VELES CGK LTD · Last updated: 4 November 2026This Privacy Policy explains what personal data we collect when you use the IRERA website, why we process it, who we may share it with, and what rights users have.
This Policy applies to the processing of personal data by VELES CGK LTD in connection with the use of the website, enquiries about services, registration for events, purchases of educational products, consultations, and subscriptions.
1. Who is responsible for processing your dataThe data controller under this Privacy Policy is:
VELES CGK LTD- Company registration number: 14545743
- Registered office: 4th Floor Silverstream House, 45 Fitzroy Street, London W1T 6EB, United Kingdom
- Email: info@ireralab.com
The company carries out the activities presented on the website under the IRERA brand, to the extent that these services are provided by VELES CGK LTD.
2. What personal data we collectDepending on how you interact with the website and our services, we may process the following categories of data.
Contact information: first name, last name, email address, telephone number, company name, and other information voluntarily provided through website forms, by email, or when requesting a consultation.
Order and registration data: information about purchased products and services, selected events, registration dates, order amounts, billing country, and payment status.
Payment information: payments are processed through Stripe. We may receive payment confirmations, transaction amounts, dates, transaction identifiers, and limited information about the payment method. We do not receive or store full payment card details.
Learning and access data: information about your account, purchased courses, access periods, participation in educational programmes, and, where supported by the platform, learning progress.
Event participation data: information about registration and attendance at in-person meetings, online events, workshops, and consultations.
Correspondence: the content of messages, enquiries, feedback, support requests, and our replies.
Technical data: IP address, browser and device information, technical logs, website performance data, and information collected through cookies and similar technologies in accordance with consent preferences.
Photographs and video recordings: images and voice recordings of event participants in the circumstances described in Section 6.
We do not request special categories of personal data, such as information about health, religious beliefs, or political opinions, unless this is necessary for a specific lawful purpose and covered by a separate notice.
3. Why we use your data and on what legal basisWe process personal data for the following purposes.
Performance of a contract: processing orders, accepting payments, registering participants for events, providing access to courses and materials, delivering consultations, managing subscriptions, providing user support, and handling refunds.
Compliance with legal obligations: maintaining accounting and tax records, complying with legal requirements, and responding to mandatory requests from competent authorities.
Our legitimate interests: ensuring website security, preventing misuse, responding to business enquiries, maintaining the operation of our services, and improving the quality of the services provided. In doing so, we take into account users' rights and interests.
On the basis of consent: sending marketing communications, using non-essential analytics and advertising cookies, and publishing photographs and video recordings of participants for advertising purposes.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
4. Who we share your data withWe share personal data only to the extent necessary to provide our services, comply with the law, and operate the website.
Recipients of personal data may include:
- Stripe — for payment processing;
- hosting and technical infrastructure providers;
- platforms used for online events and hosting educational materials;
- email and communication service providers;
- accounting, legal, and other professional advisers;
- analytics and advertising service providers, where such tools are used on a lawful basis;
- public authorities, where disclosure is required by law.
We do not sell users' personal data or share it with third parties for their independent marketing communications without an appropriate legal basis.
Courses and educational materials are provided directly by us or through the technical platforms we use. Where a platform independently determines the purposes of data processing, its own privacy policy also applies to that processing.
In marketing projects, we may process personal data on behalf of our clients. Such relationships, including the respective roles of the parties and data protection measures, are governed by the relevant agreements.
5. Events, consultations, and educational programmesWe process participants' data to organise in-person and online meetings, workshops, educational programmes, individual consultations, and subscriptions.
Contact information may be used to send registration confirmations, tickets, joining links, educational materials, organisational notices, and information about programme changes.
Access to recorded courses and materials is provided for the period specified in the description of the relevant product. The product access period does not necessarily correspond to the retention period for data required for accounting purposes or compliance with legal obligations.
Certain services may require registration on an educational platform.
6. Photography and video recording at eventsPhotography and video recording may take place during in-person and online events.
These materials may be used to document events, prepare educational content, and promote IRERA activities on the website, social media, in presentations, and in other informational materials.
The publication of photographs or video recordings that identify an adult participant for advertising and marketing purposes is carried out on the basis of separately obtained consent.
Refusing to provide such consent does not prevent participation in an event.
Consent may be withdrawn by contacting us by email. Upon receiving a withdrawal request, we will stop further use of the relevant materials based on the withdrawn consent and take reasonable steps to remove them from resources under our control, unless another lawful basis exists for retaining them.
We do not publish images of minors for advertising purposes.
7. International data transfersVELES CGK LTD is registered in the United Kingdom and may provide services to customers in the European Union and other countries.
Transfers of personal data between the EU/EEA and the United Kingdom are carried out in accordance with the applicable adequacy decisions.
Some technical and payment service providers may process data outside the United Kingdom and the EU/EEA.
Where additional safeguards are required for such transfers, we use applicable legal mechanisms, including standard contractual clauses and other safeguards provided for by law.
Information about the specific safeguards can be requested by email.
8. How long we retain your dataWe retain personal data no longer than necessary for the relevant purposes, taking into account legal obligations.
- Order data and accounting records: generally for six years after the end of the relevant financial year, or longer if required by law.
- Account and access data: while the account remains active and, as a rule, for one year after its closure, unless longer retention is required by law.
- Correspondence and enquiry data: generally for up to one year after communication has ended, unless retention is necessary for performing a contract or protecting legitimate interests.
- Marketing consent records: until consent is withdrawn, after which limited information may be retained to demonstrate compliance with the withdrawal request.
- Photographs and video recordings: for as long as they are necessary for the stated purposes and a valid legal basis for their use exists.
- Technical data: for periods appropriate to website security and operation, or as specified in the Cookie Policy.
After the applicable retention period expires, data is deleted or anonymised unless further retention is required by law.
9. Your rightsIn accordance with applicable data protection legislation, you may:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of data in circumstances provided for by law;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive your data in a portable format where provided for by law;
- withdraw previously given consent;
- lodge a complaint with the competent supervisory authority.
To exercise your rights, please send a request to
info@ireralab.com.
We will respond without undue delay, normally within one month. Where permitted by law, this period may be extended, and we will notify you accordingly.
10. Requirement to provide certain dataCertain personal data is necessary to enter into and perform a contract.
For example, without contact details and the information required for payment, we may be unable to process an order, register you for an event, or provide access to purchased materials.
Providing data for marketing communications and consenting to the promotional publication of images is voluntary.
11. Cookies and analyticsThe website may use essential technical cookies necessary for its operation, security, and order processing.
Where the relevant tools are enabled, analytics and advertising cookies may also be used.
Non-essential cookies requiring consent under applicable law are used only after such consent has been obtained.
Users may accept, reject, or modify their preferences for non-essential cookies through the consent management mechanism provided on the website.
Detailed information about the cookies actually used, their purposes, and their duration is provided in a separate Cookie Policy.
12. Data securityWe apply reasonable organisational and technical measures to protect personal data against unauthorised access, loss, alteration, and unlawful disclosure.
Access to information is restricted to individuals who need it to perform their professional duties.
Full payment card details are processed by the specialised payment provider Stripe.
In the event of a personal data breach, we will notify users and competent authorities where required by law.
13. Changes to this PolicyWe may periodically update this Privacy Policy to reflect changes in legislation, technical systems, or the nature of the services provided.
The current version will always be published on the website with the date of the latest update.
We will notify users of material changes affecting the processing of personal data through appropriate means, including email where necessary.
For privacy-related enquiries, please contact:
info@ireralab.com.
