Privacy Policy

1. Who We Are

This Privacy Policy explains how Verafy Ltd (Company No. 17310891), registered at 66 Paul Street, London, EC2A 4NA, collects, uses, and protects your personal data when you use the Verafy platform at verafy.uk.

Verafy Ltd is the data controller for personal data collected through this platform. We are committed to protecting your privacy in accordance with the UK GDPR and the Data Protection Act 2018.

2. What Data We Collect

We collect the following personal data when you use Verafy:

Account Data

• Your name and email address (provided at registration)
• Password (stored as a secure hash — we never store plain text passwords)
• Stripe customer ID (for payment processing)

Usage Data

• Companies and directors you search for on the platform
• CRM leads and notes you create
• Activity logs within the platform

Technical Data

• IP address and browser type
• Pages visited and time spent on the platform

Third-Party Public Data

Verafy displays publicly available data about companies and directors sourced from Companies House, The London Gazette, and BAILII. This data is not collected from individuals directly — it is sourced from public registers.

3. How We Use Your Data

We use your personal data to:

• Create and manage your Verafy account
• Process your subscription payments via Stripe
• Provide access to the platform and its features
• Send you account-related emails (receipts, password resets)
• Improve the platform based on usage patterns
• Comply with legal obligations

We do not sell your personal data to any third party. We do not use your data for advertising purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract — processing necessary to provide the service you have subscribed to
• Legitimate interests — improving our platform and preventing fraud
• Legal obligation — complying with applicable UK law
• Consent — where you have explicitly opted in to communications

5. Data Sharing

We share your data only with the following trusted third parties, strictly as necessary:

• Stripe — payment processing (their privacy policy applies to payment data)
• Render — cloud hosting of our backend infrastructure
• Vercel — hosting of our frontend application
• Companies House API — we query public data on your behalf

All third-party processors are contractually bound to protect your data and may not use it for their own purposes.

6. Data Retention

We retain your personal data for as long as your account is active. Specifically:

• Account data is retained until you delete your account
• CRM and activity data is retained until you delete it or close your account
• Payment records are retained for 7 years as required by HMRC

When you close your account, your personal data is deleted within 30 days, except where retention is required by law.

7. Your Rights

Under UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Portability — request your data in a portable format
• Objection — object to processing based on legitimate interests
• Restriction — request we restrict processing of your data

To exercise any of these rights, email us at support@verafy.uk. We will respond within 30 days.

8. Cookies

Verafy uses minimal cookies strictly necessary for the platform to function, including authentication tokens stored in your browser's local storage. We do not use advertising or tracking cookies.

9. Security

We take the security of your data seriously. Measures in place include:

• All data transmitted over HTTPS with TLS encryption
• Passwords hashed using bcrypt — never stored in plain text
• JWT authentication with 7-day expiry
• PostgreSQL database hosted on secured cloud infrastructure

10. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

11. Contact Us

For any privacy-related queries, contact our data controller directly: