Privacy Notice

VERITAS BI CONSULTANCY LIMITED privacy notice
Last updated: 28/10/2026

This privacy notice tells you what to expect us to do with your personal information.

Contact details

What information we collect, use, and why

Lawful bases and data protection rights

Where we get personal information from

Veritas BI Consultancy Limited is the controller of the personal information described in this notice. This means we decide how and why your personal information is used.

We are registered with the Information Commissioner’s Office under registration number: ZC286207

Contact details

Email: Hello@veritasbiconsultancy.com

Registered office address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF

Company number: 17485618

What information we collect, use, and why

We collect or use the following information for website analytics:

Usage data (including information about how you interact with and use our website)

Website user information

We collect or use the following personal information for dealing with queries, complaints or claims:

Names and contact details

We collect or use the following personal information for direct marketing to businesses:

● Names and business contact details (including job titles and business email addresses)

● Company name

● Records of our contact with you, including opt-out requests

We collect or use the following personal information for delivering and managing client contracts:

● Names and contact details (including job titles)

● Correspondence and meeting records

● Billing and payment information

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information for website analytics are:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

We collect the name and contact details of individuals who submit our website contact form so that we can respond to their enquiry, whether it relates to our services, general questions, or feedback. This processing is necessary and proportionate: we only use the information to reply to the specific query raised, and we only use the contact details the person has chosen to give us for that purpose. People filling in the form would reasonably expect us to use their details to get back to them — this is the normal and intended outcome of using a contact form. The risk to the individual is minimal, as the data is limited to name and contact details, used only to respond to their enquiry, and not for any unrelated marketing or other purpose. We therefore consider our interest in being able to communicate with enquirers is proportionate and does not override their rights.

Our lawful bases for collecting or using personal information for direct marketing to businesses are:

● Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

o We contact individuals in HR, people and operations roles at UK businesses to tell them about our people analytics services, which may be relevant to their work. We only use business contact details obtained from business contact data providers or publicly available sources, and we only send unsolicited marketing emails to corporate business addresses. Each message identifies who we are, explains where we got the contact details and gives a simple way to opt out. People in these roles would reasonably expect occasional relevant business approaches, the data is limited to business contact information, and we delete it if there is no response within 6 months. We therefore consider our interest proportionate and that it does not override their rights.

Your right to object to direct marketing:
you can ask us to stop contacting you for marketing at any time by replying to any of our emails or emailing Hello@veritasbiconsultancy.com. We will stop straight away and keep only the minimum details needed to make sure we don’t contact you again.

Our lawful bases for collecting or using personal information for delivering and managing client contracts are:

● Contract – where our client is a sole trader or partnership, we have to collect or use your information so we can enter into or carry out a contract with you. All of your data protection rights may apply, except the right to object.

● Legitimate interests – where our client is an organisation, we use the names and contact details of the individuals we work with there. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

o We use the business contact details of individuals at our client organisations so that we can deliver the services we have agreed with that organisation, including arranging meetings, sharing deliverables and managing invoices. This processing is necessary for us to perform our contract with the organisation, and individuals in these roles would reasonably expect us to contact them about the work. The data is limited to business contact details and work correspondence, so the risk to the individual is minimal. We therefore consider our interest proportionate and that it does not override their rights.

● Legal obligation – we have to keep invoices, payment records and related correspondence for 6 years to meet UK accounting and tax requirements. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

We do not make any decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Where we get personal information from:

Directly from you

Providers of business contact data (Hunter.io), which compile business contact details from publicly available sources
Publicly available sources (LinkedIn, company websites)

How long we keep information

We only keep personal information for as long as necessary for the purposes we collected it for. Our retention periods are as follows:

Type of data: Website usage/analytics data (via Google Analytics 4)
Purpose: Understanding and improving website performance
Retention period: 14 months, then automatically deleted

Type of data: Website usage/analytics data (via Wix Analytics)
Purpose: Understanding and improving website performance
Retention period: Retained in line with Wix’s standard analytics retention settings

Type of data: Contact form submissions (name, email, message)
Purpose: Responding to enquiries
Retention period: Up to 12 months from our last contact with you, unless the enquiry develops into a client relationship

Type of data: Client contact, contract and billing records
Purpose: Delivering and managing client contracts
Retention period: Retained for the duration of the engagement and for 6 years afterwards, in line with our accounting and tax obligations

Type of data: Prospecting contact data (business contact providers and publicly available sources)
Purpose: Direct marketing and business development outreach
Retention period: Up to 6 months if there is no response or engagement, after which it is deleted; retained longer only if you respond or engage with us

Type of data: Opt-out/unsubscribe records
Purpose: Ensuring we do not re-contact individuals who have opted out
Retention period: Retained indefinitely (limited to contact details necessary to honour the opt-out)

Where we are no longer required to retain your personal information, we will securely delete or anonymise it.

