Privacy Notice

This Privacy Notice provides information on how Veridian Privacy ("we", "our", or "us") collects and processes your personal data when you visit our website or engage our consultancy services.

1. Important information and who we are

Veridian Privacy is the controller and responsible for your personal data. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us at info@veridianprivacy.com.

2. The data we collect about you

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data: includes first name, last name, username or similar identifier.
Contact Data: includes billing address, email address and telephone numbers.
Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location.
Usage Data: includes information about how you use our website, products and services.

3. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal obligation.

4. Purposes for which we will use your personal data

We use your data to:

Register you as a new client.
Process and deliver your consultancy services.
Manage our relationship with you.
Improve our website, services, and client relationships.

5. Disclosures of your personal data

We may share your personal data with external third parties such as service providers acting as processors, professional advisers and regulators or other authorities.

6. International transfers

Whenever we transfer your personal data out of the UK or EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the legal safeguards is implemented.

7. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These include:

Encryption of data at rest and in transit.
Strict access controls based on the principle of least privilege.
Regular security assessments and audits.

8. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. Our retention periods are:

Identity and Contact Data – 7 years after contract end
Technical and Usage Data – 2 years from collection
Marketing Preferences – Until opt-out

10. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues [ico.org.uk]. In Cyprus, the relevant authority is the Office of the Commissioner for Personal Data Protection [cy.ico.org.uk]. We would, however, appreciate the chance to deal with your concerns before you approach the regulator.

12. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. We use a consent management platform [usercentrics.com] to manage your preferences.

14. Contact details

If you have any questions about this privacy notice or our privacy practices, please contact us at info@veridianprivacy.com.