COMPLIANCE_TIMELINE :: ACTIVE

Legal & Compliance Framework

A chronological audit trail of our data handling, security protocols, and client rights infrastructure.

TIMELINE_NODE_01

Privacy Policy

EFFECTIVE: 2026-01-01 | LAST AUDIT: 2026-07-15
// DATA COLLECTION PROTOCOLS

VelvetLayoutCraft, registered at Calle Larios, 5, 29005, Málaga, Spain, collects personal data strictly for the purpose of executing requested design services and maintaining operational communication channels.

01.1

Data Controller: VelvetLayoutCraft, Calle Larios, 5, 29005, Málaga, Spain. Contact: [email protected]

01.2

Data Collected: Name, email address, phone number, project requirements, and usage analytics collected via essential session cookies only.

01.3

Legal Basis: Consent (Article 6(1)(a) GDPR) for marketing communications; Legitimate interest (Article 6(1)(f) GDPR) for service delivery and security.

01.4

Retention Period: Personal data retained for the duration of the service contract plus 24 months for legal compliance. Project files retained for 36 months post-completion.

01.5

Data Subject Rights: Access, rectification, erasure, restriction, portability, and objection rights under Articles 15-22 GDPR. Submit requests to [email protected].

TIMELINE_NODE_02

Terms of Service

EFFECTIVE: 2026-01-01 | LAST AUDIT: 2026-07-15
// ENGAGEMENT PROTOCOLS

By engaging VelvetLayoutCraft services, the client acknowledges and agrees to the following operational terms governing all design system engagements.

02.1

Scope of Work: All deliverables are defined in the signed project agreement. VelvetLayoutCraft reserves the right to decline scope expansion without a formal change order.

02.2

Payment Terms: Invoices are due within 14 calendar days of issuance. Late payments incur a 2% monthly administrative fee. Project milestones are non-refundable upon completion.

02.3

Intellectual Property: Full ownership of final deliverables transfers to the client upon final payment. VelvetLayoutCraft retains the right to display work in portfolios and case studies.

02.4

Confidentiality: Both parties agree to maintain strict confidentiality of proprietary information exchanged during the engagement, as specified in the NDA annex.

02.5

Termination: Either party may terminate with 30 days written notice. Completed milestones remain billable. Work-in-progress is delivered in current state upon termination.

TIMELINE_NODE_03

Cookie Policy

EFFECTIVE: 2026-01-01 | LAST AUDIT: 2026-07-15
// SESSION MANAGEMENT

VelvetLayoutCraft employs a minimal cookie architecture designed for essential site functionality and session integrity.

03.1

Essential Cookies: Session identifiers, CSRF tokens, and cookie consent preference storage. These are strictly necessary for site operation and cannot be disabled.

03.2

No Tracking Cookies: VelvetLayoutCraft does not employ third-party analytics, advertising, or behavioral tracking cookies. No data is shared with advertising networks.

03.3

Consent Management: Cookie consent is stored locally via localStorage and expires after 365 days. Users may revoke consent at any time through browser settings.

03.4

Third-Party Services: Google Fonts CDN is loaded for typography rendering. No cookies are set by this service. All external resources are loaded over TLS 1.3 encrypted connections.

TIMELINE_NODE_04

Refund & Reimbursement Policy

EFFECTIVE: 2026-01-01 | LAST AUDIT: 2026-07-15
// REIMBURSEMENT PROTOCOLS

VelvetLayoutCraft operates a milestone-based refund framework aligned with project deliverable completion.

04.1

Pre-Start Cancellation: Full refund if cancelled before any work has commenced. Processing time: 5-7 business days to original payment method.

04.2

In-Progress Cancellation: Completed milestones are non-refundable. Refund calculated on remaining unstarted work only. A termination fee of 15% of remaining balance applies.

04.3

Quality Dispute: Clients may request a revision within 14 days of deliverable receipt. If the revision request falls within original scope and remains unfulfilled after 2 attempts, a partial refund of 50% of the affected milestone is issued.

04.4

Non-Refundable Items: Research phases, third-party license purchases, domain registrations, and hosting fees are non-refundable. Consultation sessions under 2 hours are non-refundable.

04.5

Dispute Resolution: Refund disputes are governed by Spanish consumer protection law. Mediation through the Málaga Consumer Arbitration Board is available prior to legal proceedings.

GDPR
COMPLIANT
LSSI-CE
COMPLIANT
TLS 1.3
ENCRYPTED
SOC 2
IN PROGRESS