Privacy Policy

Last Updated: January 15, 2025

At Veylona, we understand that trust forms the foundation of successful investment communities. This privacy policy explains how we collect, use, and protect your personal information when you engage with our investment education platform and community services.

1 Information We Collect

We collect information that helps us provide better investment education and community experiences. This includes data you provide directly and information gathered through your platform interactions.

Account Information

Name, email address, phone number, and profile details you provide during registration.

Financial Profile Data

Investment experience level, risk tolerance, and educational goals to personalize your learning experience.

Platform Usage Data

Course progress, community participation, discussion contributions, and learning preferences.

Communication Records

Messages sent through our platform, support inquiries, and feedback submissions.

Technical Information

Device information, IP address, browser type, and platform usage patterns for security and optimization.

Marketing Preferences

Communication preferences and consent for educational content and community updates.

2 How We Use Your Information

Your information helps us create meaningful educational experiences and foster genuine investment community connections.

  • Educational Personalization: We customize learning paths based on your experience level and interests
  • Community Facilitation: We connect you with relevant discussion groups and mentorship opportunities
  • Progress Tracking: We monitor your educational journey to suggest appropriate next steps
  • Platform Improvement: We analyze usage patterns to enhance our educational content and community features
  • Communication: We send relevant educational updates, community news, and platform notifications
  • Security Protection: We use your data to prevent fraud and maintain platform safety
  • Legal Compliance: We process data as required by Belgian financial education regulations

3 Legal Basis for Processing (GDPR)

Under Belgian and EU data protection laws, we process your information based on the following legal grounds:

  • Contract Performance: Processing necessary to provide our educational services and community access
  • Legitimate Interest: Improving our platform, preventing fraud, and enhancing user experience
  • Consent: Marketing communications and optional data processing you've agreed to
  • Legal Obligation: Compliance with financial services regulations and tax requirements

4 Information Sharing and Disclosure

We believe in transparency about when and how we share your information. We never sell your personal data to third parties.

  • Service Providers: We work with trusted partners for payment processing, email delivery, and technical infrastructure
  • Educational Partners: With your consent, we may share progress data with affiliated educational institutions
  • Legal Requirements: We disclose information when required by Belgian law or to protect our users' safety
  • Business Transfers: In case of merger or acquisition, user data may transfer under the same privacy protections
  • Community Features: Profile information you choose to make public within our investment community

5 Your Privacy Rights

Under GDPR and Belgian privacy laws, you have comprehensive rights regarding your personal data:

Access Your Data

Request a copy of all personal information we hold about you, including how we use it and who we share it with.

Rectification Rights

Correct inaccurate information or complete incomplete data in your profile and educational records.

Erasure ("Right to be Forgotten")

Request deletion of your personal data when it's no longer necessary for our services or you withdraw consent.

Data Portability

Receive your data in a structured format and transfer it to another service provider if desired.

Processing Restrictions

Limit how we use your information while we address your concerns or verify data accuracy.

Object to Processing

Opt out of data processing based on legitimate interests, including marketing communications.

To exercise these rights, contact us at [email protected] or write to our address below. We'll respond within 30 days and verify your identity before processing requests.

6 Data Retention and Storage

We retain your information only as long as necessary for educational purposes, legal compliance, and community value.

Data Retention Periods

Active Account
Full data retention while your account remains active and engaged
3 Years
Educational progress and community contributions after account closure
7 Years
Financial records and compliance data as required by Belgian law
30 Days
Technical logs and usage analytics for platform optimization
Immediate
Marketing data when you withdraw consent or unsubscribe

7 Security Measures

We implement comprehensive security measures to protect your personal and educational data from unauthorized access, disclosure, or misuse.

  • Encryption: All data transmissions use TLS encryption, and sensitive information is encrypted at rest
  • Access Controls: Role-based access ensures only authorized personnel can view specific data types
  • Regular Audits: We conduct quarterly security reviews and annual penetration testing
  • Data Centers: Our EU-based servers meet ISO 27001 and SOC 2 compliance standards
  • Incident Response: We have procedures to detect, respond to, and report any security breaches within 72 hours
  • Employee Training: Regular privacy and security training for all staff with data access

8 International Data Transfers

While we primarily process data within the European Union, some services require international transfers under appropriate safeguards.

  • EU Processing: Primary data storage and processing occurs within EU member states
  • Adequacy Decisions: Transfers only to countries with EU-recognized adequate protection levels
  • Standard Contractual Clauses: Additional protections for transfers to service providers outside the EU
  • Data Processing Agreements: All international partners sign comprehensive data protection agreements

9 Cookies and Tracking

We use cookies and similar technologies to enhance your learning experience and understand platform usage patterns.

  • Essential Cookies: Required for basic platform functionality, login sessions, and security
  • Functional Cookies: Remember your preferences, language settings, and educational progress
  • Analytics Cookies: Help us understand how you use our platform to improve educational content
  • Marketing Cookies: Used only with your consent to personalize educational recommendations

You can control cookie preferences through your browser settings or our cookie management tool. Some features may not work properly if you disable essential cookies.

10 Children's Privacy

Our investment education platform is designed for adults aged 18 and older. We do not knowingly collect personal information from minors.

If we discover that we've collected information from someone under 18, we'll delete it immediately and restrict access to our services. Parents who believe their child has provided information to us should contact us immediately at [email protected].

11 Changes to This Policy

We may update this privacy policy to reflect changes in our practices, technology, legal requirements, or business operations.

  • Notification: We'll notify active users of significant changes via email and platform notifications
  • Review Period: Important changes will include a 30-day review period before taking effect
  • Version History: Previous policy versions are available upon request
  • Continued Use: Using our services after changes take effect constitutes acceptance of the updated policy

Privacy Questions or Concerns?

Contact our privacy team for questions about your data or to exercise your privacy rights:

Email: [email protected]

Phone: +32 6984 0839

Address: Kattendijkdok-Westkaai 16, 2000 Antwerpen, Belgium

For complaints about our data handling, you can also contact the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).