Privacy notice.

Veredos Ltd. is the data controller for personal data that you, as a customer, provide to us. Our registered office and ICO registration details will appear here once incorporation and ICO registration are complete (in progress).

Engineers on the network are independent businesses. Where they process personal data on their own behalf — for example, the contact details of a landlord they have agreed to work for — they are separate data controllers. We have a written data-sharing arrangement with every engineer.

For account and customer data:

• Name, email, phone, role within an organisation.
• Organisation name, address, billing details.
• Notification preferences (which channels, which thresholds).

For property and compliance data:

• Property addresses, postcodes, property type, HMO licensing data, occupant counts.
• Compliance certificates (CP12, EICR, EPC, PAT, Legionella, FRA, HMO licence, smoke and CO checks) and the dates, costs and engineers attached to them.
• Document files uploaded by users or engineers.

For engineer data:

• Trade certifications (Gas Safe, NICEIC, NAPIT, ELECSA, Stroma, EPC assessor, etc.) and their verification status.
• Insurance policy details and expiry dates.
• Service areas, performance metrics, ratings.

For platform and security data:

• IP address, user-agent, session metadata, audit logs of actions performed on the platform.
• Privacy-friendly analytics events (no third-party advertising cookies).

We rely on the following lawful bases under Article 6 of the UK GDPR:

• Performance of contract for delivering the Veredos service to a customer.
• Legal obligation for HMRC and housing-record retention.
• Legitimate interests for security, fraud prevention, network vetting and product improvement, balanced against your rights.
• Consent for optional communications such as our newsletter.

Customer data and certificate documents are hosted on UK or EU regional infrastructure operated by reputable providers under signed data-processing agreements. Documents are encrypted at rest with AES-256 and accessed via signed, time-limited URLs.

We do not transfer personal data to jurisdictions without an adequacy decision unless we have additional safeguards in place (Standard Contractual Clauses), and we will tell you when we do.

Compliance and tax records are retained for seven years to match HMRC retention requirements and the audit window of typical UK housing investigations. After that, we retain only what we are legally required to retain, and securely delete the rest.

For account-level personal data not tied to compliance records, we retain it for as long as your account is active and for a short window afterwards in case you reactivate. You can request earlier deletion at any time.

We share personal data only with the following categories of third party, and only what is necessary:

• Engineers assigned to a booking, who receive the property address, contact details and scope of work.
• Service providers we use for email delivery, SMS, analytics, error monitoring and hosting — each under a data-processing agreement.
• Authorities where we are legally required to disclose (court order, regulatory request).

We do not sell personal data. We do not share it for advertising.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have data erased where lawful retention rules permit.
• Restrict or object to certain processing.
• Have your data ported to another provider.
• Withdraw consent for any processing based on consent.
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these, write to privacy@veredos.co.uk. We respond within 30 days.

We use a small number of strictly necessary cookies for session management. Our analytics provider (Plausible) does not use cookies, does not track across sites, and does not collect personal data. We do not run advertising cookies.

When we make material changes we update the effective date at the top and notify customers by email. Older versions are kept on file for audit.