Enterprise-grade security built in from the start
Velixa protects your data and your clients' data with layered, serious-business security — not tick-box theatre. PCI-compliant, GDPR-aware and hardened against common attacks by default.
What you get
TLS everywhere, sensitive data encrypted at rest.
Every state-changing request is verified — no cross-site request forgery.
Public booking and login endpoints are rate-limited to slow brute-force and abuse.
Stripe handles all card data — Velixa servers never see card numbers.
Delete any customer's data from the dashboard — compliant with right-to-erasure obligations.
Every sensitive action is logged with who, what and when.
How it fits into your day
PCI-SCC certified checkout
Card tokenisation and 3D Secure handled entirely within Stripe's certified environment.
Per-customer consent records
Marketing consent is captured with timestamp, IP and source — full audit trail.
Transparent incident policy
Any breach affecting your data triggers notification within 72 hours as required by UK GDPR.
Common questions
Velixa uses the services listed in its Privacy Policy for hosting and delivery. Some enabled services may process personal data outside the UK/EEA under appropriate UK GDPR safeguards. See the Privacy Policy for current subprocessor and transfer details.
Yes — Velixa is registered with the Information Commissioner's Office (ICO) as a data controller.
Role-based permissions control what each team member can see and do. Staff are restricted to their own diary by default; managers see the whole team; owners have full access. Every sensitive action is logged.
From any customer profile, use the "Delete customer" action. This complies with right-to-erasure obligations under UK GDPR. For a full Subject Access Request export, contact support.
Stripe handles card details during checkout, so Velixa does not store or process card numbers on its own servers.
Yes — every sensitive action (booking changes, charges, refunds, staff edits) is logged with the user account, timestamp and action. Audit logs are available to platform administrators on request.
Ready to switch on?
Every feature is yours from day one of your free trial — no contracts, cancel any time.
Start 7-day free trial