Privacy policy
What we hold about you, why we hold it, who handles it for us and how to get it changed or deleted. We keep as little as the service needs, we do not sell it, and we do not use advertising or tracking cookies.
Who we are
Veracent Intelligence Ltd is the controller of the personal data described here. We are a private limited company registered in England and Wales, company number 17475323, with our registered office at 80 Scraptoft Lane, Leicester, England, LE5 1HW.
For anything in this policy, email info@veracentintelligence.co.uk or write to the registered office.
What we collect and why
If you create an account
Your email address and password, and optionally your name, your firm and the kind of work you do. We also keep the firms you add to your watchlist. We use these to run your account, show you your dashboard and email you about your account. Passwords are stored by our authentication provider in a form we cannot read.
Lawful basis: performing our agreement with you when you sign up.
If you send an enquiry, commission a report or order a file
Your name, email address, your firm, the firm or institution you want covered, and anything you write in the message. We use these to reply, to scope and deliver the work, to send the alerts that come with a file, and to invoice it. If you ask to be told when reports publish, we use your email address for that and nothing else.
If you order a safeguarding due-diligence file, the institutions you name and any figures you give us for the concentration worksheet are business information. We keep them confidential and use them only to prepare your file.
Lawful basis: taking steps at your request before entering into a contract, and performing it. Invoices and payment records are kept because the law requires it.
If you pay us
Card payments are taken by Stripe. We never see or store your card number. Stripe gives us your name, email address, billing address and, if you give it, your business name and VAT or tax number, so that we can issue a proper invoice.
If you are a business contact we approach
We contact people at regulated firms and the firms that advise them, such as payment and e-money firms, compliance consultancies, audit firms and financial advice firms, about our services. We use business contact details only: your name, job title, employer and work email address. We take them from your firm’s own website, from your public professional profile (for example on LinkedIn) or, where your firm publishes no address for you, a work address in the format your firm uses, which we may confirm through a business email directory such as Hunter.io. Our first message to you says where we found your details.
We record that we contacted you and what you told us, including on a call, so that we follow up only where it is relevant and never contact you twice or after you have asked us not to.
Lawful basis: our legitimate interest in telling businesses about a service relevant to their work. Every message tells you how to opt out. If you do, we keep your address on a short do-not-contact list so that we never contact you again.
If you are named in one of our reports
Our reports describe regulated firms. They can include the names and roles of directors, senior managers and people with significant control, exactly as these appear on public registers such as the Financial Conduct Authority Register and Companies House, or in the firm’s own published documents. Every such statement quotes and links to its source.
Lawful basis: our legitimate interest, and the public interest, in accurate and checkable information about regulated firms. We publish nothing about anyone that is not already in a public source, and nothing about their private lives. If you think something about you is wrong or should not be there, write to corrections@veracentintelligence.co.uk.
When you visit the site
Our hosting provider records standard technical information about each request, such as your IP address, browser type and the page requested. This is used to keep the site running and secure, and is deleted on the provider’s normal schedule.
Cookies
We use only the cookies needed to keep you signed in. They are set when you sign in and do nothing else. There are no advertising or tracking cookies, so there is no cookie banner. Strictly necessary cookies do not need consent.
We count visits to the site with Vercel Web Analytics, so we can see which pages are read. It sets no cookies, stores nothing on your device, and does not identify you: it records the page, the referring site, and your country, browser and device type, in aggregate.
Who handles your data for us
We use a small number of service providers. Each acts only on our instructions, under a contract that requires it to keep your data secure.
- Supabase: our database and sign-in system. Data is stored in London.
- Vercel: hosts the website and counts page visits without cookies. Requests may be handled on servers outside the UK.
- Resend: sends our emails, such as sign-in links and replies to enquiries, from servers in Ireland.
- Anthropic: provides the AI model we use to read public source documents when we write a report. It does not receive your account or enquiry details.
- Our email provider: hosts our mailbox, including messages we send to and receive from business contacts.
- Stripe: takes card payments. Stripe is also a controller of payment data in its own right, under its own privacy policy.
Where a provider handles data outside the UK, the transfer is covered by a UK adequacy decision or by safeguards the law recognises, such as the UK International Data Transfer Addendum. We also disclose data where the law requires it, for example to HM Revenue & Customs or in response to a court order. We never sell or rent personal data.
How long we keep it
- Account details: for as long as your account is open, and deleted within 30 days of your asking us to close it.
- Enquiries that do not lead to work: two years from our last exchange.
- Invoices, payment records and the correspondence behind them: six years after the end of the financial year they relate to, as tax law requires.
- Business contacts we approach: two years from our last contact, except the do-not-contact list, which is kept for as long as we contact anyone.
- Report contents: for as long as the report is published, and in our corrections record after that.
Your rights
You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, restrict how we use it, or give it to you in a portable format. You can object at any time to our using it on the basis of legitimate interests, including to being contacted by us. Email info@veracentintelligence.co.uk. We will reply within one month, and there is no charge.
If you are unhappy with how we have handled your data, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office.
Changes
If we change how we use personal data, we will update this page and change the date at the top. If a change affects account holders in a way that matters, we will email them first.