Privacy notice

Who we are

Veridon Consulting Ltd is the controller of personal information described in this notice. You can contact us at info@veridonconsulting.co.uk or write to our registered office at 15 Barford Drive, Wilmslow, England, SK9 2GB.

Information we collect

When you contact us, we may collect your name, work contact details, organisation, the service you are interested in and the information you choose to provide about your enquiry. If you become a client, we may collect further identity, instruction, correspondence, billing and matter information under our client terms.

For proportionate B2B business development, we may also collect and use limited professional information about business decision-makers and their organisations. This may include:

• your name, professional title, business function and employer or business affiliation;
• business contact details or a published business contact route, such as a work email address, office telephone number or business contact form;
• the organisation's name, legal or trading identity, location, sector, services, size indicators and subscriber classification;
• benign public facts relevant to a possible business conversation, such as published payroll or business-advisory services, a public recruitment notice or another current operating event; and
• the source URL, verification date, contact history, response status and any objection, opt-out or suppression instruction.

We do not intentionally collect or use special category data, criminal-offence data, private information or adverse personal information for B2B prospecting or personalisation. If irrelevant sensitive information is encountered incidentally, we do not use it for that purpose and will minimise or delete it as appropriate.

Where prospect information comes from

We may obtain professional contact and organisation information from publicly accessible or professional sources, including:

• the organisation's own website, team pages, contact pages, careers pages and applicant-tracking pages;
• Companies House, official registers, regulatory directories and other public authority sources;
• public professional profiles used in a business context;
• official announcements, public procurement material, employer-authored posts and sector or local-authority sources; and
• reputable business, trade, local-news or vacancy sources used to verify a current business fact.

For our current B2B prospecting activities, Veridon does not use purchased marketing lists or third-party contact-enrichment providers. Where practicable, the first B2B message identifies the specific public source or source category used for the recipient's professional contact information.

Please limit sensitive information in an initial enquiry

Workplace matters can involve health, ethnicity, religion, trade-union membership, alleged wrongdoing or other sensitive information. Please give only the minimum needed for us to understand the nature and urgency of your enquiry. We will request further information securely if it is necessary.

Why we use personal information

We use enquiry information to respond, assess whether we can assist, check scope and conflicts, prepare a proposal, prevent misuse of the website and keep an appropriate record of communications. Our lawful basis is normally taking steps at your request before a contract and our legitimate interests in operating, protecting and developing our consultancy. Other bases or conditions may apply to client work and will depend on the instruction.

For B2B business development and public-source prospecting, we use limited professional information to:

• identify organisations and business decision-makers for whom a bounded Veridon service or referral route may be relevant;
• verify the correct legal entity, current business fact, decision-maker and legitimate contact route before any approach;
• prepare and send a targeted initial B2B message and, if there is no human response, no more than one short follow-up;
• respond to an expression of interest, provide requested information and evaluate whether a business conversation should continue;
• avoid duplicate, irrelevant or inappropriate contact, maintain governance and evidential records, and protect Veridon's legal and reputational interests; and
• record and honour objections, opt-outs and suppression instructions.

Lawful basis and our legitimate interests

Where named professional contact data is used for proportionate B2B prospecting, Veridon relies on Article 6(1)(f) UK GDPR: legitimate interests. Those interests are developing Veridon's consultancy through relevant one-to-one business conversations, creating referral relationships with independent professional firms, offering bounded support to suitable employers, avoiding untargeted marketing, and maintaining reliable suppression and audit records.

Before relying on legitimate interests, Veridon applies a purpose, necessity and balancing assessment. The current manual controls limit contact to business decision-makers, use minimal professional data and benign public facts, prohibit sensitive-data personalisation and tracking, permit a maximum of two messages, require human review, and provide an easy, durable opt-out. If a record-level check fails or remains unknown, no message is sent.

PECR and electronic marketing

The Privacy and Electronic Communications Regulations 2003 (PECR) apply separately from the UK GDPR. For corporate subscribers, such as limited companies and limited liability partnerships, PECR does not generally require consent for B2B marketing by electronic mail, but Veridon must identify itself and provide a valid way to opt out.

Individual subscribers include individuals, sole traders and some partnerships. Veridon does not send unsolicited electronic marketing to an individual subscriber, or where subscriber status is uncertain, unless valid consent or every condition of an applicable PECR soft opt-in has been separately established and recorded. Public availability of an email address or professional profile is not consent.

Who receives personal information

Information may be handled by service providers supporting website hosting, secure email delivery, Microsoft 365 communications, professional administration and, where used under appropriate data-protection arrangements, AI-assisted research or drafting. We may also share information where required by law, to establish or defend legal rights, or with an authorised professional when you instruct or authorise us to do so. We do not sell personal information.

A professional firm that introduces an employer does not automatically receive information about the employer's instruction. After an introduction, Veridon discloses information to the referring firm only with appropriate authority or where another lawful requirement permits it.

International transfers

Some technology providers may process personal information outside the United Kingdom. Where a restricted international transfer takes place, Veridon uses an applicable lawful transfer mechanism where required, such as UK adequacy regulations or appropriate contractual safeguards, together with proportionate technical and organisational protections. Further information about the safeguards used for a particular transfer is available on request where applicable.

AI-assisted research and drafting

Veridon may use AI-assisted tools to help locate, organise or summarise public professional information, resolve entities, identify duplicates and prepare draft research notes or communications. A human reviews the evidence, decides whether any record passes the applicable gates, approves the wording and controls any contact. Veridon does not use AI to make solely automated decisions about prospects that produce legal or similarly significant effects. AI-generated content cannot override a failed or unknown compliance, privacy, suppression, entity, signal or purchasability control.

How long we keep personal information

Unsuccessful or unprogressed enquiries are normally retained for up to 12 months so we can respond to follow-up questions, maintain conflict and communication records, and protect our legitimate interests. Client records may be retained for longer under the applicable client terms, legal obligations and retention schedule.

B2B prospecting records that do not develop into a business relationship are normally retained for up to 12 months from the last verified research decision or authorised contact, and are reviewed sooner where the business fact, role or purpose has become stale. If a conversation, referral relationship or instruction develops, relevant records are retained under the applicable business, client or legal retention period. We delete or anonymise information when it is no longer required.

If you object or opt out, we retain only the minimum suppression information needed to ensure that we do not contact you again for the covered direct-marketing purpose. This may include your name, business contact route, organisation, the scope and date of the objection and its source. We retain suppression information only for the purpose of respecting the relevant objection or opt-out and preventing future direct marketing to that contact route. We review suppression records periodically and keep only the minimum information necessary for that purpose.

When we provide privacy information

If we collect personal information directly from you, we provide privacy information when it is collected. If we obtain professional contact data from another or publicly accessible source, we provide this information within a reasonable period and no later than one month after obtaining it. If we communicate with you sooner, we provide it no later than the first communication; if we disclose the data sooner, we provide it no later than the first disclosure. A first B2B email includes a short source-transparency statement and a link to this notice.

Your rights

Depending on the circumstances, you may have rights of access, correction, erasure, restriction, objection and data portability. Where processing relies on consent, you may withdraw it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Security and updates

We use proportionate technical and organisational measures to protect information. No internet transmission is completely secure. We may update this notice when our services, suppliers or processing activities change; the date above shows the current version. We will bring a material new use of personal information to the attention of affected individuals before beginning that use where required.

Contact

For privacy questions, rights requests or objections, email info@veridonconsulting.co.uk or write to Veridon Consulting Ltd, 15 Barford Drive, Wilmslow, England, SK9 2GB. You may complain to the Information Commissioner's Office at https://ico.org.uk.