Privacy Policy
Last updated: March 3, 2026
This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website at vela-zanzibar.com or interact with our AI chatbot, Zuri. We have written this policy in plain language so you can understand what happens with your data, why, and what choices you have.
What you should know up front:
- Our chatbot Zuri is powered by artificial intelligence (AI). You are not chatting with a human. Your messages are processed by a third-party AI service (Anthropic Claude) in the United States.
- We use automated profiling to assess conversation quality and purchase interest. This may affect how and when our sales team follows up with you. You have the right to request human review of any automated decision.
- We share data with service providers in the United States, including Anthropic (AI processing), an embedding service provider (search functionality), HubSpot (analytics and CRM), Microsoft (behavioral analytics via Clarity), and Google (website analytics and fraud prevention). We use legal safeguards to protect your data during these transfers.
Table of Contents
- Data Controller
- EU Representative
- Data Protection Contact
- What Data We Collect
- Why We Process Your Data and Our Legal Basis
- AI Chatbot -- How Zuri Works
- Automated Decision-Making and Profiling
- Who We Share Your Data With
- International Data Transfers
- How Long We Keep Your Data
- Cookies and Tracking Technologies
- Your Rights
- Whether Providing Your Data Is Required
- Children's Data
- Changes to This Policy
1. Data Controller
The data controller responsible for your personal data is:
Spectral Invest Limited Bwejuu, Zanzibar, Tanzania Registration Number: Z0000196239 VAT ID: 07102923V Email: info@vela-zanzibar.com
As the data controller, Spectral Invest Limited decides how and why your personal data is processed.
2. EU Representative
Because Spectral Invest Limited is established outside the European Union but offers services to individuals in the EU, we are required to designate an EU Representative under GDPR Article 27.
EU Representative:
HyperSense Software SRL Bucharest, Romania
HyperSense Software SRL is in the process of being formally designated as our EU Representative. Once the formal designation is complete, HyperSense Software SRL will serve as a local point of contact for EU data protection authorities and for individuals in the EU who wish to exercise their data protection rights.
In the meantime, you can contact us directly at info@vela-zanzibar.com with any privacy-related inquiries.
3. Data Protection Contact
We have not yet appointed a Data Protection Officer (DPO). Given that our platform performs behavioral profiling activities (described in Section 7 below), we are conducting an assessment to determine whether a formal DPO appointment is required under GDPR Article 37.
Until a DPO is appointed, you can direct all privacy-related questions, concerns, and rights requests to:
Email: info@vela-zanzibar.com
We aim to respond to all privacy inquiries within 30 calendar days.
4. What Data We Collect
We collect three categories of personal data: information you provide to us, information collected automatically when you use our services, and information derived by our AI systems.
4.1 Information You Provide
| Data | When Collected | Example |
|---|---|---|
| Chat messages | When you use the Zuri chatbot | Your questions, comments, and any personal details you share in conversation (such as your name, email, phone number, or financial details) |
| Contact form details | When you submit a contact form or provide your details through the chatbot | Full name, email address, phone number (with country code), and your message |
4.2 Information Collected Automatically
| Data | When Collected | Example |
|---|---|---|
| IP address | When you visit our website or use the chatbot | Your full IP address |
| Device information | When you visit our website or use the chatbot | Browser type, operating system, and device type (derived from your user agent string) |
| Location data | When you use the chatbot | City, region, and country (derived from network headers, not GPS) |
| Session data | When you use the chatbot | A unique session identifier and conversation identifier |
| Cookies | When you visit our website | See Section 11 for a complete list |
| Page views and interactions | When you browse our website (only with your consent) | Pages visited, time on site, click patterns |
| Server logs | When you access our website | Request URL, timestamp, HTTP status code, referrer |
4.3 Information Derived by Our AI Systems
Our AI chatbot and analytics systems generate the following data based on your interactions:
| Derived Data | Description |
|---|---|
| Confidence score | A score (0--100) indicating how confident the AI is in its response to your message |
| Frustration score | A score (0--100) estimating whether you may be experiencing difficulty or dissatisfaction during the conversation |
| Lead quality rating | A classification (hot, warm, or cold) assessing your level of interest in our properties, based on conversation patterns |
| Conversation tags | Keywords summarizing the topics discussed |
| Conversation summary | A brief AI-generated summary of the conversation for our sales team |
| Throttle level | An internal indicator used to manage conversation flow when frustration is detected |
These derived data points are created automatically by our AI system based on your chat messages. They are used for service quality and sales follow-up purposes. See Section 7 for more detail on how automated profiling works and your rights in relation to it.
5. Why We Process Your Data and Our Legal Basis
Under the GDPR, we need a valid legal reason ("legal basis") for each way we use your personal data. The table below explains every processing purpose, the data involved, and the legal basis we rely on.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to your chat inquiries -- operating the Zuri chatbot to answer your questions about our properties and services | Chat messages, session data | Legitimate interest (Article 6(1)(f)): providing responsive customer support. Our interest in answering inquiries does not override your privacy because the data is necessary to provide the service you initiated. |
| AI-powered chat responses -- sending your messages to an AI service (Anthropic Claude) to generate responses | Chat messages, conversation history | Legitimate interest (Article 6(1)(f)), supported by EDPB Opinion 28/2024 confirming legitimate interest as a valid basis for AI conversational agents. We also display a consent notice before you start chatting. |
| Knowledge base search -- sending search queries to an embedding service to find relevant property information | Search queries derived from your messages | Legitimate interest (Article 6(1)(f)): necessary for the chatbot to retrieve accurate information. |
| Behavioral analytics and profiling -- analyzing conversations to assess quality, detect frustration, and score purchase interest | Confidence scores, frustration scores, lead quality ratings, conversation tags | Legitimate interest (Article 6(1)(f)): improving service quality and enabling our sales team to prioritize follow-up. This requires a documented balancing test (see Section 7). |
| Contact form processing -- handling your property inquiries and brochure requests submitted through the website or chatbot | Name, email, phone number, message, IP address, device information, location | Contract performance (Article 6(1)(b)): necessary to respond to your inquiry about property purchase or rental. Where you explicitly submit your details, consent (Article 6(1)(a)) also applies. |
| Fraud prevention -- protecting our forms and services from automated abuse | IP address, interaction patterns, reCAPTCHA bot score | Legitimate interest (Article 6(1)(f)): security of our services. |
| Website analytics -- understanding how visitors use our website to improve it | Google Analytics cookies, page views, session data, device type, approximate location | Consent (Article 6(1)(a)): we only activate analytics tracking after you accept analytics cookies. |
| CRM and marketing analytics -- tracking visitor sessions and marketing attribution | HubSpot cookies, session data, visitor identification | Consent (Article 6(1)(a)): we only activate HubSpot tracking after you accept analytics cookies. |
| Behavioral analytics (heatmaps and session recordings) -- understanding how visitors interact with our website through click patterns, scroll behavior, and session replays | Microsoft Clarity cookies, anonymized interaction data, device type, page content | Consent (Article 6(1)(a)): we only activate Microsoft Clarity after you accept analytics cookies. |
| Security monitoring and debugging -- maintaining the security and stability of our services | CloudFront access logs (IP address, request path, user agent, timestamp, HTTP status), application logs (session IDs, IP addresses, location) | Legitimate interest (Article 6(1)(f)): ensuring the security and proper functioning of our infrastructure. |
| Disaster recovery -- protecting against data loss | Full database backups (which include all stored personal data) | Legitimate interest (Article 6(1)(f)): business continuity and data protection. |
| Conversation metadata collection -- recording technical details of chat sessions for fraud prevention and analytics | IP address, user agent, geolocation (city, region, country) | Legitimate interest (Article 6(1)(f)): fraud prevention and providing geographic context for property inquiries. |
| Observer analytics dashboard -- internal business analytics and quality assurance | Aggregated and detailed conversation data, including behavioral scores and conversation content | Legitimate interest (Article 6(1)(f)): internal service quality monitoring. Access is restricted to authorized staff via API key authentication. |
Where we rely on legitimate interest, we have assessed that the processing is necessary for our stated purpose and does not override your fundamental rights and freedoms. You have the right to object to any processing based on legitimate interest -- see Section 12.
Where we rely on consent, you can withdraw your consent at any time without affecting the lawfulness of processing that occurred before withdrawal -- see Section 12.
6. AI Chatbot -- How Zuri Works
Our chatbot Zuri is powered by artificial intelligence. This section explains how the AI processes your data so you can make informed decisions about using it.
