Privacy policy

What we collect when you use the website

Browsing the site does not require you to give us anything. We do not set advertising cookies and we do not run cross-site tracking or retargeting pixels.

If web analytics is enabled on this deployment, it records aggregate usage — pages viewed, referrer, approximate region, device type, and interactions such as clicking a call to action or starting a form. Where consent is required in your jurisdiction, analytics only runs after consent is given.

• Pages viewed and the order you viewed them in
• Referring source and campaign parameters, where present in the URL
• Approximate region derived from IP, not a precise location
• Device type, browser and screen size
• Interaction events: call-to-action clicks, form starts, form submissions, downloads, outbound clicks

What we collect when you contact us

The contact form asks for your name, work email, company, website, a description of what is happening and what you are trying to improve. Company size, target market, service interest and budget band are optional.

We also store the page you landed on, the referrer and any campaign parameters, so we know where an enquiry came from. Your IP address is stored only as a salted one-way hash, which lets us investigate abuse without holding the address itself.

• Name, work email, company and website — so we can reply and look at your site
• Your description of the situation and the outcome you want — so the first reply is useful
• Optional context: company size, target market, service interest, budget band
• Attribution: landing page, referrer, campaign parameters
• A salted hash of your IP address and your browser user-agent string, for abuse investigation only

Why we collect it

To reply to your enquiry, to assess whether we can help, to scope and deliver work you have asked for, and to keep records of our own business. We do not sell data, and we do not add enquiries to a marketing list. There is no drip sequence.

Where a legal basis is required, ours is legitimate interest in responding to a business enquiry, and contract performance once an engagement begins.

Client data during an engagement

Consulting work usually needs read access to systems you control — Search Console, analytics, tag management, a CRM export, sometimes server logs. We request the minimum access the question requires, prefer read-only, and ask for access to be revoked when a project ends.

Client data is used only to deliver the work you engaged us for. It is not used to train models, is not shared with other clients, and is not published in any form without your written permission. Case studies are published only with permission, and only with numbers that are real.

Who we share it with

Only the processors needed to run the business — hosting, email, and analytics where enabled — and only for those purposes. We do not share enquiry or client data with advertisers, data brokers or partners.

Where a processor is in a different country from you, transfers rely on the standard safeguards that processor provides. Ask us and we will tell you exactly which providers are currently in use.

How long we keep it

Enquiries are kept for up to 24 months so we can pick up a conversation that resumes later, then deleted. Client engagement records are kept for as long as required for tax and contractual purposes, then deleted.

Aggregate analytics is retained for the maximum period the analytics platform allows, which is a period measured in months, not indefinitely.

Your rights

Depending on where you are, you may have the right to access the data we hold about you, correct it, delete it, restrict how it is used, object to its use, or receive a copy in a portable format. Write to privacy@verqen.com and we will action it — we do not require a specific form or wording.

If you are in the EU, UK, Switzerland or another jurisdiction with a supervisory authority, you also have the right to complain to it. We would rather you told us first so we can fix whatever went wrong.

Security

The site is served over HTTPS with strict transport security and standard security headers. Enquiry data is stored with restricted file permissions on the application host, and access to any administrative area requires a password and a signed session.

No system is perfectly secure. If you believe you have found a vulnerability in this site, please tell us at privacy@verqen.com before disclosing it publicly, and we will respond.

Changes

When this policy changes materially we update the date at the top of the page. If a change affects data we already hold about you, we will tell you directly rather than relying on you re-reading the page.