Section 01Who we are
Verattia Ltd (Companies House 16396655), registered in England and Wales, operates www.verattia.com and provides doctor-led claim-risk review services.
Under the UK GDPR and the Data Protection Act 2018, Verattia Ltd is the data controller for personal data processed through this website and our engagements.
Contact: hello@verattia.com.
Section 02What data we collect
- Enquiry data: name, email, company, URLs submitted for review and message content you provide.
- Anonymised analytics data: aggregated page views and sessions only, collected without cookies; no personally identifiable information.
- Communications you send to us by email or through the site.
We do not collect payment card data directly.
Verattia does not request or intentionally collect special category personal data (Article 9 UK GDPR) through the website. Please do not submit patient-identifiable or health information via the enquiry form.
Section 03How we use your data
- To respond to enquiries and deliver requested services.
- To improve the website using aggregated, anonymised usage data.
We do not sell or share personal data with third parties for their own marketing. We do not engage in automated decision-making or profiling.
Section 04Legal basis
- Contract performance (Article 6(1)(b) UK GDPR), for service delivery.
- Legitimate interests (Article 6(1)(f)), for enquiry handling and anonymised analytics.
- Explicit consent, for any direct marketing communications.
Section 05Data retention
Enquiry and client data is retained for up to 6 years from the end of an engagement, in line with UK limitation periods. Analytics data is retained per the provider's policy.
Unconverted enquiries are normally deleted within 12 months unless needed for follow-up, record-keeping or legal purposes.
You may request deletion at any time by emailing hello@verattia.com.
Section 06Your rights
Under UK GDPR you have the rights of access, rectification, erasure, restriction, objection and portability. Email hello@verattia.com to exercise any of these rights.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Section 07Cookies
The site sets no non-essential cookies. Our analytics service (Plausible) is cookieless by design. See our Cookie Notice for full detail.
Section 08Third-party services
- Hosting: the site is hosted on Vercel (Vercel Inc., USA), which may process request metadata.
- Fonts: self-hosted on verattia.com. Loading this site makes no third-party font requests.
- Analytics: Plausible Analytics (Plausible Insights OÜ, EU-hosted), a privacy-first, cookieless service. It collects aggregated page-view statistics only: no cookies, no persistent identifiers, no cross-site tracking and no personally identifiable information. IP addresses are processed transiently and are not stored.
- Form delivery: enquiry-form submissions are dispatched to our inbox via Resend (Resend, Inc., USA), which processes the message content for delivery only.
Section 09International transfers
Vercel infrastructure may involve servers located outside the UK, under appropriate transfer mechanisms (UK IDTA, Standard Contractual Clauses or equivalent). Enquiry-form delivery via Resend may involve processing in the USA under the same classes of safeguard.
Analytics data is processed and stored within the EU by Plausible; UK-to-EEA transfers are covered by the UK's adequacy arrangements.
No client audit data is transferred internationally.
Section 10Changes
The current version is published at www.verattia.com/privacy with the last-updated date at the top of the page.
Section 11Contact
Verattia Ltd · hello@verattia.com · Companies House 16396655.