Last updated: November 10, 2026
Privacy Policy
1. Who we are
Verosite Ltd (Company No. 16227585, registered office Flat 209, 1 Indescon Square, London, England, E14 9DQ) is the data controller for the personal data described in this policy, and is registered with the Information Commissioner's Office under registration number ZC285164. You can reach us at info@verosite.co.uk. This policy explains what we collect when you use verosite.co.uk or work with us, why we collect it, who we share it with, and the rights you have under the UK General Data Protection Regulation and the Data Protection Act 2018.
2. What we collect
- Contact form. Your name, email address, the message you write, and any phone number or business details you choose to include.
- Chat assistant. The messages you type into the chat widget. Please do not put sensitive information into the chat; it is there to answer general questions about our services.
- Technical data. Your IP address, which we use only for security and to limit abuse of the contact form and chat assistant. We set no cookies unless you accept them on our cookie banner (see section 7).
- Client data. If you become a client: contact and billing details, the contents of our correspondence, and the content you supply for your website. How we handle personal data inside a website we build for you is governed by the agreement for that project, under which you are the controller and we act on your instructions.
3. Why we use it and our lawful basis
- To answer your enquiry and arrange a consultation — taking steps at your request before entering a contract, and our legitimate interest in responding to people who contact us.
- To run the chat assistant and generate a reply to your question — our legitimate interest in offering a helpful first point of contact.
- To deliver our services to clients, send invoices and provide support — performance of our contract with you.
- To keep accounting and tax records — our legal obligations.
- To keep the website secure and prevent spam and abuse — our legitimate interests.
We do not use your data for marketing unless you ask us to, and we do not sell it.
4. Who we share it with
We use a small number of service providers who process data on our behalf under written terms:
- Vercel — hosts this website, runs the contact form and chat assistant, and provides our visitor statistics (Vercel Web Analytics). It counts page views and records the page, referrer, country, browser and device type, and counts a few actions such as sending the contact form, opening the chat or tapping our phone number, without recording what you typed. It sets no cookies, and it does not store your IP address: a visit is recognised only through an anonymous hash that is discarded after 24 hours, so you cannot be followed from one day, or one website, to the next. Vercel also holds the short-lived counters, keyed by IP address and by the email address submitted, that limit how often the contact form and chat can be used. These expire automatically within 24 hours.
- Microsoft — provides Microsoft Clarity, which runs only if you click Accept on our cookie banner. It records how visitors click, scroll and move around our pages so we can see what works and what confuses people. Clarity hides what you type into forms and the chat. Recordings are kept for 30 days and aggregate heatmaps for up to 13 months. We have told Microsoft not to use this data for advertising.
- Resend — delivers the email we receive when you submit the contact form, and the confirmation sent to you.
- Anthropic — provides the AI model behind the chat assistant. The messages you type are sent to Anthropic, through Vercel's AI Gateway, to generate a reply. Under Anthropic's commercial terms they are not used to train its models. We do not keep a copy of chat conversations.
- Our email and accounting providers — for correspondence and invoicing with clients.
We may also disclose personal data where the law requires it, or to professional advisers under a duty of confidentiality.
5. International transfers
Some of the providers above are based in, or store data in, the United States. Where personal data leaves the UK we rely on the UK Government's adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the International Data Transfer Agreement / standard contractual clauses with the UK addendum, so that your data receives equivalent protection.
6. How long we keep it
- Enquiries — for as long as needed to deal with your enquiry, and for up to two years after our last contact in case you come back to us.
- Client records — for the length of our engagement and six years after it ends, as required for UK tax and accounting purposes.
- Chat messages — not stored by us. Anthropic retains API inputs for a limited period for abuse monitoring in line with its own retention policy.
- IP-based rate-limit counters — deleted automatically within 24 hours.
8. Security
The site is served over HTTPS only. Form submissions and chat messages are handled server-side, protected by spam filtering and rate limiting, and access to our provider accounts is restricted and protected by multi-factor authentication. No method of transmission over the Internet is completely secure, so we cannot guarantee absolute security, but we will tell you and, where required, the ICO if a breach affects your data.
9. Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where there is no good reason for us to keep it;
- restrict or object to our processing, including any processing based on legitimate interests;
- receive the data you gave us in a portable format; and
- withdraw consent at any time where consent is the basis for processing.
To exercise any of these, email info@verosite.co.uk. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would welcome the chance to resolve it with you first.
10. Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
11. Changes to this policy
We will post any changes on this page and update the date at the top. Significant changes that affect how we use your data will be flagged to existing clients by email.
12. Contact us
Verosite Ltd (Company No. 16227585)
Flat 209, 1 Indescon Square
London, England, E14 9DQ
ICO registration number: ZC285164
Email: info@verosite.co.uk
See also our Terms of Service.