VeriFi Limited Privacy Policy
This policy explains how VeriFi collects and uses your personal information.
Our Details
The data controller with conduct of your personal information VeriFi Limited (UK company number 07307582).
You can contact us by post to: Data Protection Team, VeriFi EIDOS, 23 Seabourne Road, Bournemouth, BH5 2HT, England. You can also contact us by email to: info@verifi-eidos.co.uk.
VeriFi provides industry-specific assistance for complying with DSARs. A limited redaction editing service is included within VeriFi’s annual service charge.
How We Use Your Personal Information
This table explains how we use your personal information in our business.
Type of information
IP address, approximate location.
Purpose and lawful basis for processing
After obtaining your consent to setting the cookies, we have a legitimate interest in monitoring how you interact with our website in order to improve it and to troubleshoot issues.
Type of information
Name, contact information, details of your enquiry.
Purpose and lawful basis for processing
We have a legitimate interest in responding to your enquiry.
We process your information to carry out pre-contractual steps relating to your enquiry such as sending you a fee estimate.
We have a legitimate interest in keeping a record of your request as well as our response. This helps us efficiently operate our business.
Type of information
Name, contact information, marketing preferences.
Purpose and lawful basis for processing
We have a legitimate interest in contacting you about similar goods and services to those which you have purchased from us or which you have enquired about purchasing from us. We may also send you details of offers we run which we think will be of interest to you.
In other circumstances we may send you marketing communications based on your consent.
Type of information
Name, job title, contact information.
Purpose and lawful basis for processing
If our contract is with you then the processing is necessary for us to perform our contractual obligations.
If the contract is with your organisation then we have a legitimate interest in processing your personal information for the purpose of managing the contractual relationship between your organisation and us.
We have a legitimate interest in keeping a record of the contract between us (or your organisation and us) for the administration of our business and to address any disputes which may arise between us (or your organisation and us).
Type of information
Name, job title, contact information, payment details.
Purpose and lawful basis for processing
If our contract is with you then the processing is necessary for us to perform our contractual obligations.
If the contract is with your organisation then we have a legitimate interest in processing your personal information for the purpose of managing the contractual relationship between your organisation and us.
We have a legitimate interest in keeping a record of the contract between us (or your organisation and us) for the administration of our business and to address any disputes which may arise between us.
How Long We Keep Your Information For
We only keep your information for so long as is reasonably necessary. Generally speaking, we keep your information for the following periods of time:
(a) General enquiries – two years from when we resolve your enquiry.
(b) Customers and staff of customers – the duration of the contract between you and us (or your employer and us) plus seven years.
(c) Suppliers and staff of suppliers – the duration of the contract between you and us (or your organisation and us) plus seven years.
Who Is Your Information Shared With
We share your personal information with third parties only where we are required to do so to comply with the law, to protect our rights, to perform our contractual obligations or to efficiently operate our business. We share your data with the following people or group of people:
(a) If you are an employee or representative of a customer or supplier of ours then we may share your information with your employer for the purpose of managing the business relationship between your organisation and us.
(b) We share your information with our outsourced service providers (including our professional advisers) where it is necessary for us to receive goods/services from those providers
(c) Potential purchasers of our business may be given access to redacted information about our customers, suppliers and their staff/representatives as part of the sale process.
Where the recipient of your personal data is based outside of the UK and is not in a country which has received an adequacy regulation from the UK government, we will safeguard the transfer of your personal data. If the recipient does not have binding corporate rules in place then we enter into the standard contractual clauses (SCCs) with them to ensure your data is protected to the same high standard as under UK law
Automated Decision Making
We do not make automated decisions about you based on your information. If this changes in the future then we will let you know.
Your Rights
Under data protection law you have the following rights:
(a) The right to be informed about what we do with your information. This Policy provides you with this information.
(b) If we are processing your data on the basis of your consent then you have the right to withdraw that consent at any time. Consent can be withdrawn by and notifying us using the details set out at the start of this policy. Consent to marketing communications can be withdrawn by following the steps outlined in that communication, such as clicking the ‘unsubscribe’ link in the marketing emails we send.
(c) The right to access a copy of your information which we hold. This is called a ‘data subject access request’. Additional details on how to exercise this right are set out in the ‘Access to Information’ section below.
(d) The right to prevent us processing your information for direct marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data or by contacting us using the details set out at the start of this policy.
(e) The right to object to decisions being made about you by automated means. We will inform you if your information is subject to automated processing.
(f) The right to object to us processing your personal information in certain other situations.
(g) The right, in certain circumstances, to have your information rectified, blocked, erased or destroyed if it is inaccurate.
(h) The right, in certain circumstances, to claim compensation for damages caused by us breaching data protection law.
(i) The right, in certain circumstances, to request that we erase, rectify, cease processing and/or delete your information.
You have the general right to complain to us in the first instance if you are not happy with how we are processing your personal information. If you are not satisfied by our response then you can complain to your local data protection regulator and/or the UK regulator which is the Information Commissioner’s Office (ICO). The ICO’s website is www.ico.org.uk.
Access To Information
Under data protection law you can exercise your right of access by making a written request to receive copies of some of the information we hold on you. You must send us proof of your identity, or proof of authority if making the request on behalf of someone else, before we can supply the information to you. Requests should be sent to us using the contact details set out at the start of this policy.
You do not need to pay a fee to exercise this right unless you are requesting copies of documents you already possess, in which case we may charge our reasonable administrative costs. We are also allowed to charge you for our reasonable administrative costs in collating and providing you with details of the requested information which we hold about you if your request is clearly unfounded or excessive. In very limited circumstances, we are entitled to refuse to comply with your request if it is particularly onerous.
In certain circumstances, you are entitled to receive the information in a structured, commonly used and machine-readable form.
Changes To Our Privacy Notice
This policy was last updated on 18 January 2022. Any material changes we may make to our privacy policy in the future will be uploaded to our website and if the change is significant we will send you the updated policy by email.
EIDOS Apps Privacy Policy
Our EIDOS Apps Privacy Policy can be found here.
Helpline
Telephone helpline support is available Monday to Friday 09:00 to 17:30 (excluding public holidays) and can be called on free phone number 0800 028 7382. Advice is also available by email at info@verifi-eidos.co.uk outside of these times for matters of an urgent nature.
