1. Who we are
Verivello Ltd ("Verivello", "we", "us", "our") is a company incorporated in England and Wales (Company Number 17175225), with its registered office at 128 City Road, London, EC1V 2NX.
We are the data controller for personal data we collect through this website, when you contact us, and when you subscribe to a paid plan. We are registered with the Information Commissioner's Office (ICO) under registration number ZC138208.
This policy explains how we collect, use, store and share personal data, and explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Last updated: 17 July 2026.
2. What personal data we collect
We collect the information needed to provide the service, manage accounts and subscriptions, take payments and respond to enquiries. Depending on how you interact with us, we may collect:
- Identity data: your name
- Contact data: your email address
- Phone data: your mobile number, where you provide it to verify your account by SMS
- Business data: your company name, if you choose to provide it
- Account data: the email address and password (stored only as a secure hash) you use to sign in, and your plan (Free, Pro or Premium)
- Usage data: the companies and directors you search for and view, and Verivello AI questions you ask, used to provide and improve the service
- Subscription data: your plan, billing status and renewal dates
- Transaction data: payment status, payment reference, amount and order date. Card details are processed by Stripe and are not stored by us
- Communications data: emails, contact form messages and any information you send to us
- Alerts data: if you sign up for free company alerts (for example by clicking “Watch this company” or asking Verivello to set an alert), the email address you give us and the companies you ask to be notified about, so we can email you when they file or change something at Companies House. You can unsubscribe at any time from the link in those emails
- Technical data: IP address, browser type, device information and pages visited, where captured by our website or hosting logs
We do not ask customers to provide special category data. Some public-source checks may involve information about individuals in public roles, sanctions, disqualification, court, tribunal or regulator records where this is relevant and available from public sources.
3. How we collect your data
We collect data through:
- Direct interactions — when you create an account, subscribe, sign up for free company alerts, complete a contact form, email us or otherwise communicate with us
- Automated technologies — website and server logs created when you visit our website
- Third parties — for example Stripe, which may provide us with payment confirmation, payment reference and customer contact details following a transaction
- Public sources — public registers and records used by Verivello
4. Why we process your data & our lawful basis
Under UK GDPR, we must have a lawful basis for each purpose for which we process personal data. Our main purposes and lawful bases are:
- Providing the service and managing your account and subscription — lawful basis: performance of a contract (Article 6(1)(b) UK GDPR)
- Providing access to Verivello, and sending service or billing updates — lawful basis: performance of a contract
- Responding to enquiries — lawful basis: legitimate interests (Article 6(1)(f)); our legitimate interest is responding to reasonable business communications
- Taking subscription payments through Stripe — lawful basis: performance of a contract
- Keeping tax, accounting and business records — lawful basis: legal obligation (Article 6(1)(c)) and, where relevant, our legitimate interests in record keeping and dispute management
- Maintaining website security, fraud prevention and misuse prevention — lawful basis: legitimate interests
- Complying with law, regulators or court orders — lawful basis: legal obligation
We do not use your personal data for automated decision-making or profiling. We do not sell your personal data, and we do not send marketing emails unless you have chosen to receive them.
5. Public register data used in the service
Verivello is not a credit reference agency. We present factual information from UK public registers and do not provide credit scores, ratings or creditworthiness assessments.
The service may include information about UK companies and individuals connected with those companies, such as directors, company secretaries and persons with significant control (PSCs). This information is taken from public registers and other public sources, such as Companies House, the Financial Conduct Authority (FCA), the Information Commissioner's Office (ICO), the Gazette, the Insolvency Service, HM Courts & Tribunals Service and other relevant public sources.
Company contact details and published registration numbers. The service also shows a company's real-world contact details — website, telephone number, email address and postal address — together with any registration numbers the company itself publishes, such as its VAT number, ICO registration, trademark or professional-accreditation numbers. This information is gathered from the company's own publicly-accessible website (for example its contact, footer and legal pages) using automated retrieval of pages the company has made public. We do not purchase this data from third-party data brokers or directories. Any VAT number found is validated against HM Revenue & Customs' public VAT-checking service, and any ICO registration number against the ICO's public register, before it is displayed. Where such details relate to an identifiable individual (for example a personal email address or a sole trader's contact details), we process them on the basis of legitimate interests as described below.
Some source data is published under the Open Government Licence v3.0; other sources may have their own terms or access conditions. We use those sources only for providing factual public-source company information and reports to users.