Who we share information with:

Data processors

Google Workspace (Google Ireland Limited / Google LLC)

This data processor does the following activities for us: Google Workspace hosts our business email (Gmail), document and spreadsheet storage (Drive, Sheets), calendar and meeting scheduling (Calendar), and electronic signature functionality. It processes client contact details, email communications, stored documents, and meeting invitee names/emails on our behalf and on our instructions.

Data Studio (Google Ireland Limited / Google LLC)

This data processor does the following activities for us: Data Studio processes website visitor usage data (pages visited, session activity, device/browser information) to help us understand and improve website performance.

Wix.com Ltd

This data processor does the following activities for us: Wix hosts our business website and processes any personal information submitted through our website, including contact form submissions (name, email, message content).

Wix Analytics (Wix.com Ltd)

This data processor does the following activities for us: Wix Analytics processes website visitor usage data (pages visited, session activity, device/browser information) to help us understand and improve website performance.

Google Analytics 4 (Google Ireland Limited / Google LLC)

This data processor does the following activities for us: GA4 processes website visitor usage data (pages visited, session activity, device/browser information, approximate location) on our instructions to help us understand and improve website performance. Google Signals and cross-product data sharing are disabled.

QuickBooks — provided by Intuit Inc.

This data processor does the following activities for us: QuickBooks processes client billing and invoicing information on our instructions, including client names, contact details, and transaction/payment records, for the purpose of managing invoicing, bookkeeping, and financial record-keeping.

Hunter.io (Hunter SAS)

This data processor does the following activities for us: We use Hunter. Io's email verification service to check that business email addresses we already hold are valid before we contact prospective clients. For this service, Hunter.io acts as our data processor and processes names and business email addresses only on our instructions.
Hunter.io is also one of the sources of business contact details we use (see “Where we get personal information from”). When we obtain contact details from its database, Hunter.io is acting as an independent controller, not as our processor.

We may also share personal information with our professional advisers (such as accountants, lawyers and insurers) and with HMRC or other authorities where we are required to by law.

Sharing information outside the UK

Where necessary, our data processors will share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: Google LLC / Google Ireland Ltd (Workspace)

Category of recipient: Cloud productivity software provider

Country the personal information is sent to: United States

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

Organisation name: Google LLC / Google Ireland Ltd (Data Studio)

Category of recipient: Data visualisation software provider

Country the personal information is sent to: United States

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

Organisation name: Google LLC / Google Ireland Ltd (GA4)

Category of recipient: Website analytics software provider

Country the personal information is sent to: United States

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

Organisation name: Wix.com Ltd

Category of recipient: Website hosting/building platform provider

Country the personal information is sent to: Israel

How the transfer complies with UK data protection law: UK adequacy regulations

Organisation name: Wix.com Ltd (Wix Analytics)

Category of recipient: Website analytics software provider

Country the personal information is sent to: Israel

How the transfer complies with UK data protection law: UK adequacy regulations

Organisation name: Intuit Limited / Intuit Inc. (QuickBooks)

Category of recipient: Cloud accounting/bookkeeping software provider

Country the personal information is sent to: United States

How the transfer complies with UK data protection law: UK Extension to the EU–US Data Privacy Framework (UK–US data bridge), and the International Data Transfer Addendum to the EU Standard Contractual Clauses

Organisation name: Hunter SAS (Hunter.io)

Category of recipient: Business email verification provider

Country the personal information is sent to: France

How the transfer complies with UK data protection law: UK adequacy regulations (EEA)

How to complain

If you have any concerns about our use of your personal information, you can make a data protection complaint to us:

Email: Hello@veritasbiconsultancy.com

Registered office address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF

Company number: 17485618

You can raise a complaint with us by post or email. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you updated on our progress, and tell you the outcome without undue delay.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

ICO Head Office
4th Floor, No.3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL

Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

Privacy Notice

VERITAS BI CONSULTANCY LIMITED privacy notice Last updated: 28/10/2026

This privacy notice tells you what to expect us to do with your personal information.

Veritas BI Consultancy Limited is the controller of the personal information described in this notice. This means we decide how and why your personal information is used. We are registered with the Information Commissioner’s Office under registration number: ZC286207

Contact details

Email: Hello@veritasbiconsultancy.com

Registered office address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF

Company number: 17485618

What information we collect, use, and why

We collect or use the following information for website analytics:

Usage data (including information about how you interact with and use our website)

Website user information

We collect or use the following personal information for dealing with queries, complaints or claims:

Names and contact details

We collect or use the following personal information for direct marketing to businesses:

● Names and business contact details (including job titles and business email addresses)

● Company name

● Records of our contact with you, including opt-out requests

We collect or use the following personal information for delivering and managing client contracts:

● Names and contact details (including job titles)

● Correspondence and meeting records

● Billing and payment information

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.

Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.

Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information for website analytics are:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

Our lawful bases for collecting or using personal information for direct marketing to businesses are:

● Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

Your right to object to direct marketing: you can ask us to stop contacting you for marketing at any time by replying to any of our emails or emailing Hello@veritasbiconsultancy.com. We will stop straight away and keep only the minimum details needed to make sure we don’t contact you again.

Our lawful bases for collecting or using personal information for delivering and managing client contracts are:

● Contract – where our client is a sole trader or partnership, we have to collect or use your information so we can enter into or carry out a contract with you. All of your data protection rights may apply, except the right to object.

● Legitimate interests – where our client is an organisation, we use the names and contact details of the individuals we work with there. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Where we get personal information from:

Directly from you

Providers of business contact data (Hunter.io), which compile business contact details from publicly available sources

Publicly available sources (LinkedIn, company websites)

How long we keep information

We only keep personal information for as long as necessary for the purposes we collected it for. Our retention periods are as follows:

Type of data: Website usage/analytics data (via Google Analytics 4) Purpose: Understanding and improving website performance Retention period: 14 months, then automatically deleted

Type of data: Website usage/analytics data (via Wix Analytics) Purpose: Understanding and improving website performance Retention period: Retained in line with Wix’s standard analytics retention settings

Type of data: Contact form submissions (name, email, message) Purpose: Responding to enquiries Retention period: Up to 12 months from our last contact with you, unless the enquiry develops into a client relationship

Type of data: Client contact, contract and billing records Purpose: Delivering and managing client contracts Retention period: Retained for the duration of the engagement and for 6 years afterwards, in line with our accounting and tax obligations

Type of data: Opt-out/unsubscribe records Purpose: Ensuring we do not re-contact individuals who have opted out Retention period: Retained indefinitely (limited to contact details necessary to honour the opt-out)

Where we are no longer required to retain your personal information, we will securely delete or anonymise it.

Who we share information with:

Data processors

Google Workspace (Google Ireland Limited / Google LLC)

Data Studio (Google Ireland Limited / Google LLC)

This data processor does the following activities for us: Data Studio processes website visitor usage data (pages visited, session activity, device/browser information) to help us understand and improve website performance.

Wix.com Ltd

This data processor does the following activities for us: Wix hosts our business website and processes any personal information submitted through our website, including contact form submissions (name, email, message content).

Wix Analytics (Wix.com Ltd)

This data processor does the following activities for us: Wix Analytics processes website visitor usage data (pages visited, session activity, device/browser information) to help us understand and improve website performance.

Google Analytics 4 (Google Ireland Limited / Google LLC)

QuickBooks — provided by Intuit Inc.

This data processor does the following activities for us: QuickBooks processes client billing and invoicing information on our instructions, including client names, contact details, and transaction/payment records, for the purpose of managing invoicing, bookkeeping, and financial record-keeping.

Hunter.io (Hunter SAS)

We may also share personal information with our professional advisers (such as accountants, lawyers and insurers) and with HMRC or other authorities where we are required to by law.

Sharing information outside the UK

Where necessary, our data processors will share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: Google LLC / Google Ireland Ltd (Workspace)

Category of recipient: Cloud productivity software provider

Country the personal information is sent to: United States

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs)

Organisation name: Google LLC / Google Ireland Ltd (Data Studio)

Category of recipient: Data visualisation software provider

VERITAS BI CONSULTANCY LIMITED privacy notice
Last updated: 28/10/2026

Veritas BI Consultancy Limited is the controller of the personal information described in this notice. This means we decide how and why your personal information is used.

We are registered with the Information Commissioner’s Office under registration number: ZC286207

Your right to object to direct marketing:
you can ask us to stop contacting you for marketing at any time by replying to any of our emails or emailing Hello@veritasbiconsultancy.com. We will stop straight away and keep only the minimum details needed to make sure we don’t contact you again.

Type of data: Website usage/analytics data (via Google Analytics 4)
Purpose: Understanding and improving website performance
Retention period: 14 months, then automatically deleted

Type of data: Website usage/analytics data (via Wix Analytics)
Purpose: Understanding and improving website performance
Retention period: Retained in line with Wix’s standard analytics retention settings

Type of data: Contact form submissions (name, email, message)
Purpose: Responding to enquiries
Retention period: Up to 12 months from our last contact with you, unless the enquiry develops into a client relationship

Type of data: Client contact, contract and billing records
Purpose: Delivering and managing client contracts
Retention period: Retained for the duration of the engagement and for 6 years afterwards, in line with our accounting and tax obligations

Type of data: Opt-out/unsubscribe records
Purpose: Ensuring we do not re-contact individuals who have opted out
Retention period: Retained indefinitely (limited to contact details necessary to honour the opt-out)

How the transfer complies with UK data protection law: UK adequacy regulations

Organisation name: Wix.com Ltd (Wix Analytics)

Company number: 17485618

You can raise a complaint with us by post or email. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you updated on our progress, and tell you the outcome without undue delay.

ICO Head Office
4th Floor, No.3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL

Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint