Privacy statement

Who we are

Veridian Revenue Partners ("we", "us") is the data controller for the personal data described in this statement. You can reach us at the email address on our contact page.

We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

What we collect

Enquiries. When you use the form on our contact page we collect your name, email address, company name, telephone number where you give one, and the content of your message.

Correspondence. Emails, meeting notes and documents you send us in the course of an enquiry or an engagement.

Client engagement data. During an engagement we are given access to commercial records — contracts, billing exports and CRM data — which may contain the names and business contact details of your staff and customers. For that data we act as a processor on your instructions, under the terms of the engagement agreement.

Technical data. Our web server records the pages requested, the time of the request and the browser used. Where website analytics are enabled, the provider and purpose are listed in the analytics section below.

Why we hold it, and on what basis

We use enquiry data to reply to you and to assess whether there is a piece of work we can do. The lawful basis is legitimate interests: responding to a request you have made of us.

We use correspondence and engagement data to deliver the work and to meet our contractual obligations. The lawful basis is performance of a contract.

We keep records required for accounting and tax purposes. The lawful basis is legal obligation.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

Who we share it with

We share personal data only with service providers who help us run the firm — our email and file storage provider, our accountant, and our website host — and only to the extent they need it. Each is bound by a written agreement covering confidentiality and data protection.

We disclose data to a regulator, a court or a law enforcement body where we are legally required to do so.

Where a provider processes data outside the UK, transfers are made under the UK addendum to the standard contractual clauses or an adequacy decision.

How long we keep it

Enquiries that do not lead to an engagement are deleted after 24 months.

Engagement records are kept for six years after the end of the engagement, which is the period in which a claim could be brought and the period our accounting obligations require.

Client commercial data supplied for a review is returned or deleted at the end of the engagement, on your instruction.

Cookies and analytics

The public website sets no marketing or advertising cookies, and nothing that is not strictly necessary is set before you agree to it.

Where website analytics are switched on, a banner asks whether you agree to them. Declining is one click, exactly as accepting is, and the site works the same either way. Your answer is kept in a single cookie so that we do not ask again on every page; that cookie is the record of your choice, and you can change it at any time using the cookie settings link in the footer.

Where analytics are agreed to, only aggregate visit data is collected and the provider is named in the source of every page. No analytics provider is enabled by default.

A further cookie keeps an administrator signed in to the website management area. It is not set for ordinary visitors.

Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to our use of it. You may also ask us to send it to another organisation in a portable format.

Write to the email address on our contact page. We reply within one month.

If you are not satisfied with our response you may complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this statement

Where we change this statement we update the date at the top of the page. Material changes affecting existing clients are notified by email.