6.1 What Zuri Is
Zuri is an AI assistant -- not a human. It uses a large language model (Anthropic Claude) to understand your questions and generate responses about our properties, services, and investment opportunities. While Zuri aims to provide helpful and accurate information, AI-generated responses may contain inaccuracies. You should verify any important information (such as property specifications, pricing, or legal matters) directly with our team.
6.2 How Your Messages Are Processed
When you send a message to Zuri, the following happens:
- Your message is received by our server, hosted on Amazon Web Services (AWS) in Frankfurt, Germany (EU).
- A search query is generated from your message and sent to an embedding service provider to find relevant property information in our knowledge base. We are currently evaluating this provider for GDPR compliance, and transfer safeguards are being finalized. We are planning to replace this provider with one that meets our GDPR requirements.
- Your message, along with conversation history and retrieved information, is sent to Anthropic Claude (Anthropic, Inc., based in the United States) to generate a response.
- The response is sent back to you through the chat interface.
- Your conversation is stored in our database (hosted in the EU) along with metadata such as your IP address, device information, and location.
- Behavioral scores are generated by the AI (confidence, frustration, lead quality) and stored alongside your conversation.
6.3 Anthropic as a Data Processor
Anthropic, Inc. acts as a data processor on our behalf. This means Anthropic processes your data only according to our instructions and for the purpose of generating AI responses.
Key facts about how Anthropic handles your data:
- Your messages are not used to train AI models. Anthropic does not use data submitted through its commercial API to train or improve its models.
- Data retention: Anthropic retains API data (your messages and the AI responses) for a default period of 30 days for safety and abuse monitoring, after which it is deleted.
- Data protection agreement: Anthropic's Data Processing Addendum (DPA) with Standard Contractual Clauses (SCCs) is automatically incorporated through its Commercial Terms of Service.
- Processing location: Anthropic provides EU-based processing for API requests, though data may be stored in the United States. Transfers are protected by SCCs (see Section 9).
6.4 Embedding Service Provider
To find relevant information in our knowledge base, we send search queries derived from your messages to an embedding service provider. This provider converts text into numerical representations (called "embeddings") that allow our system to match your question with relevant content.
We are currently evaluating this provider's GDPR compliance posture and are in the process of finalizing appropriate data transfer safeguards. We are planning to replace this provider with a solution that fully meets our data protection requirements. In the meantime, we disclose that search queries -- which may include personal information you share in chat -- are transmitted to this US-based service.
6.5 AI Limitations
Zuri is an AI system with inherent limitations:
- Responses are generated based on patterns in training data and our knowledge base; they may be inaccurate, incomplete, or outdated.
- Zuri does not provide professional legal, financial, or investment advice. Always consult qualified professionals for important decisions.
- Property specifications, availability, and pricing mentioned by Zuri may change. Chatbot responses do not constitute binding offers.
6.6 Human Contact
If you prefer to speak with a human rather than the AI, or if you want to verify information provided by Zuri, you can reach our team at:
- Email: info@vela-zanzibar.com
- Phone: +31 652 343 165
7. Automated Decision-Making and Profiling
Our platform uses automated processing to analyze your chat conversations. This section explains what automated decisions we make, how they work, and your rights.
7.1 What Automated Profiling We Perform
Lead quality scoring: During and after your conversation with Zuri, our AI system analyzes your messages to assess your level of interest in our properties. Based on conversation patterns -- such as questions about pricing, availability, or investment returns -- your conversation is assigned a quality rating (hot, warm, or cold). This rating helps our sales team prioritize which inquiries to follow up on first.
Frustration detection and routing: Our system monitors conversations for signs that you may be experiencing difficulty or dissatisfaction (for example, repeated questions or expressions of confusion). If the system detects elevated frustration, it may adjust how the conversation is handled -- for example, by suggesting alternative ways to get help or by flagging the conversation for human review.
Conversation routing: Based on the behavioral signals described above (lead quality and frustration level), our system may adjust the handling path for your conversation. This can affect the timing and nature of any follow-up contact from our team.
7.2 How These Decisions Affect You
- Lead quality scoring may affect whether and when you receive follow-up contact from our sales team. Conversations rated as "hot" (indicating strong purchase interest) may receive faster follow-up than those rated "cold."
- Frustration-based routing may change how the chatbot handles your conversation, including suggesting human contact or adjusting response timing.
- These automated assessments do not determine whether you can access our services. All visitors can use the chatbot, submit inquiries, and contact our team regardless of automated scores.
7.3 Your Rights Regarding Automated Decisions
Under GDPR Article 22, you have the right to:
- Request human intervention: Ask that a member of our team reviews any automated assessment made about you.
- Express your point of view: Tell us if you believe an automated assessment is incorrect or unfair.
- Contest the decision: Challenge any decision that was made or influenced by automated profiling.
To exercise any of these rights, email us at info@vela-zanzibar.com with the subject line "Automated Decision Review." We will respond within 30 calendar days.
Note for transparency: Whether our lead scoring constitutes a decision with "significant effects" under GDPR Article 22 is subject to ongoing legal assessment. Regardless of the outcome of that assessment, we disclose this processing and provide you with the rights described above in the interest of transparency.
8. Who We Share Your Data With
We share your personal data with the following categories of recipients. We do not sell your personal data.
8.1 Service Providers (Data Processors)
These companies process your data on our behalf, under our instructions:
| Recipient | Location | Data Shared | Purpose |
|---|---|---|---|
| Anthropic, Inc. | United States | Chat messages, conversation history | AI chatbot response generation |
| Embedding service provider | United States | Search queries derived from your messages | Knowledge base search (converting text to vector embeddings for property information retrieval) |
| HubSpot, Inc. | United States | Cookies, session data, visitor identification | CRM analytics, visitor tracking, and marketing attribution (only with your consent) |
| Google LLC | United States | Analytics cookies, page views, IP address, interaction patterns | Website analytics (Google Analytics, only with your consent) and fraud prevention (reCAPTCHA) |
| Microsoft Corporation | United States | Clarity cookies, interaction data (clicks, scrolls, mouse movements), session recordings, device and browser information | Behavioral analytics and heatmaps (Microsoft Clarity, only with your consent) |
| Amazon Web Services (AWS) | EU (Frankfurt, Germany) | All stored data (hosting infrastructure) | Cloud hosting, database storage, content delivery, logging |
8.2 Internal Recipients
| Recipient | Data Shared | Purpose |
|---|---|---|
| Sales agents | Contact form submissions (name, email, phone, message, AI-generated conversation summary) | Property inquiry follow-up |
| Internal analytics team | Conversation data, behavioral scores, metadata | Service quality monitoring via the Observer analytics dashboard (access restricted by API key) |
8.3 Contact Form Data
When you submit your contact details through the chatbot or website, your data (name, email, phone number, message, and an AI-generated summary of the conversation) is stored in our self-hosted content management system on AWS (Frankfurt, Germany). This is not a third-party service; it operates on our own infrastructure.
8.4 Legal Disclosures
We may disclose your personal data if required by law, court order, or regulatory request, or if necessary to protect our legal rights.
9. International Data Transfers
Some of our service providers are located in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure it is protected by one or more of the following legal mechanisms:
9.1 EU-US Data Privacy Framework (DPF)
The European Commission adopted an adequacy decision for the EU-US Data Privacy Framework on July 10, 2023. This means that transfers to US companies certified under the DPF are considered to provide adequate data protection. The framework survived its first legal challenge (September 2025) and its first periodic review (October 2024). The following providers are relevant:
- Google LLC -- certified under the EU-US DPF
- HubSpot, Inc. -- certified under the EU-US DPF
- Microsoft Corporation -- certified under the EU-US DPF
9.2 Standard Contractual Clauses (SCCs)
For transfers not covered by an adequacy decision alone, we rely on Standard Contractual Clauses approved by the European Commission. These are binding contractual terms that require the data recipient to protect your data to EU standards:
- Anthropic, Inc. -- DPA with SCCs automatically incorporated through its Commercial Terms of Service
- Embedding service provider -- Transfer safeguards are being finalized. We are in the process of establishing appropriate contractual protections and are evaluating a replacement provider with stronger GDPR compliance
9.3 Data Stored in the EU
Our primary infrastructure is hosted by AWS in Frankfurt, Germany (EU region eu-central-1). Your chat conversations, contact form data, behavioral scores, and all database records are stored within the EU. Data is only transferred to the United States when it is sent to the service providers listed above for processing.
9.4 How to Obtain Copies of Safeguards
You can request a copy of the Standard Contractual Clauses or other transfer safeguards we use by emailing us at info@vela-zanzibar.com.
