Privacy policy.

VERANA LIVING LIMITED ("Verana Living", "we", "us") is the controller of the personal data described in this policy. We are registered in England and Wales under company number 17316709, with our registered office at 112 Mortlake Business Centre, 20 Mortlake High Street, London, United Kingdom, SW14 8JN.

For any question about this policy or your personal data, email hello@veranaliving.com.

We work with institutional organisations, so most of the personal data we hold is professional information about the people we deal with at those organisations. Depending on how you interact with us, this may include:

Contact and professional details: your name, job title, organisation, business email address and telephone number.

Correspondence: the content of emails and other communications with us, and notes of meetings and calls.

Engagement records: where your organisation instructs us, information connected with that engagement, such as instructions, contracts, invoices and payment records.

Website data: your IP address, browser type and version, device information and the pages you request, which our hosting provider records automatically when you visit our website. We also record, in a form that does not identify you, which pages and sections of our website are viewed and which links are selected (see section 6).

We do not ask for special category data, such as information about health, ethnicity or religious beliefs, and we ask that you do not send it to us.

Most personal data we hold is provided directly by you, when you email us, meet us or work with us. We may also receive your details from colleagues at your organisation or from other parties involved in a project. We may also collect professional information that is publicly available, for example from company websites, Companies House, industry event programmes and professional networking sites.

Data protection law requires us to have a lawful basis for each way we use personal data. We use personal data for the following purposes:

Responding to enquiries and correspondence. Lawful basis: legitimate interests, namely dealing with approaches made to our business.

Preparing for and delivering advisory engagements, including communicating with client representatives and other parties involved. Lawful basis: contract, where the contract is with you personally; otherwise legitimate interests in delivering the services our clients instruct.

Developing and maintaining professional relationships, including occasional updates relevant to your role. Lawful basis: legitimate interests, namely developing our business within our sector (see section 5).

Keeping accounting and tax records. Lawful basis: legal obligation.

Operating, maintaining and securing our website and systems. Lawful basis: legitimate interests, namely keeping our website and systems available and secure.

Measuring how our website is used, in aggregate, so that we can improve it. Lawful basis: legitimate interests, namely understanding whether our website is useful to the people who visit it.

Establishing, exercising or defending legal claims. Lawful basis: legitimate interests.

Where we rely on legitimate interests, we have considered whether they are outweighed by your rights and interests and concluded that they are not. You can ask us for more detail on this.

We do not make decisions about you based solely on automated processing, and we do not sell personal data.

From time to time we may email people in our professional network with insights, updates or information about our services that we believe are relevant to their role. Where the law requires your consent for this, for example if you are a sole trader or a partner in an unincorporated firm, we will only contact you if you have given it.

Every such email explains how to opt out, and you can opt out at any time by emailing hello@veranaliving.com. If you do, we keep a minimal record of your email address solely to make sure we do not contact you again.

Our website does not use cookies or similar technologies for advertising or profiling, and does not store anything on your device that requires your consent. For that reason, we do not display a cookie banner.

We measure how our website is used with PostHog, an analytics service hosted in the European Union, which acts as our processor. It runs without cookies and without storing anything on your device. It records the pages and sections viewed, the links selected, the referring website and general browser and device information.

To count visits without identifying anyone, PostHog briefly combines your IP address and browser details with a value that changes every day to create an anonymous identifier. Your IP address is then discarded and is not stored with the analytics data, and the daily value is deleted, so a visit cannot be linked to you or to a visit on another day. We do not use this information to identify individual visitors.

We host our fonts and other website assets ourselves rather than loading them from third-party services, so visiting our website does not share your IP address with those services.

We share personal data only where needed for the purposes in section 4, with:

Service providers that support our business, including our accountants and our website hosting, email and analytics providers.

Professional advisers, such as lawyers and insurers.

Other parties involved in an engagement, such as a client's other advisers or a counterparty to a transaction, where this is necessary to carry out our work.

Regulators, law enforcement agencies, courts or other public authorities, where the law requires or permits us to disclose it.

A buyer or successor, and their advisers, if our business or its assets are sold or restructured.

Our service providers process personal data on our instructions, under terms that require them to keep it secure and not use it for their own purposes.

Some of our service providers store or access data outside the UK.

Where personal data is transferred outside the UK, we make sure it remains protected in one of two ways. Either the destination is covered by UK adequacy regulations, which include certified US organisations under the UK Extension to the EU-US Data Privacy Framework, or the transfer is covered by safeguards approved under UK law, such as the International Data Transfer Agreement or Addendum. Contact us if you would like more information.

We keep personal data only for as long as we need it. As a guide:

Enquiries that do not lead to an engagement: up to two years from our last contact.

Engagement, contract and financial records: six years from the end of the engagement or the relevant financial year, to meet accounting and tax requirements and in case of legal claims.

Professional contact details held for business development: while they remain accurate and relevant, reviewed at least every two years, or until you ask us to stop contacting you.

Opt-out records: for as long as needed to respect your request.

When we no longer need personal data, we securely delete or anonymise it.

We use appropriate technical and organisational measures to protect personal data. No transmission over the internet can be guaranteed to be completely secure, but we will notify you and the regulator of a personal data breach where the law requires us to.

Subject to certain conditions and exemptions, you have the right to:

Access the personal data we hold about you and receive a copy of it.

Have inaccurate or incomplete data corrected.

Have your data erased.

Restrict how we use your data.

Object to our use of your data where we rely on legitimate interests. You can also object at any time, without giving a reason, to its use for direct marketing.

Receive data you provided to us in a portable format, where we process it by automated means on the basis of consent or contract.

Withdraw your consent at any time, where we rely on it. This does not affect anything we did before you withdrew it.

To exercise any of these rights, email hello@veranaliving.com. There is normally no charge.

We will respond within one month. For complex or multiple requests, this may be extended by up to two further months, in which case we will tell you. If we need to confirm your identity or ask you to clarify your request, the time limit will not run until we have the information we need.

If you have a concern about how we have handled your personal data, please contact us first at hello@veranaliving.com so that we can try to resolve it. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office, which is becoming the Information Commission:

Website: ico.org.uk

Helpline: 0303 123 1113

Post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We will update this policy when our practices or the law change. The date at the top of this page shows when it was last revised.