Privacy notice

Draft for the pre-launch site, last updated 2 November 2026. This notice explains how Veritasys uses personal data sent to us through this website or by email.

The controller will be Veritasys Ltd (company registration in progress), based in Wakefield, West Yorkshire. ICO registration number: [ICO registration number – pending].

Contact: leogarcia@veritasys.co.uk.

• Enquiries: your name, role, organisation, work email and message, and the services and context you choose when you tell us where you'd like to start, so we can reply and discuss working together. Lawful basis: legitimate interests in responding to business enquiries (UK GDPR Article 6(1)(f)).
• Client work: business contact details of people we work with, to deliver and invoice the work. Lawful basis: contract, or legitimate interests where the contract is with your organisation.
• Records we must keep: invoices and accounts. Lawful basis: legal obligation.

We do not use enquiries for marketing without consent, we do not sell personal data and we do not use it to train AI models.

This site sets only strictly necessary cookies: a security cookie that protects the enquiry form, and a session cookie for staff who sign in. There are no analytics, advertising or tracking cookies, so we do not ask for cookie consent.

Only service providers that help us run the business, under contract and acting on our instructions:

• Website hosting: Google Cloud. This website and its database are hosted in Google Cloud's London region (europe-west2), so enquiries sent through this site are stored in the UK.
• Email and documents: Google Workspace (Gmail and Google Drive).
• Accounts: our accountant.

Google may process some data outside the UK, for example to provide support or keep its services secure. Where any provider processes data outside the UK, we rely on UK adequacy regulations or the ICO's International Data Transfer Agreement or Addendum. [Subject to legal review: where Google Workspace stores our email and documents, and the transfer safeguards in Google's data processing terms.]

• Enquiries that do not lead to work: deleted after 12 months.
• Client engagement records: 6 years after the work ends.
• Accounting records: 6 years, as required by law.

You can ask for access to your data, or for it to be corrected, deleted or restricted, and you can object to processing based on legitimate interests. Contact leogarcia@veritasys.co.uk. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/