VeriTrace Intelligence Limited ("VeriTrace", "we", "us", "our") is registered in England and Wales under company number 17305629, with registered office at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. We are registered with the Information Commissioner's Office, registration reference C1977686.
This notice explains how we collect, use, and protect personal data when you visit our website, contact us, or engage us for services.
1. Who we are
We are the data controller for personal data processed through this website and in the course of our OSINT, due diligence, and fraud intelligence services.
Name, email address, and any information you provide when submitting our contact form
Technical data (IP address, browser type, device information) collected automatically — see our Cookie Notice
From clients and engagements:
Contact and billing details
Information provided as part of instructing us for a report or investigation
Information we lawfully gather from open sources in the course of delivering a commissioned report (governed separately by the engagement's Terms of Business)
3. How we use your data
We use personal data to:
Respond to enquiries submitted through this website
Deliver, invoice, and administer client engagements
Meet our legal, regulatory, and professional obligations (including anti-money laundering and insurance requirements)
Maintain records as required by UK company and tax law
4. Our lawful basis
Contact form enquiries: legitimate interest in responding to you, or consent where you've explicitly opted in
Client engagements: performance of a contract, and legal obligation (e.g. record-keeping)
Investigative work involving third parties: legitimate interest in conducting lawful due diligence and fraud intelligence, balanced against the individual's rights — see Section 5
5. Third-party subjects of investigation
Where a report we produce concerns a person who is not our client, we process their data on the basis of legitimate interest. We do not use covert surveillance, pretexting, or unauthorised device access. Where required under UK GDPR Article 14, and where doing so would not compromise the purpose or safety of an investigation, we take reasonable steps to inform the subject of processing, or rely on the exemptions available under the Data Protection Act 2018 (Schedule 2) for crime and fraud prevention purposes.
6. Who we share data with
We do not sell personal data. We may share data with:
Our professional indemnity insurer, where required for a claim
Regulatory or law enforcement bodies, where legally required
IT and hosting providers who process data on our behalf under contract (Squarespace, Proton Mail)
7. International transfers
Our website is hosted by Squarespace, Inc., and our email is hosted by Proton (Switzerland). Both operate under recognised UK/EU data protection safeguards.
8. How long we keep data
Website enquiry data: 12 months, unless it becomes a client engagement
Client and engagement records: 6 years from the end of the engagement, in line with our professional and tax obligations
Investigation source material: retained per engagement, per our internal retention schedule
9. Your rights
Under UK GDPR you have the right to: access your data, request correction, request erasure (subject to our legal retention obligations), object to processing, and request restriction. Contact enquiries@veritraceintelligence.com to exercise these rights.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
10. Changes to this notice
We may update this notice from time to time. The date above shows the last revision.