10. How Long We Keep Your Data
We retain your personal data only as long as necessary for the purposes described in this policy. The table below specifies the retention period for each data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Chat conversations and messages | 1 year | Customer support records and service improvement |
| Behavioral scores (confidence, frustration, lead quality) | 1 year | Same lifecycle as the conversation they relate to |
| Contact form submissions | 2 years | Sales follow-up and legal obligation to respond to inquiries |
| Analytics cookies (Google Analytics) | 2 years (cookie lifetime) / 14 months (analytics data retained by Google) | Website analytics |
| HubSpot cookies | 6 months (__hstc, hubspotutk) / Session (__hssc, __hssrc) | CRM analytics |
| Microsoft Clarity cookies | 1 year (_clck, CLID) / 1 day (_clsk) | Behavioral analytics and heatmaps |
| CloudFront access logs | 1 year | Security monitoring and incident investigation |
| Application logs | 1 year | Debugging and error resolution |
| Database backups | 30 days | Disaster recovery |
| Anthropic API data (your messages processed by the AI) | 30 days (retained by Anthropic, then deleted) | Safety monitoring by Anthropic |
After the retention period expires, your data is deleted or anonymized. Database backups that contain expired data are overwritten within their 30-day rotation cycle.
11. Cookies and Tracking Technologies
11.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and understand how you use the site. Some cookies are essential for the site to function; others are used for analytics and are only activated with your consent.
11.2 Cookie Table
| Cookie Name | Category | Provider | Purpose | Duration | Consent Required? |
|---|---|---|---|---|---|
vela_cookie_consent_v1 | Necessary | This site | Stores your cookie consent preferences so we do not ask you repeatedly | Persistent | No (essential for consent management) |
_GRECAPTCHA | Necessary | Fraud protection -- verifies you are a human when submitting forms (reCAPTCHA) | Session | No (essential for security) | |
_ga | Analytics | Google Analytics | Distinguishes unique visitors to measure website traffic | 2 years | Yes |
_ga_<ID> | Analytics | Google Analytics | Maintains session state for Google Analytics reporting | 2 years | Yes |
__hstc | Analytics | HubSpot | Tracks visitor sessions and marketing attribution (identifies returning visitors across sessions) | 6 months | Yes |
hubspotutk | Analytics | HubSpot | Identifies returning visitors for CRM analytics | 6 months | Yes |
__hssc | Analytics | HubSpot | Tracks current session data (page views within a session) | 30 minutes | Yes |
__hssrc | Analytics | HubSpot | Detects whether a new session has started | Session | Yes |
_clck | Analytics | Microsoft Clarity | Persists the Clarity user ID and preferences for behavioral analytics (heatmaps, session recordings) | 1 year | Yes |
_clsk | Analytics | Microsoft Clarity | Connects multiple page views by the same user into a single Clarity session recording | 1 day | Yes |
CLID | Analytics | Microsoft (via bing.com) | Identifies returning users across Clarity sessions for aggregated analytics | 1 year | Yes |
11.3 Local Storage
Our chat widget uses your browser's local storage (similar to cookies but stored differently) to maintain your chat session. This stores a session identifier and conversation identifier so that you can continue a conversation if you navigate away and return. This is necessary for the chatbot to function.
11.4 Managing Your Cookie Preferences
- At first visit: We display a cookie consent banner. Analytics cookies are blocked by default and only activated if you click "Accept All" or enable the Analytics category in "Manage Preferences."
- Changing your preferences: You can update your cookie preferences at any time using the "Cookie Preferences" link in our website footer.
- Browser settings: You can also delete or block cookies through your browser settings. Note that blocking necessary cookies may prevent parts of the website from functioning correctly.
12. Your Rights
Under the GDPR, you have the following rights regarding your personal data. These rights apply regardless of your nationality or residence, as long as we are processing your data.
12.1 Right of Access (Article 15)
You have the right to request a copy of all personal data we hold about you, along with information about how we process it. We will provide this in a commonly used electronic format (such as PDF or JSON).
How to exercise: Email info@vela-zanzibar.com with the subject line "Data Access Request." Describe the data you would like to access (for example, "all data from my chat conversation on [date]" or "all data associated with my email address").
12.2 Right to Rectification (Article 16)
If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it.
How to exercise: Email info@vela-zanzibar.com with the subject line "Data Rectification Request." Tell us what data is incorrect and what the correct information should be.
12.3 Right to Erasure (Article 17)
You have the right to ask us to delete your personal data. This right applies when, for example, the data is no longer necessary for the purpose it was collected, you withdraw your consent, or you object to processing and we have no overriding legitimate grounds.
How to exercise: Email info@vela-zanzibar.com with the subject line "Data Deletion Request." Specify what data you want deleted (for example, "delete my entire chat conversation history" or "delete my contact form submission").
Please note: We may need to retain certain data where required by law or where we have a compelling legitimate interest (for example, fraud prevention records).
12.4 Right to Restriction of Processing (Article 18)
You have the right to ask us to temporarily stop processing your data in certain circumstances -- for example, while we verify the accuracy of your data after you contest it, or while we assess whether our legitimate interests override yours after you object.
How to exercise: Email info@vela-zanzibar.com with the subject line "Processing Restriction Request." Explain why you want processing restricted.
12.5 Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to transmit it to another controller. This applies to data you provided to us that we process based on consent or contract performance.
How to exercise: Email info@vela-zanzibar.com with the subject line "Data Portability Request." Specify the data you want and your preferred format.
12.6 Right to Object (Article 21)
You have the right to object to our processing of your personal data when we rely on legitimate interest as the legal basis. This includes the right to object to behavioral profiling (lead scoring, frustration detection). If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
How to exercise: Email info@vela-zanzibar.com with the subject line "Objection to Processing." Tell us which processing activity you object to and why.
12.7 Right to Withdraw Consent (Article 7(3))
Where we process your data based on your consent (such as analytics cookies, HubSpot tracking, or chat consent), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing we carried out before you withdrew.
How to withdraw:
- Cookie consent: Click "Cookie Preferences" in the website footer and adjust your settings.
- Chat consent or contact data consent: Email info@vela-zanzibar.com with the subject line "Consent Withdrawal."
12.8 Response Timeframe
We will respond to all rights requests within 30 calendar days of receiving your request. If your request is particularly complex or we receive a large number of requests, we may extend this by an additional 60 days, but we will inform you of any extension within the initial 30-day period.
There is no fee for exercising your rights. However, if a request is manifestly unfounded or excessive (for example, repetitive requests), we may charge a reasonable fee or refuse the request, and we will explain why.
12.9 Right to Complain to a Supervisory Authority
If you are not satisfied with how we handle your data or respond to your request, you have the right to lodge a complaint with a data protection supervisory authority.
The relevant supervisory authority is:
Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP) (Romanian National Supervisory Authority for the Processing of Personal Data) B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania Website: dataprotection.ro
You may also lodge a complaint with the supervisory authority in your own EU Member State.
13. Whether Providing Your Data Is Required
Most of the data we collect is voluntary. Here is how this affects your experience:
| Data | Required? | What Happens If You Do Not Provide It |
|---|---|---|
| Chat messages | Voluntary | You are not required to use the chatbot. If you choose not to chat, you can contact us by email or phone instead. |
| Personal details shared in chat (name, email, phone) | Voluntary | The chatbot functions without your personal details. However, if you want us to follow up on a property inquiry, we need at least your name and email or phone number. Without this, we cannot contact you. |
| Contact form details (name, email, phone, message) | Required for the form | Without your email address, we cannot respond to your inquiry. Without your name, we cannot address you personally. The phone number is optional but helps us reach you faster. |
| Cookie consent | Voluntary | If you do not consent to analytics cookies, the website functions normally. You will not be tracked by Google Analytics or HubSpot. Only necessary cookies (consent storage and fraud protection) will be set. |
No data provision is a statutory or contractual obligation in the legal sense. You are free to leave our website at any time without providing any data. However, certain services (such as receiving a response to a property inquiry) require minimum information as described above.
14. Children's Data
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data through our chatbot or contact forms, please contact us at info@vela-zanzibar.com and we will promptly delete that data.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our data practices, services, or legal requirements. When we make changes:
- We will update the "Last updated" date at the top of this policy.
- For significant changes (such as new data processing activities, new data recipients, or changes to your rights), we will provide notice through a prominent announcement on our website before the changes take effect.
- The updated policy will be available at the same URL on our website.
We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acknowledgment of the updated policy.
Contact Us
For any questions about this Privacy Policy, to exercise your data protection rights, or to raise a privacy concern:
Email: info@vela-zanzibar.com Phone: +31 652 343 165 Post: Spectral Invest Limited, Bwejuu, Zanzibar, Tanzania
This Privacy Policy was last reviewed and updated on March 3, 2026.