Our lawful basis for processing public-register personal data is usually legitimate interests (Article 6(1)(f) UK GDPR): our customers' legitimate interest in carrying out lawful business checks, due diligence and background research, and our legitimate interest in providing those reports. We balance those interests against the rights and freedoms of the individuals concerned, taking into account that the relevant information has already been made public for corporate transparency, regulatory or public-record purposes.
We do not alter official register data. Where we add commentary, analyst notes or summaries, those are clearly presented as Verivello observations based on the sources reviewed. Customers are responsible for ensuring their own use of report data is lawful and proportionate.
6. Who we share your data with
We do not sell, rent or trade your personal data. We share data only where necessary, including with:
- Stripe — our payment processor. Stripe processes payment data under its own privacy policy and security arrangements
- AI providers — we use trusted third-party AI/large-language-model service providers to generate Verivello's responses. The question you ask, together with the public-register data needed to answer it, is processed by one or more of these providers to produce a response, under their own privacy and security terms. Some of these providers may process data outside the UK (see the International transfers section below). We can tell you which providers we currently use on request
- Twilio — our SMS provider, used to send phone verification codes where you provide a phone number
- Our website and hosting providers — to host the website, process forms and store server logs
- Email and communication providers — to send account, billing and service updates and to respond to enquiries
- Professional advisers — such as accountants, solicitors or auditors, where reasonably necessary and under confidentiality obligations
- Public authorities, regulators or law enforcement — where required by law, court order, regulation or a lawful request
7. International transfers
Some service providers — including Stripe, our AI providers and other technology suppliers — may process personal data outside the UK. Where this happens, they are responsible for using valid transfer mechanisms and safeguards required by UK data protection law, such as adequacy regulations, the UK International Data Transfer Agreement/Addendum or Standard Contractual Clauses where applicable. Where your questions are processed by an AI provider located outside the UK, your question and the related public-register data are transferred to that provider only to generate your response.
We do not intentionally publish or transfer customer order data outside the UK except where needed for payment processing, hosting, email delivery or other service providers used to operate our business.
8. How long we keep your data
- Account data — retained for the life of your account and for a reasonable period after closure
- Subscription and transaction records — retained for up to 7 years for tax, accounting, audit and dispute-handling purposes
- Contact form enquiries — retained for up to 12 months, unless the enquiry becomes part of an order or ongoing customer relationship
- Web server logs — retained for up to 90 days for security, fraud prevention and diagnostic purposes, unless longer retention is needed to investigate misuse
- Chat conversations — retained while your account is active so you can revisit them; removed when you delete a conversation or close your account, subject to our billing and transaction records. If you are signed in, Verivello may also save short details you choose to tell it (such as your preferences or context) to personalise future replies; you can view or clear these at any time
When data is no longer needed, we delete it, anonymise it or store it in a form that no longer identifies you.
9. Your rights under UK GDPR
You have the following rights in relation to personal data we hold about you. To exercise any of these rights, please email info@verivello.com. We will normally respond within one calendar month.
These rights are not absolute and may be limited by applicable law. For example, we may need to keep certain records for tax, accounting, legal or dispute-handling reasons.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concerns first, but you are not required to contact us before contacting the ICO.
10. Cookies
This website uses only cookies and similar technologies that are needed for core website functions, payment processing, security or form handling. We do not use advertising, retargeting or profiling cookies.
Essential cookies may include session cookies used for forms and security, and cookies set by Stripe during payment processing. Stripe may also use cookies or similar technologies for fraud prevention and secure payment processing.
Because we use cookies only where they are strictly necessary or otherwise permitted for these purposes, we do not currently display a cookie consent banner. If you are unsure whether cookies are being set, you can check your browser settings at any time. If we add analytics, advertising or non-essential cookies in future, we will update this policy and request consent where required.
11. Children
Our services are intended for adults, businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have received personal data from a child, please contact us at info@verivello.com and we will take appropriate steps to delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, providers, practices or applicable law. When we make changes, we will update the "Last updated" date at the top of this page.
13. How to contact us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle personal data, please contact us:
- Email: info@verivello.com
- Post: Verivello Ltd, 128 City Road, London, EC1V 2NX
- ICO registration: ZC138208
You can also contact the ICO: ico.org.uk.
Where our data comes from. Everything Verivello shows is drawn from UK public registers and companies' own public websites — never from private or purchased personal-data sets. Company contact details, VAT, ICO and trademark numbers are read from each company's own public website (and validated with HMRC/the ICO where applicable). See the full list of sources on our Data Sources page. If you are an individual and would like a company's website-sourced contact details removed from your results, email info@verivello.com and we will review it.