Skip to content

Privacy notice

What this website processes, why, on what basis, and how to exercise your rights.

Controller

Velcura Gold Trading L.L.C, Office 09-113, Dubai Real Estate Establishment, Umm Hurair 2, Bur Dubai, P.O. Box 416180, Dubai, United Arab Emirates. Enquiries about data protection: office@velcuragold.com.

What this website does not do

This site loads nothing from a third party. Fonts are served from this domain, and so is the audience measurement described below. There is no tracking pixel, no embedded map, no social widget and no advertising network. Opening a page therefore does not establish a connection to anybody but this server and the content delivery network in front of it.

Cookies and consent

The public site sets no cookies. Not a necessary one, not a preference one, none at all. The language you are reading is in the address rather than in a stored setting, which is also why a link opens for the person you send it to in the language you sent it in.

You are not asked to consent to a cookie, because none is set. The audience measurement described in the next section works without one: it cannot recognise you on a later visit, and there is nothing stored on your device to ask about. There is no tracking across sites, no profiling, no advertising, and no content loaded from anybody else.

The administration area is not part of the public site and is reachable only with a login. Signing in there sets a session cookie, `payload-token`, for the single account that maintains the content; if that account changes the panel’s interface language, a second cookie, `payload-lng`, stores the choice. Both belong to that one account and to that tool. No page of the public site sets either of them, and nothing on this site sets a cookie for a visitor.

This describes the site as it stands. Audience measurement was added in September 2026, and this section was rewritten before it went live rather than after — which is what the previous wording of this paragraph required. The same applies to anything added later: an embedded third-party service, or any processing that would set something on your device, means reconsidering this position first.

Audience measurement

This site counts visits with Matomo, an analytics program that runs on the same infrastructure as the site itself, operated by the processor named in the table below rather than by an analytics company. It is delivered from this domain, so opening a page still establishes no connection to a third party, and the measurements are not passed on to anybody beyond that processor.

The measurement works without cookies. Nothing is stored in your browser, and you cannot be recognised on a later visit or across sites — a returning reader counts as a new one. Your IP address is shortened before it is stored, so that what remains identifies a network rather than a device, and every later step works only with the shortened form.

If your browser sends a Do Not Track signal, nothing about your visit is recorded at all. That is the way to object to the measurement: because nothing is stored in your browser, there is no opt-out setting that could be remembered there.

What is kept: the page requested, the time, the shortened address, the referring page where the browser sends one, and the browser identification. What is not kept: any identifier that would follow you, any profile, and anything handed to another company. Records are deleted after 180 days.

No legal basis under the UAE PDPL is named here, because the law is not engaged: what is stored is not personal data. Five things hold at once — the address is shortened before it is stored, nothing is kept in your browser, the short-lived grouping that combines requests into a single visit is randomly seeded and expires within a day, the data are not passed on, and they are not combined with any other record. Velcura Gold Trading L.L.C made that determination on 12 September 2026. It is reconsidered before any one of those five changes.

Server logs

The server and the content delivery network record technical connection data: IP address, time, the page requested, the referring page where the browser sends one, and the browser identification. This is processed to deliver the site and to defend it against attack, and it is not combined with anything else or used to build a profile.

The contact form

The form collects your company, your name, your country of registration, your business email address, your telephone number if you give one, the type of enquiry and your message.

The data is processed to answer the enquiry, on the basis of your consent and of the steps taken at your request before entering into a contract. It is sent by email to Velcura’s management and, where the customer relationship management system is in use, written into it. It is not stored in this website’s database — the site keeps no record of your enquiry after it has been delivered.

Giving the data is voluntary. Without it the enquiry cannot be answered.

Processors

The parties below process data on Velcura’s behalf under contract. Where a processor engages another party to carry out part of the work, that sub-processor is named with it.

Processors and what they process
ProcessorPurposeData
Michael Wagner, trading as Orentara Digital Operations — sub-processor: Cloudflare, Inc.Content delivery, protection against attackConnection data, IP address
Michael Wagner, trading as Orentara Digital Operations — sub-processor: netcup GmbHOperation of the serverConnection data, server logs
Zoho Corporation — Zoho Mail, United Arab Emirates data centreDelivery of enquiries to managementThe contents of the form
Zoho Corporation — Zoho CRM, not yet activatedCustomer relationship management, once activatedThe contents of the form

Retention

Enquiries received by email are kept for as long as they are needed to deal with the matter and to meet retention obligations, and are deleted afterwards. Server and network logs are kept for a short technical period and then deleted.

Your rights

You may ask what data is held about you, ask for it to be corrected, ask for it to be deleted, withdraw a consent you have given, and object to processing. Withdrawing a consent does not affect what was lawful before it.

Write to office@velcuragold.com. Please include enough detail to identify the enquiry you are asking about, otherwise the data cannot be located.

International transfers

Where a processor operates outside the United Arab Emirates, the transfer is covered by the contract with that processor and by the safeguards the applicable framework requires.

Changes

This notice applies to the website as it currently stands. A material change to the processing described here will be reflected in it.