Privacy.

Veltner is a trading name of BIOBOOST RESEARCH LTD, a private company limited by shares registered in England and Wales under company number 16412427. Our registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the data controller for the personal data described on this page.

For anything in this notice, including any request about your own data, write to contact@veltner.com or call +44 20 3769 7245.

veltner.com sets no cookies. It runs no analytics, no tracking pixels and no visitor-identification tools, and it loads nothing from a third party — the fonts, images and scripts are all served from our own server. Because nothing is stored on your device and nothing is read from it, there is no consent banner to click.

What the web server does keep, as most web servers do, is a log entry for each page requested. Each entry records:

• the IP address the request came from
• the date and time
• the page requested, and whether it was served
• the page you arrived from, if any
• the browser and operating system your browser reports

These logs exist to keep the site running and to spot abuse. We do not use them to build a profile of you, we do not try to identify you from them, and we do not combine them with anything else. They are deleted automatically after about fifteen days. Our lawful basis is legitimate interests: operating a website securely.

The enquiry form does not send anything to this website. It opens a message in your own email program with the fields already filled in, which you then choose to send or discard. Nothing you type is stored here.

Once you email us, we hold that correspondence: your name and email address, any company you mention, the market or geography you describe, and whatever else you choose to tell us. We use it to reply, and to discuss working together if the conversation goes that way.

Your message reaches us through our email provider, and we record the exchange in our customer relationship management system so that whoever picks the conversation up has its history. Both are named under "Who we share it with" below.

Veltner is a research-led business development company. Part of that work is identifying organisations, and people within them whose role makes a conversation relevant. That means we process personal data about people we have not yet met.

The data is professional rather than private, and is normally limited to: name, job title, employer, business contact details, and publicly stated responsibilities or areas of interest.

It may be obtained from sources such as company websites, professional profiles, public records, corporate filings, trade-show directories, industry publications, procurement and tender sources, commercial B2B information providers, and other legitimate public or commercial business-information sources. Those are examples of the kinds of source that may be used — not a statement that any particular source is used.

These records — the contact details, our research notes, and the history of any correspondence and follow-up — are held in our customer relationship management system, named below.

If we contact you on this basis, we will say who we are and why we are writing, and every message will tell you how to stop hearing from us. If you ask us to stop, we stop.

For research and business contact, our lawful basis is legitimate interests: ours in researching markets and starting relevant commercial conversations, and our clients' in reaching the people for whom their offer is actually relevant.

We have weighed that against your interests. The data concerns your professional role rather than your private life, the contact relates to that role, we keep the amount of data small, and you can object at any time and be removed.

Where we ask for your consent, consent is the basis, and you can withdraw it at any time without affecting anything done before you withdrew it. Where the law requires us to keep or disclose something, the basis is legal obligation.

We do not sell personal data, and we do not share it for anyone else's marketing.

We use a small number of service providers who process personal data on our instructions and may not use it for their own purposes:

• Salesflare — our customer relationship management system. We use it for business contact records, prospect research, stakeholder information, correspondence, follow-up, commercial opportunities and relationship history.
• EuroDNS and Open-Xchange — our email infrastructure. Our public address is an alias for the operational mailbox, which is hosted through them.

The website itself runs on a server we operate, and holds nothing about you beyond the server logs described above.

Where we carry out an engagement for a client, the research and contact records produced for that engagement are shared with that client.

We also disclose data where the law requires it.

We are based in the United Kingdom.

Salesflare states that CRM data is stored in the European Union, in Belgium. EuroDNS states that personal data for its services is stored in Luxembourg, and relevant Open-Xchange service data is shared with Open-Xchange AG in Germany.

Some service providers may use sub-processors, or make lawful international transfers where that is necessary. Where personal data is transferred outside the UK or the European Economic Area, appropriate safeguards are used where applicable law requires them.

If you want to know where a particular piece of your data is held, ask us and we will tell you.

• Web server logs — deleted automatically after about fifteen days.
• Enquiries and correspondence — up to 24 months after our last substantive interaction with you, unless the exchange becomes part of an ongoing client relationship, or has to be kept for legal, contractual or accounting reasons.
• Prospect and business development records — reviewed once they have been inactive for 24 months, then either deleted or brought up to date, depending on whether there is still a genuine business reason to hold them.
• Suppression records — if you tell us not to contact you, we keep the least information needed to recognise you and honour that. We do not delete it, because deleting it is exactly what would let you be contacted again by mistake.

If you ask us to erase your data we will, unless we are required to keep it.

The site is served over HTTPS. Access to correspondence and research records is limited to the people who need it, and we take reasonable measures to protect it. No system is completely secure, and we do not claim otherwise.

Subject to the conditions in the legislation, you can ask us to:

• give you a copy of the personal data we hold about you
• correct it if it is wrong or incomplete
• delete it
• restrict what we do with it
• stop processing it, where we rely on legitimate interests
• send it to you, or to someone else, in a portable form

You can object to direct marketing at any time, for any reason or none. That right is absolute: if you tell us to stop contacting you, we stop. We will keep the minimum record needed to make sure we do not contact you again by mistake.

Where we rely on your consent, you can withdraw it at any time.

To exercise any of this, email contact@veltner.com. We will normally respond within one month.

If you are unhappy with how we have handled your personal data, we would rather you told us first, so we can put it right.

You can also complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office, at ico.org.uk. In the European Economic Area it is the authority in the country where you live or work. Nothing here obliges you to come to us before going to them.

We update this page when what we do changes. It was last updated on 26 August 2026.