Who we are
Verithora is a sole-trader firm based in Reigate, Surrey, United Kingdom. We act as the data controller for the personal data described on this page.
If you want to talk to us about your data, email hello@verithora.com.
What we collect, why, and for how long
We try to collect as little as we can. Specifically:
- If you contact us via the form or email: your name, your email address, and whatever you choose to write to us. We use this to reply, scope work, and (if we end up working together) deliver the service. We keep it for as long as we are corresponding plus 24 months. Legal basis: legitimate interests (you wrote to us) and, once a contract exists, contract.
- If you become a client: the data we need to invoice you and run the service — company name, billing address, VAT registration if relevant, ownership of any content you send us for the site. Kept for the life of the engagement plus seven years (HMRC retention). Legal basis: contract and legal obligation.
- Visitors to this site: we run a privacy-respecting analytics setup that does not use cookies and does not identify you. We see aggregate page views, the referring site, the country your request came from, and the device family. We do not see your IP address in readable form, and we do not share this data with any advertising network. Legal basis: legitimate interests (running the site).
What we do not do
- We do not sell your data.
- We do not run third-party advertising or remarketing on this site.
- We do not place tracking cookies. The only cookies this site sets are essential ones (e.g. CSRF protection on the contact form). Our full cookie notice spells out what is set and why.
- We do not use a chat-bot vendor or a customer-success tool that reads your messages.
Sub-processors
We use a small list of third parties to actually run the business. They are:
- Cloudflare — hosts this site (Cloudflare Pages) and protects it from abuse. UK / EU edge serving. Privacy policy.
- Email provider — handles inbound and outbound email to hello@verithora.com.
- Accounting / invoicing software — generates invoices and stores them for HMRC retention.
- Payment processor — receives client payments for monthly fees. We never see your card details.
Specific vendor names are kept current on this page. If we change one materially, we update this list and the Last updated date above.
Your rights under UK GDPR
You have the right to:
- Ask what data we hold about you, in a copy you can read.
- Ask us to correct anything wrong.
- Ask us to delete what we hold, where we can do so (we cannot delete invoices and similar records before HMRC retention runs out).
- Object to processing based on legitimate interests.
- Withdraw consent at any time, where consent is the basis (it rarely is on this site).
- Complain to the Information Commissioner's Office at ico.org.uk.
Email hello@verithora.com to exercise any of these. We reply inside seven days.
Children
This site is not aimed at children. We do not knowingly collect data from anyone under 16. If you believe we have, email us and we will delete it.
International transfers
Our hosting and email vendors operate from the UK, EU, and US. Where data is processed outside the UK, our vendors operate under UK International Data Transfer Agreement safeguards or equivalent (Standard Contractual Clauses). We do not transfer client data outside the UK or EEA unless the vendor we use to deliver the service requires it.
Changes to this notice
When we change this notice in a way that materially affects you, we update the date at the top and (if you are a client) we email you. Cosmetic changes are not announced.
Plain-English notice, written by a person, reviewed by Verithora before publishing.