & Contact Data: name, email address, phone number (if provided), company name.
Payment Data: billing address and payment details. Payment data is processed directly by our payment provider (MoonPay) and is never stored on our servers.
Purchase & Enrolment Data: courses purchased, enrolment dates, completion status, certificates issued.
Usage Data: pages visited, time spent on site, browser type, IP address, referring URLs — collected via cookies and analytics tools.
Communications: messages sent via our contact form or email.
We use your personal data to:
• Process and fulfil course enrolments and payments • Send order confirmations, receipts, and course access details • Deliver course content and track your progress • Respond to enquiries and provide customer support • Send relevant marketing communications (with your consent) • Improve our website and services through analytics • Comply with legal and regulatory obligations
We collect and process your personal data only for lawful purposes that are directly related to our services, under the Data Protection Principles (DPPs) of the PDPO:
DPP 1 – Purpose: Data is collected for a directly related, lawful purpose that you are aware of.
DPP 2 – Accuracy: We take reasonable steps to ensure data is accurate and up to date.
DPP 3 – Retention: Data is not kept longer than necessary for the purpose it was collected.
DPP 4 – Security: We apply appropriate security measures to protect your data.
DPP 5 – Openness: We are transparent about our data policies.
DPP 6 – Access & Correction: You have the right to access and correct your personal data.
We use cookies to operate the website, remember your preferences, and analyse usage. Essential cookies are required for the site to function. Analytics cookies are only set with your consent.
You can manage your cookie preferences via the cookie banner when you first visit, or at any time by visiting our Cookie Policy at velmio.io/cookies.
We share your data only where necessary:
MoonPay — we use MoonPay to facilitate payments. If you choose to pay via MoonPay, your payment details and identity information will be shared with MoonPay for KYC/AML compliance and transaction processing. MoonPay's privacy policy and terms apply to data processed through their platform.
Email providers: to deliver transactional and marketing emails.
Analytics providers: anonymised usage data for site improvement.
We do not sell your personal data to third parties.
Where we offer cryptocurrency payment options, these transactions are facilitated by MoonPay (moonpay.com). MoonPay is a regulated financial services provider and may be required to collect identity verification data (KYC) as part of their regulatory obligations. Data submitted during a MoonPay-facilitated transaction is processed by MoonPay and is subject to their Privacy Policy.
Velmio does not store or have access to your cryptocurrency wallet details or private keys. Any disputes relating to MoonPay-facilitated transactions should be directed to MoonPay's support team.
We retain personal data for no longer than is necessary to fulfil the purposes described in this policy:
• Customer records: 7 years (for legal/tax compliance) • Course completion data: duration of your account plus 2 years • Marketing data: until you unsubscribe or withdraw consent • Analytics data: up to 26 months
Under the PDPO, you have the right to:
• Access: request a copy of the personal data we hold about you • Correction: request correction of inaccurate data • Opt-out: object to the use of your data for direct marketing at any time
To exercise any of these rights, email hello@velmio.io. We will respond within 40 days as required by the PDPO.
We take appropriate technical and organisational measures to protect your personal data, including encrypted connections (TLS/SSL), access controls, and secure third-party processors. Payment data is handled exclusively by our PCI-DSS compliant payment provider, MoonPay.
Some of our service providers may process data outside Hong Kong. Where this occurs, we take reasonable precautions to ensure your personal data receives a standard of protection consistent with the requirements of the PDPO.
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page will reflect any changes. For material changes, we will notify active customers by email.
If you have concerns about how we handle your data, please contact us at hello@velmio.io. You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong at pcpd.org.hk.
Velmio Limited Registered in Hong Kong SAR (Company No. TBC) Email: hello@velmio.io Website: velmio.io/contact