Privacy & UK GDPR notice
Last updated: April 2026. Effective for all visitors to verax.systems.
1. Who is the controller?
Verax Systems Ltd, a company registered in England and Wales with Company Number 16972520 and registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ (“Verax”, “we”, “us”), is the UK GDPR data controller for personal data collected via this website. Registration with the Information Commissioner's Office (ICO) is in progress; we will publish the ICO reference here on completion.
2. What data we collect and why
We collect the minimum personal data necessary for each defined purpose:
| Purpose | Data | Lawful basis | Retention |
|---|---|---|---|
| Responding to enquiries | Name, email, organisation, message | Legitimate interest | 24 months |
| Investor / data-room requests | Above plus LinkedIn, ticket size, self-certification | Consent + legitimate interest | 6 years (regulatory) |
| Website analytics | Pseudonymised traffic data | Consent (cookie banner) | 14 months |
| Fraud & abuse prevention | IP, device, submission timing | Legitimate interest | 12 months |
We do not process special category data via this website. We do not knowingly collect personal data from children under 18.
3. Where data is processed
Personal data submitted via this website is processed in the United Kingdom and the European Economic Area by Verax and by the following processors under written contracts:
- Amazon Web Services (EU London region) — hosting and storage
- Formspree, Inc. — contact-form delivery (US; SCC-based transfer)
- Email service providers (UK/EU) — communications delivery
Where personal data is transferred to a country outside the UK, we rely on Standard Contractual Clauses (SCCs) plus the UK International Data Transfer Addendum, with a transfer risk assessment on file.
4. Cookies
We use a minimal cookie set. Strictly-necessary cookies (session, CSRF) are set without prior consent. Analytics and preference cookies are only set after you consent via the banner. You may revoke consent at any time via your browser settings or by contacting dpo@verax.systems.
5. Your rights
Under UK GDPR you have the right to:
- access your personal data and obtain a copy;
- rectification of inaccurate data;
- erasure, subject to our legal retention obligations;
- restrict or object to processing;
- data portability;
- withdraw consent at any time; and
- lodge a complaint with the Information Commissioner's Office (ico.org.uk).
To exercise these rights, contact dpo@verax.systems. We will respond within one calendar month.
6. Security
We protect personal data with TLS 1.3 in transit, KMS-managed encryption at rest, least-privilege access controls, and audit logging. We review security arrangements regularly and notify affected individuals and the ICO of any personal data breach where required under UK GDPR.
7. Changes to this notice
We may update this notice from time to time. Material changes will be flagged at the top of this page and, for existing data subjects, communicated by email where we have one on file.
8. Contact
Verax Systems Ltd, attn. Data Protection, 71-75 Shelton Street, London WC2H 9JQ, United Kingdom. Email: dpo@verax.systems.