VELUX Privacy Notice

All companies in the VELUX Group respect and protect your privacy. This VELUX Privacy Notice (“Privacy Notice”) is meant to help you understand why we collect personal data about you, the types of personal data we collect, how we collect it and for how long we keep it, with whom we share it, as well as your rights. We also explain how we keep your data secure.

We, VELUX America LLC (hereinafter “VELUX”), with its registered office at 104 Ben Casey Drive Fort Mill, SC 29708 USA, under registration number 04-2559488, are the data controller for your personal data.

This section provides information for U.S. residents, as required under U.S. privacy laws. Under the U.S. privacy laws, “personal information” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular U.S. resident or household. Personal information does not include publicly available information, deidentified information, aggregate consumer information, or other exclusions under applicable law.

Why we process personal data and the lawful bases for collection

The main reason we collect, use, and store your data is to allow us to provide our services to you. “Service,” “our service,” and similar descriptions mean conducting business with you/your organization and assisting you with inquiries, sales processes, and claims.

We also process information about your use of the services for business development purposes, to inform you of our business operations, products, and services through marketing, and to improve our services through any feedback you give us. We may also process your personal data for contractual and recruitment purposes and to comply with legal obligations.

We process personal data based on different legal bases as listed below.

Performance of a contract, including a purchase

When we process personal data in relation to a contract, our legal basis is “performance of a contract,” including a purchase.

Consent

When we send out a newsletter about our products, we do this based on your consent if legally required. When the lawful basis for processing is consent, you have the right to withdraw your consent at any time.

Legal obligation

If we share your personal data with law enforcement agencies or other governmental bodies, we share this because we have a legal obligation to do so.

Legitimate interest

We have a legitimate business interest in processing your data, for example, when we assist you with inquiries.

The types of personal data we process

Below please find the categories of personal information about U.S. residents that we collect, sell, and/or disclose to third parties or service providers for a business purpose:

Activity	Types of personal data we collect (for illustration purposes)	Purpose(s)	Legal basis	Do we sell and/or disclose for business purposes
General business operations	Name, contact details, identifiers (e.g., real name, postal address, unique identifiers, online identifier, IP address and email address) and other information necessary for conducting business with you or your organization.	As part of general VELUX business operations, we collect personal data about individuals, customers, suppliers (including third‑party service providers) and other stakeholders. We may also use your data for testing systems.	Based on general business operations being a legitimate interest and necessary in ensuring business handling throughout VELUX, within what is reasonably expected by you.	Do we disclose for business purposes? YES Do we sell? No
Assisting with enquiries	Name, email address, phone numbers, conversations, other contact details, photos, floor plans of your house when you provide this to VELUX.	You may choose to provide us with personal data when you contact us by phone, email, post, our chatbot, or by using our digital platforms. This enables us to respond to information requests, arrange measures and quotes, schedule service, or manage guarantee claims. Information may be disclosed to VELUX A/S or other VELUX sales companies, and relevant independent installers or dealers to assist with your enquiry. Calls may be recorded for training. We may ask for your feedback through surveys after the interaction.	Legitimate interest in ensuring communication with you and throughout the organization, within what is reasonably expected by you.	Do we disclose for business purposes? YES Do we sell? No
Sales (including web sales) and order fulfilment	Name, contact details, payment and credit card details, credit information, credit check and customer records (paper and electronic, such as name, address, telephone number, credit card number and debit card number) etc.	We collect data to conduct business with you or your organization, analyze web shop activity and purchase history for a personalized browsing experience, process and fulfill orders, arrange delivery, provide customer service (including returns), and perform credit checks. We may disclose information to dealers, independent installers, and logistics partners.	Necessary for the performance of a contract to which you or your organization is a party.	Do we disclose for business purposes? YES Do we sell? No
Campaigns	Name, contact details, commercial information (products or services purchased, obtained, or considered) etc.	Execution of campaigns (e.g., reward programs, cashback, sweepstakes). Acceptance of terms and conditions is collected before entry.	Necessary for the performance of a contract to which you or your organization is a party.	Do we disclose for business purposes? YES Do we sell? Yes
Product claims	Name, contact details, etc.	Facilitate service under the VELUX guarantee or by paid service, including phone/email support and site visits. We may share data with partners to assist and may ask for survey feedback after the interaction.	Necessary for the performance of a contract to which you or your organization is a party.	Do we disclose for business purposes? YES Do we sell? No
Business development and VELUX apps	Personal data collected on our digital platforms and in VELUX apps, including audio/visual data (e.g., photos and videos).	Enhance consumer insights and drive relevant communication and offers across touchpoints; product and service development.	Legitimate interest in improving the effectiveness of our business operations, within what is reasonably expected by you.	Do we disclose for business purposes? YES Do we sell? No
Marketing	Contact information, browsing history, sales and subscription information, unique identifiers (cookie or device IDs), and related interaction data. This may include information collected in connection with VELUX A/S, our websites, mobile applications, products, and services.	Based on consent or legitimate interest, we inform you of VELUX operations, products, and services and tailor marketing to your preferences and profile (including optimizing content and delivery, and tailoring across our channels and third‑party channels such as social media, search, and marketplaces). You may unsubscribe at any time. Some activities are conducted as joint controllers with other VELUX companies.	Consent where legally required for newsletters, or legitimate interest within reasonable expectations. Personalization may rely on legitimate interest in profiling to improve impact.	Do we disclose for business purposes? YES Do we sell? Yes
Your participation in photos, video, testimonial and campaigns	If you have agreed and sent a photo to us or if your photo is taken by a photographer hired by us.	We use photos, testimonials, etc., as described in your signed contract. Internal marketing may rely on legitimate interest.	Performance of a contract with compensation; legitimate interest for internal marketing within reasonable expectations.	Do we disclose for business purposes? YES Do we sell? YES
Website visitors, customer surveys and market research	Personal data from digital platforms or customers as part of surveys, including usage data (e.g., browsing history, search history, interaction with websites, apps, or ads).	To improve products and services we may contact you with surveys and process data under consent or legitimate interests. Marketing‑purpose surveys use data only with your consent.	Legitimate interest in improving products and services, within reasonable expectations.	Do we disclose for business purposes? YES Do we sell? No
Recruitment and employment contracts	Name, contact details, work history, educational diplomas, relevant record checks, information about professional interests, etc.	Collected from the person, recruiters, references, and public sources to inform employment decisions. See VELUX Recruitment Notice in WorkDay for more information.	Legitimate interest in achieving a successful candidate‑company match, within reasonable expectations.	Do we disclose for business purposes? YES Do we sell? No
Compliance including anti‑corruption, Whistleblower hotline and sanctions check	All types of personal information.	To comply with the law, court or authority decisions and to disclose information to relevant public authorities as required or permitted by law.	Necessary for compliance with a legal obligation.	Do we disclose for business purposes? YES Do we sell? No

How we collect your personal data

Directly from you

In most cases, personal data is collected directly from you or generated as part of the use of our services, products, and channels. We collect personal data you provide to us when you request products, services, or information from us, register with us, participate in public forums, use a chatbot or other activities on our digital platforms and apps, respond to customer surveys, or otherwise interact with us. We collect information through various technologies, e.g., cookies. For cookies, see our Cookie Policy.

From our business partners

In some cases, we collect your personal data from our business partners when they need our assistance to provide you with the best possible service.

From your public website

In some cases, we collect your personal data on your company websites when we want to offer you our services.

Links to other websites

This website contains links to other websites (such as Facebook, Google+, YouTube, and Pinterest) to which this Privacy Notice does not apply. We do not endorse other websites or their content. Please read the privacy policies of each website you visit.

How long we keep your personal data

We will only keep your personal data for as long as it is necessary for the purposes described in this Privacy Notice. Retention periods vary according to the type of information and why we have it.

Examples of retention time:

Call recordings will be stored for a period of 90 days.
Contact details with contractual terms will be stored while your account is active or for as long as needed to provide services to you.
Photos and testimonials are stored as necessary and as described in a contract.
Personal data are kept until the end of a recruitment process or until consent withdrawal (if consent was given for future recruitments).
For compliance (e.g., anti‑corruption), we keep data according to applicable laws.

We will also retain your personal data where advisable to safeguard or improve our legal position (e.g., statutes of limitations, security, litigation, or regulatory investigations).

Who we share your personal data with

We share personal information within the VELUX Group where necessary to fulfill the processing purpose. All entities in the VELUX Group have entered into applicable intercompany data processing and/or joint controller agreements to maintain a consistent security level and divide roles and responsibilities. If two or more companies act as joint controllers, each independently will:

Be the first contact for you.
Fulfil the information obligations in this Privacy Notice.
Enable you to exercise your rights.
Handle privacy breach notices and complaints.

We may also share your personal data with selected third parties, including but not limited to:

Business partners, suppliers, and sub‑contractors (e.g., logistics providers, outsourced customer services).
Technology providers (analytics, tracking, targeting/re‑targeting, search), and companies providing website support and hosting.
Advertisers and advertising networks (with consent) to select and serve relevant adverts.
Social networking sites (e.g., Facebook, Instagram, Google) when processing for marketing purposes based on consent.
Other parties to ensure safety and security, protect our rights and property, comply with legal processes, or when disclosure is required by law.
VELUX Group companies or third parties operating digital platforms and tools on our behalf (e.g., points programs, cashback, sweepstakes, training).

Transfer to countries outside of the U.S.

As a global organisation, we may transfer personal data within the VELUX Group worldwide (inside or outside the U.S.) for the purposes stated above and in accordance with applicable laws, as well as to sub‑contractors (data processors) for storage and service purposes. Your personal data will not be disclosed outside the VELUX Group unless permitted or required by law and, where necessary, subject to appropriate written assurances to ensure adequate protection.

Data security

The security, integrity, and confidentiality of your personal data are important to us. We have implemented technical, administrative, and physical measures designed to protect your personal data from unauthorized access, disclosure, use, and modification. We periodically review our procedures. No security measures are perfect or impenetrable.

Your privacy rights

Certain U.S. data privacy laws grant you the rights below (subject to state and federal law and specific context).

Your rights	Elaboration
Right to Opt‑Out	You may opt‑out of our sale of your personal information. Exercise online by visiting our Cookie Policy for global privacy control options or by going to our Cookie Settings page and deleting/preventing cookies.
Right to Opt‑In	We do not sell personal information about residents known to be under 16 without verifiable parental consent.
Right of deletion	You may request deletion of personal information we collected about you, subject to exemptions.
Right to know: Right to a copy	You may request a copy of the specific pieces of personal information collected in the prior 12 months, delivered free of charge by mail or electronically in a portable, readily useable format.
Right to know: Information	You may request information about how we handled your personal information in the prior 12 months, including categories of personal information, sources, business/commercial purposes, categories of third parties with whom we shared or to whom we sold information, and the specific categories sold to each.
Right to non‑discrimination	We will not discriminate against residents who exercise privacy rights. Different pricing/quality is only permitted where reasonably related to the value provided by the data.

If you have questions about the personal data we process or retain about you, or if you want to exercise your rights, contact vcustomer.service@velux.com.

We will respond to your request to exercise any of your rights within ten business days.

If you consider that we have failed to resolve the complaint satisfactorily, you may file a complaint with the Federal Trade Commission or your relevant state attorneys.

Changes to this VELUX Privacy Notice

From time to time, we may change this Privacy Notice to accommodate the latest technologies, industry practices, regulatory requirements, or for other purposes. We will post the most recent version on our digital platforms. Please read the Privacy Notice regularly.

This Privacy Notice was last updated: 15‑01‑2026

Privacy statement