Privacy Notice
Version 1.0 · Last updated 30 July 2026
This notice explains what personal data Verada Health Ltd collects through this website, why we collect it, who we share it with, and the rights you have over it. We have written it to be read, not to be survived.
1. Who we are
Verada Health Ltd is the data controller for personal data collected through this website. We are registered in England & Wales under company number 17137766. Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
Verada, Verada Technologies, Verada Clinic and Verada Research are brands of the Verada group of companies.
We are registered with the UK Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].
2. What this notice covers
This notice applies to verada.health — the corporate website of the Verada group — and to the business correspondence that follows from it: partnership, investor, research, clinician and media enquiries.
It does not cover patient records, clinical data or research-participant data. Verada Clinic and Verada Research will operate under their own separate privacy notices, appropriate to health and research data and to the jurisdictions they operate in, published on their own services when those services launch.
3. Why we do not want your health data
Please do not send us information about your health, or anyone else's, through this website.
Health data is "special category" personal data under Article 9 of the UK GDPR and deserves protections this website is deliberately not built to provide. Our contact form is designed for business enquiries and is processed by Web3Forms, a form service that is not contracted to handle clinical information.
If you do include health information in a message, we will use it only so far as necessary to respond appropriately or to direct you elsewhere, and will then delete it unless we are legally required to keep it. If you are seeking treatment, please speak to your GP or another qualified clinician.
4. What we collect
Information you give us
- Contact form and correspondence data — your name, email address, organisation (if you give one), the type of enquiry you select, and the content of your message.
- Marketing preference — whether you ticked the optional box asking to receive occasional updates.
- Business relationship data — contact and organisational details of partners, advisers, investors, researchers, clinicians and suppliers we work with or are in discussion with.
Information collected automatically
- Technical and log data — our hosting provider records limited technical information such as IP address, browser type and pages requested, for security and service delivery.
- Anti-spam signals — our contact form records how long a page was open before submission and whether a hidden field was completed, purely to distinguish people from automated scripts. This is not used to profile you.
- Analytics — only if you accept analytics cookies. See our Cookie Policy.
We do not buy personal data, we do not sell it, and we do not use it for automated decision-making that produces legal or similarly significant effects.
5. Why we use it, and our lawful basis
| What we do | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Reply to your enquiry and manage the correspondence that follows | Legitimate interests — responding to people who contact us; and, where relevant, steps taken at your request before entering a contract |
| Build and manage partnerships, research collaborations, investor and supplier relationships | Legitimate interests; pre-contractual steps; performance of a contract |
| Operate, secure and improve this website, including spam prevention | Legitimate interests — running a secure, working website |
| Send you occasional updates about Verada | Consent — only if you ticked the optional box, and you can withdraw at any time |
| Website analytics | Consent — only if you accepted analytics cookies |
| Meet legal, regulatory and accounting obligations | Legal obligation |
| Establish, exercise or defend legal claims | Legitimate interests |
Where we rely on legitimate interests we have assessed that our interests do not override your rights and freedoms. You can object at any time — see Your rights.
6. Cookies
By default this site sets only what is strictly necessary to work and to remember your cookie choice. Optional analytics cookies are set only if you accept them, and you can change your mind at any time. Full detail, including names and durations, is in our Cookie Policy.
7. Who we share it with
- Form processing — our contact form is delivered by a third-party form service acting on our instructions under contract. It receives the contents of your message in order to deliver it to us.
- Spam protection — where enabled, Cloudflare, Inc. processes a verification check on form submissions. Cloudflare Turnstile does not use cookies for cross-site tracking.
- Hosting — this site is served by Vercel Inc., which processes request logs for delivery, security and performance.
- Web fonts — typefaces are currently served by Google Fonts, which receives your IP address when your browser requests them.
- Analytics — Google, but only where you have consented.
- Group companies — other Verada companies, for the purposes described here and under the same protections.
- Professional advisers — lawyers, accountants, insurers, where necessary.
- Regulators, authorities and courts — where the law requires it.
8. International transfers
Some of the providers above process data outside the UK, including in the United States. Where personal data leaves the UK we rely on UK adequacy regulations where they apply (including the UK Extension to the EU–US Data Privacy Framework), or on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for details of the safeguards in place.
9. How long we keep it
- Enquiries that go nowhere — up to 24 months from our last contact, then deleted.
- Business relationship records — for the life of the relationship and up to 6 years afterwards, in line with limitation periods and accounting requirements.
- Marketing list — until you unsubscribe, or after 24 months of no engagement.
- Server logs — short retention periods set by our hosting provider.
- Analytics — as set out in the Cookie Policy.
10. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate or incomplete data corrected;
- have your data erased in certain circumstances;
- object to processing based on legitimate interests, and to object to direct marketing at any time, without needing a reason;
- ask us to restrict processing in certain circumstances;
- receive data you gave us in a portable format, where processing is based on consent or contract; and
- withdraw consent at any time where we rely on it, without affecting anything done before you withdrew.
To exercise any of these, contact us using the details in section 14. We will respond within one month. There is no charge.
You also have the right to complain to the UK supervisory authority: the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; ico.org.uk. We would rather you came to us first so we can put things right.
11. Security
We apply technical and organisational measures appropriate to the risk: encryption in transit (HTTPS across the whole site), access controls on business systems, multi-factor authentication on administrative accounts, and confidentiality obligations on everyone who works with us. No transmission over the internet is ever completely secure, and information sent to this site is sent at your own risk.
12. Children
This website is aimed at professional and adult audiences. We do not knowingly collect personal data from anyone under 18 through it. If you believe a child has sent us personal data, tell us and we will delete it.
13. Changes to this notice
We update this notice when what we do changes. The version number and date at the top show when it last changed, and material changes will be flagged on this page.
14. Contact us
For anything in this notice, including requests to exercise your rights, contact our Data Protection Lead:
- Email: privacy@verada.health
- Contact form: verada.health/#contact
- Post: Data Protection Lead, Verada Health Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom