1. Who we are and how to contact us
Verdanox Limited, trading as Verdanox, is responsible for the personal information it uses to operate this website, respond to enquiries and manage its own business relationships. Our company number is 16955321. You can write to us at 27 Old Gloucester St, London, WC1N 3AX, United Kingdom, or email advisory@verdanox.com with a privacy question or request.
This notice explains how we handle personal information when you visit our website, contact us, request a walkthrough or use our public assessment tools. It also explains the distinction between information we use for our own purposes and customer information handled within the Verdanox platform.
2. Information you give us
When you request a walkthrough, we collect your name, work email address and company, together with your team, industry and message if you choose to provide them. We use this context to understand and respond to your request. Our anti-abuse process uses request information, including IP address, and a hidden form field to help identify automated submissions. The website address field is an anti-abuse field, not a request for your business website.
The public Exposure Scorecard collects your company, industry, currency, revenue band, markets of operation, eight assessment answers, name, email address and role. It calculates an indicative result across five governance dimensions and prepares a PDF report. We store the submission and report-delivery status, email the requested report and notify our team of the completed assessment. When analytics is enabled, permitted campaign-source tags may also be retained with the submission. We may keep correspondence about your request and our response.
Please avoid including sensitive personal information or confidential material that is not needed for your enquiry. Our public product demonstrations use illustrative records; you do not need to upload a real supplier file to explore them.
3. Information associated with visiting the website
Operating a website involves handling technical information such as the requested page, time of the request, IP address, browser information and error or security events. The information actually recorded depends on the services used to deliver and protect the website.
Optional Google Analytics measurement runs only after you enable analytics. Our integration sends the visited page path without URL queries or fragments. Enhanced measurement also records interactions such as scrolling, outbound-link clicks, file downloads and starting or submitting a form. Form events describe the form and interaction, not the values you enter. We do not send enquiry field values, assessment answers or a backlog of activity from before consent. Google receives technical request information and uses browser and session identifiers for measurement. The cookie information below describes the browser storage used.
4. Why we use personal information
We use personal information for the purposes described below. The applicable basis depends on the particular activity, rather than a general consent to all use of the website.
| Purpose | Information involved | Basis for use |
|---|---|---|
| Answer an enquiry or arrange a requested walkthrough | Contact details, organisation, team and context you provide | Legitimate interest in responding to business enquiries and discussing our services |
| Provide the requested assessment and report | Assessment answers, selected business context and delivery details | Legitimate interest in providing the business assessment you request |
| Operate and protect the website | Technical request, error and security information | Legitimate interest in maintaining a reliable service and investigating misuse |
| Measure website use with optional Google Analytics | Page path, interaction metadata, technical request data, browser and session identifiers | Consent under this website’s opt-in configuration |
| Manage correspondence and required records | Relevant business correspondence and contact information | Legitimate interests in administering relationships, or a legal obligation where one applies |
| Handle privacy requests | Contact and proportionate verification information, request details and relevant records | Compliance with applicable legal obligations |
The interests described above are responding to a request you initiate, providing the assessment you ask for, and keeping the service reliable. We limit the requested information to the contact and business context relevant to those tasks. Optional context fields can be left blank, and you can raise an objection using the contact below. Where processing is based on consent, you can withdraw that consent for future processing. Requesting a walkthrough does not automatically subscribe you to unrelated marketing.
5. Enquiries, assessments and communications
We use your enquiry information to consider your request, respond and arrange any follow-up you ask for. Providing business contact information is voluntary, but we need a way to reach you to answer a request or deliver a requested report. Optional context fields can be left blank.
The walkthrough form saves your enquiry in Supabase before requesting notification and confirmation emails through Resend. We keep the submitted contact and business context, receipt time and email-processing status so our team can follow up even if an email fails. The form confirmation means an enquiry has been recorded; it does not mean a meeting has been booked or an email has reached an inbox. Email contact links open your own email application, where you can review a message before sending it.
Assessment results are calculated from the supplied answers using defined scoring rules; the public assessment does not send answers to an AI model. Results are indicative information about an organisation’s governance process, not a legal decision about a claim or about you. They do not make a decision with legal or similarly significant effects on an individual. Interactive product examples use fictional records and keep their changes in page memory; they do not issue real publication approvals.
You can ask us to stop direct marketing at any time by using an available unsubscribe link or emailing advisory@verdanox.com. We may retain the minimum information needed to honour that choice. Service messages relating to a request you have made are distinct from unrelated promotional messages.
7. Who receives information
The website is configured for Vercel hosting and uses Resend for walkthrough notifications, confirmations and assessment-report emails. Supabase stores walkthrough enquiries and email-processing status, as well as completed assessment submissions, scores and report-delivery status. Our team receives the enquiry or assessment notification through business email. If you permit analytics, Google Analytics receives the optional measurement information described above. These providers receive the information needed for their part of the service.
A scheduling link, if offered after an assessment, opens the external scheduling provider; there is no embedded scheduler on this website. The provider explains its own information handling on its page. Public form and assessment handlers do not send their data to an AI service.
We may share relevant information with professional advisers, or with public authorities when legally required. Please contact us if you need more information about the recipients relevant to your interaction with Verdanox.
8. International processing
Our hosting, database, email and analytics providers operate internationally. Processing or support access may take place outside the United Kingdom, including in the United States. The location depends on the particular service and account configuration; the London contact address is not a promise of UK-only processing. Where personal information is transferred internationally, the applicable arrangement must provide the protection required by the relevant data protection law. This may involve an applicable adequacy arrangement or appropriate contractual safeguards.
You can contact advisory@verdanox.com for information about the transfer arrangements relevant to your data and how to obtain information about applicable safeguards.
9. How long information is kept
The period depends on why the information is held. Walkthrough enquiries are stored in the website database; there is no automatic deletion period enforced by the public enquiry application. For an enquiry, relevant factors include whether the request is still active, whether a business relationship follows and whether correspondence is needed to understand or resolve that interaction. Assessment submissions and delivery status are held in the assessment database. Relevant retention factors include delivery of the requested report, follow-up requested by the recipient, any continuing business relationship and applicable legal requirements. There is no automatic deletion period enforced by the public assessment application.
For technical and security records, relevant factors include the time needed to investigate errors or misuse and the configured retention period of the service concerned. Where information must be kept to meet a legal obligation or deal with a dispute, that requirement can affect the period. Preference and suppression records may need to be kept to honour choices about contact or optional technologies.
You can contact us to ask about the information retained for your interaction or request deletion, subject to applicable requirements. Browser preference and analytics-cookie durations are stated in the storage table. Provider-held technical logs, email records and analytics data have separate service settings; clearing browser cookies does not delete those records. Customer platform information is handled according to the applicable customer agreement and data processing arrangements.
10. Your choices and rights
Depending on the circumstances and the law that applies, you may have rights to access your personal information, correct inaccurate information, request erasure, restrict its use or receive certain information in a portable form. These rights have conditions and exceptions; for example, a legal requirement to retain a record can affect an erasure request.
You can object to direct marketing at any time. You can also object to processing based on legitimate interests; we will consider that objection under the applicable rules. Where processing relies on your consent, you can withdraw it for future processing.
To make a request, email advisory@verdanox.com. We may need proportionate information to identify the relevant records and verify the request. We will explain the response and any applicable limitation within the timescale required by law.
11. Customer platform information
The public website and the authenticated Verdanox platform serve different purposes. We may act as a controller for account information used to administer access, authentication and business relationships. When we process personal information contained in a customer's claim records or other customer content on that customer's instructions, the applicable customer agreement and data processing addendum govern that processing.
If your information is included in content managed by your organisation, that organisation is normally the appropriate first contact for questions about its use of the content. We can assist with requests as required by our agreement and applicable law. This website notice does not replace a customer's own privacy information or its data processing agreement with Verdanox.
12. Questions and complaints
Please contact advisory@verdanox.com if you have a question or concern about how your information is handled. We will consider the concern and explain our response. You also have the right to raise a data protection complaint with the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner's Office: make a complaint to the ICO.
13. Changes to this notice
We may update this notice when the website, our processing activities or relevant requirements change. The date at the top identifies the current version. Where a change requires additional information or a new choice from you, we will provide that through an appropriate channel.