Privacy Policy

This policy explains how Veritas Horizon Partners Ltd ("we", "us") collects and uses personal data when you visit veritasconnect.co.uk or contact us about regulated acquisition introductions and related information.

We are the data controller for this website and for enquiries received through it.

1. Who we are

Veritas Horizon Partners Ltd
Registered in England and Wales, company number: 16410789
Registered office: 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, United Kingdom
ICO registration number: ZB969627
Data Protection Contact: info@veritasconnect.co.uk

2. Data protection laws we follow

We are UK-established and primarily subject to UK GDPR. Where EU GDPR applies (e.g., EU visitors), we apply equivalent standards.

We have not appointed a Data Protection Officer. For privacy matters, contact us using the email above.

3. Information we collect

We collect the following categories of information:

A) Information you provide (personal data)

This may include:

• name
• work email address
• phone number (if provided)
• company name
• job title/role (if provided)
• LinkedIn URL (optional)
• jurisdictions of interest
• licence/authorisation interests (e.g., EMI/PSP/VASP)
• NDA readiness (if asked)
• any message you write in free-text fields
• booking details (via Calendly): name, email, company, meeting notes, and (optionally) phone number

B) Usage and technical data

When you browse the site, we may collect technical information such as:

• IP address (often in truncated/limited form depending on settings)
• browser type/version and device information
• pages visited and interactions
• approximate location derived from IP (city/region-level)
• referring URL

C) Cookies and similar technologies

We use cookies and similar technologies for:

• essential website delivery/security (via hosting/security providers)
• analytics (Google Analytics 4)
• advertising measurement (if/when enabled: Google Ads / LinkedIn)

See our separate Cookie Policy below for details.

4. How we collect information

We collect information:

1. Directly from you – when you submit buyer/seller enquiries, subscribe with your email, request information, or book a call.
2. Automatically – via cookies/analytics and standard server logs when you browse the site.
3. From third parties – for example:
   • Calendly (meeting scheduling data you submit)
   • Advertising platforms (if enabled) providing aggregate campaign performance signals

5. How we use your information

We use personal data to:

• Respond to enquiries (buyer/seller introductions, questions, requests)
• Arrange calls and manage communications (Calendly + email)
• Assess and progress enquiries (e.g., screening seriousness, jurisdiction fit, NDA readiness)
• Send subscription updates (email-only subscribers; you can unsubscribe anytime)
• Operate, secure, and improve the site (analytics, performance, security monitoring)
• Support compliance and record-keeping (e.g., deal logs retained for AML/record purposes)
• Measure marketing effectiveness (if advertising tags are enabled)

We may export enquiry details to internal records (e.g., spreadsheets) for pipeline management, with access restricted to authorised personnel.

6. Legal basis for processing (UK GDPR / GDPR)

We rely on the following legal bases:

• Legitimate interests: to operate the website, respond to enquiries, manage scheduling, and run a secure business process (balanced against your rights).
• Contract / steps before contract: where processing is necessary to take steps at your request or to perform an agreement if you engage us.
• Consent: for email subscriptions/marketing and for non-essential cookies (analytics/marketing cookies) where you accept them via the cookie banner.
• Legal obligation: where we must retain certain records (e.g., completed deal logs retained for compliance purposes).

7. Data sharing and disclosure

We do not sell your personal data. We may share data with:

• Service providers that help us operate (examples):
  • Cloudflare (website delivery/security)
  • Formspree (form handling/storage)
  • Zoho and Gmail (email)
  • Calendly (scheduling)
  • Google (GA4 via Google Tag Manager; and potentially Google Ads tags if enabled)
  • LinkedIn (LinkedIn Insight Tag if enabled)
• Professional advisers (lawyers/accountants) where necessary
• Authorities where required by law or to establish/defend legal claims
• Corporate transactions (if we sell/restructure our business), under confidentiality safeguards

8. Data retention

We keep personal data only as long as needed for the purposes described. As a guide:

• Enquiries/prospects: we periodically review enquiry records and delete or anonymise inactive leads in line with our retention approach
• Email subscribers: until you unsubscribe or we remove long-inactive addresses; we keep a minimal suppression record so we don't re-add you by mistake.
• Completed deals / completed introductions: retained for 5 years from completion for compliance/record-keeping (including AML-related record rationale where applicable).
• Technical logs/analytics: retained according to provider settings and industry-standard periods (GA4 retention is set in Google Analytics; if you do not change it, Google's default applies).

9. Your rights

Depending on your location, you may have the right to:

• access your personal data
• correct inaccurate data
• request deletion (in certain circumstances)
• restrict processing (in certain circumstances)
• object to processing based on legitimate interests
• data portability (in certain cases)
• withdraw consent (where processing is based on consent)

To exercise rights, email: info@veritasconnect.co.uk

10. Security measures

We use reputable providers and take reasonable measures such as:

• access controls (limiting who can access enquiries)
• secure hosting and security services
• organisational measures (need-to-know access)

No system is 100% secure, but we take proportionate steps to reduce risk.

11. International data transfers

Some providers may process data outside the UK/EEA. Where international transfers occur, we understand our IT infrastructure providers use recognised safeguards such as:

• adequacy regulations (where applicable), and/or
• Standard Contractual Clauses (and related UK addendum where required)

12. Call recording

We only record calls where necessary and with notice at the start. Where consent is required, we will ask before recording.

13. Children's privacy

This website is for professional users and businesses. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us and we will delete it.

14. Third-party links and services

Our site may include links to third-party sites (e.g., LinkedIn). We are not responsible for their privacy practices. Please review their policies.

15. CCPA / US privacy note

We do not specifically target US/California consumers. If you are a US resident, you may still contact us to exercise access/deletion requests, and we will respond in line with applicable laws where relevant.

16. Changes to this policy

We may update this policy from time to time. The updated version will be posted here with a new "Last updated" date.

17. Contact

For privacy questions or requests: info@veritasconnect.co.uk

You can also complain to the UK supervisory authority: the Information Commissioner's Office (ICO) (details available on the ICO website).