1. Who we are
Verivello Ltd ("Verivello", "we", "us", "our") is a company incorporated in England and Wales (Company Number 17175225), with its registered office at 128 City Road, London, EC1V 2NX.
We are the data controller for personal data we collect through this website, when you contact us, and when you subscribe to a paid plan. We are registered with the Information Commissioner's Office (ICO) under registration number ZC138208.
This policy explains how we collect, use, store and share personal data, and explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Last updated: 1 June 2026.
2. What personal data we collect
We collect the information needed to provide the service, manage accounts and subscriptions, take payments and respond to enquiries. Depending on how you interact with us, we may collect:
- Identity data: your name
- Contact data: your email address
- Business data: your company name, if you choose to provide it
- Account data: the email address and password (stored only as a secure hash) you use to sign in, and your plan (Free or Premium)
- Usage data: the companies and directors you search for and view, and Vera AI questions you ask, used to provide and improve the service
- Subscription data: your plan, billing status and renewal dates
- Transaction data: payment status, payment reference, amount and order date. Card details are processed by Stripe and are not stored by us
- Communications data: emails, contact form messages and any information you send to us
- Technical data: IP address, browser type, device information and pages visited, where captured by our website or hosting logs
We do not ask customers to provide special category data. Some public-source checks may involve information about individuals in public roles, sanctions, disqualification, court, tribunal or regulator records where this is relevant and available from public sources.
3. How we collect your data
We collect data through:
- Direct interactions — when you create an account, subscribe, complete a contact form, email us or otherwise communicate with us
- Automated technologies — website and server logs created when you visit our website
- Third parties — for example Stripe, which may provide us with payment confirmation, payment reference and customer contact details following a transaction
- Public sources — public registers and records used by Vera
4. Why we process your data & our lawful basis
Under UK GDPR, we must have a lawful basis for each purpose for which we process personal data. Our main purposes and lawful bases are:
- Providing the service and managing your account and subscription — lawful basis: performance of a contract (Article 6(1)(b) UK GDPR)
- Providing access to Vera, and sending service or billing updates — lawful basis: performance of a contract
- Responding to enquiries — lawful basis: legitimate interests (Article 6(1)(f)); our legitimate interest is responding to reasonable business communications
- Taking subscription payments through Stripe — lawful basis: performance of a contract
- Keeping tax, accounting and business records — lawful basis: legal obligation (Article 6(1)(c)) and, where relevant, our legitimate interests in record keeping and dispute management
- Maintaining website security, fraud prevention and misuse prevention — lawful basis: legitimate interests
- Complying with law, regulators or court orders — lawful basis: legal obligation
We do not use your personal data for automated decision-making or profiling. We do not sell your personal data, and we do not send marketing emails unless you have chosen to receive them.
5. Public register data used in the service
Verivello is not a credit reference agency. We present factual information from UK public registers and do not provide credit scores, ratings or creditworthiness assessments.
The service may include information about UK companies and individuals connected with those companies, such as directors, company secretaries and persons with significant control (PSCs). This information is taken from public registers and other public sources, such as Companies House, the Financial Conduct Authority (FCA), the Information Commissioner's Office (ICO), the Gazette, the Insolvency Service, HM Courts & Tribunals Service and other relevant public sources.
Some source data is published under the Open Government Licence v3.0; other sources may have their own terms or access conditions. We use those sources only for providing factual public-source company information and reports to users.
Our lawful basis for processing public-register personal data is usually legitimate interests (Article 6(1)(f) UK GDPR): our customers' legitimate interest in carrying out lawful business checks, due diligence and background research, and our legitimate interest in providing those reports. We balance those interests against the rights and freedoms of the individuals concerned, taking into account that the relevant information has already been made public for corporate transparency, regulatory or public-record purposes.
We do not alter official register data. Where we add commentary, analyst notes or summaries, those are clearly presented as Verivello observations based on the sources reviewed. Customers are responsible for ensuring their own use of report data is lawful and proportionate.
6. Who we share your data with
We do not sell, rent or trade your personal data. We share data only where necessary, including with:
- Stripe — our payment processor. Stripe processes payment data under its own privacy policy and security arrangements
- Google (Gemini API) — our AI language-model provider. Questions you ask Vera (and the public-register data needed to answer them) are processed by Google to generate responses, under Google's own privacy and security arrangements
- Twilio — our SMS provider, used to send phone verification codes where you provide a phone number
- Our website and hosting providers — to host the website, process forms and store server logs
- Email and communication providers — to send account, billing and service updates and to respond to enquiries
- Professional advisers — such as accountants, solicitors or auditors, where reasonably necessary and under confidentiality obligations
- Public authorities, regulators or law enforcement — where required by law, court order, regulation or a lawful request
7. International transfers
Some service providers, including Stripe, may process personal data outside the UK. Where this happens, they are responsible for using valid transfer mechanisms and safeguards required by UK data protection law, such as adequacy regulations, the UK International Data Transfer Agreement/Addendum or Standard Contractual Clauses where applicable.
We do not intentionally publish or transfer customer order data outside the UK except where needed for payment processing, hosting, email delivery or other service providers used to operate our business.
8. How long we keep your data
- Account data — retained for the life of your account and for a reasonable period after closure
- Subscription and transaction records — retained for up to 7 years for tax, accounting, audit and dispute-handling purposes
- Contact form enquiries — retained for up to 12 months, unless the enquiry becomes part of an order or ongoing customer relationship
- Web server logs — retained for up to 90 days for security, fraud prevention and diagnostic purposes, unless longer retention is needed to investigate misuse
- Chat conversations — retained while your account is active so you can revisit them; removed when you delete a conversation or close your account, subject to our billing and transaction records
When data is no longer needed, we delete it, anonymise it or store it in a form that no longer identifies you.
9. Your rights under UK GDPR
You have the following rights in relation to personal data we hold about you. To exercise any of these rights, please email info@verivello.co.uk. We will normally respond within one calendar month.
These rights are not absolute and may be limited by applicable law. For example, we may need to keep certain records for tax, accounting, legal or dispute-handling reasons.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concerns first, but you are not required to contact us before contacting the ICO.
10. Cookies
This website uses only cookies and similar technologies that are needed for core website functions, payment processing, security or form handling. We do not use advertising, retargeting or profiling cookies.
Essential cookies may include session cookies used for forms and security, and cookies set by Stripe during payment processing. Stripe may also use cookies or similar technologies for fraud prevention and secure payment processing.
Because we use cookies only where they are strictly necessary or otherwise permitted for these purposes, we do not currently display a cookie consent banner. If you are unsure whether cookies are being set, you can check your browser settings at any time. If we add analytics, advertising or non-essential cookies in future, we will update this policy and request consent where required.
11. Children
Our services are intended for adults, businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have received personal data from a child, please contact us at info@verivello.co.uk and we will take appropriate steps to delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, providers, practices or applicable law. When we make changes, we will update the "Last updated" date at the top of this page.
13. How to contact us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle personal data, please contact us:
- Email: info@verivello.co.uk
- Post: Verivello Ltd, 128 City Road, London, EC1V 2NX
- ICO registration: ZC138208
You can also contact the ICO: ico.org.uk.