Privacy notice

Vellium & Co Testing Lab, velliumandco.com. Last updated 14 October 2026.

Who we are

The Testing Lab is run by Vellium & Co Ltd, a company registered in England and Wales (number 17045518). We decide how the information described here is used, so we are its controller under UK data protection law. We are registered with the Information Commissioner's Office, registration number ZC101732.

Registered office: Office 10 Jubilee House, East Beach, Lytham St Annes, Lancashire FY8 5FT, United Kingdom Email: info@vellium.co.uk

What this notice covers

The website velliumandco.com and everything served from it for people and for AI agents: the pages, the API at /api/v1, the MCP servers at /mcp and /mcp/<name>, the agent endpoints at /a2a and /ask, the paid lookup at /api/seller, and the SSE address sse.velliumandco.com.

What we do not collect

• We set no cookies and run no analytics, advertising or tracking scripts. We count use of the API and agent endpoints on our own server, as explained below; the counts hold nothing that identifies a person.
• You never need an account, a key or a name to use the site or the API.
• We do not store the questions, addresses or other inputs you send to the API, the MCP servers or the agent endpoints, with one exception explained below: a route-map question we could not answer well.

Route-map questions we could not answer well

When a question sent to our route map (/api/v1/route, or the find_route tool) gets only a weak answer, we keep the question's text so we can find and add the sources that would answer it. Before it leaves our host, email addresses, phone numbers and long strings of digits are removed from it; we keep only that cleaned text, the date and the topic it matched. We do not keep your IP address, agent name or anything else about the request. These records are deleted after 30 days, are never published, and are used only to improve the route map. Please do not put personal information in a route-map question.

Counts of use

To know how many agents use the lab and whether they come back, we count each call to the API, the MCP servers, the agent endpoints and the files agents read to find us (such as llms.txt and openapi.json). Pages for people are not counted. Each count records only: which endpoint was called, the result code, the date and time, the name of the calling software without its version (for example "python-requests" or "ChatGPT-User"), the name of the network operator the call came from (for example a cloud provider or broadband company), the country, and, for the MCP servers, the tool called and the name the client gives itself. We do not record your IP address, your full browser or agent string, or any question or input you send. These counts are kept as the lab's long-run record of use, are never sold, and are published only as totals.

What our hosting providers process

Like any website, the site cannot reach you without your connection details. Cloudflare, which hosts and protects velliumandco.com, processes your IP address, browser or agent name and the address you requested in order to deliver pages and block abuse. Cloudflare's own privacy policy explains how it handles that data: cloudflare.com/privacypolicy.

The SSE address sse.velliumandco.com runs on our own server with DigitalOcean in London. It keeps a connection open only while your client is connected and does not log requests.

Paid lookups

The paid lookup at /api/seller is paid in USDC on the Base blockchain using the x402 standard. A payment, including the wallet address it came from, is recorded on that public blockchain by design, and the payment is settled through Coinbase's x402 facilitator. We keep a record of payments we receive for six years after the end of the accounting year they fall in, the period HMRC requires for company tax records. We never receive your card or bank details.

Information about the services and websites we test

We publish the results of checks on paid data services and on shopping, travel, ticket and food websites: their names, addresses, prices and how they performed. This is information about businesses and their public services, gathered from public sources and our own tests. If you run a service or website we cover and believe a result is wrong, email us. We look into every report; a correction is recorded with its reason, and earlier results are never quietly deleted.

If you email us

If you write to info@vellium.co.uk, we use your name, address and message to reply. Our email is hosted by Google. We delete correspondence within 12 months of the matter closing, unless it forms part of our tax or accounting records, which we keep for six years.

Your rights

Under UK data protection law you can ask us for a copy of personal information we hold about you, and ask us to correct it, delete it or stop using it. Email info@vellium.co.uk and we will reply within one month. Because we keep almost nothing, the answer will often be that we hold nothing about you.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.

Changes

If what we collect changes, we will update this page before the change takes effect and change the date at the top.

Vellium & Co Ltd · velliumandco.com · vellium.co.uk