Precise about people, by design.

Lawful basis

Verentis processes business contact information about people in their professional roles under legitimate interests (UK GDPR / EU GDPR Article 6(1)(f)). We provide customers with a legitimate interests assessment template covering purpose, necessity and balancing, and we expect each customer to complete their own.

Data minimisation

We collect what is needed to decide whether a person is relevant to a specific business use case and how to start a respectful conversation: name, role, employer, professional sources and a business contact route. We do not collect special category data, home addresses, or personal social media.

Provenance on every field

Every fact is stored with the source it came from and the date it was observed. This makes our output auditable, lets customers answer “where did you get my details?” precisely, and lets stale data be identified and removed.

Transparency (Article 14)

When a customer contacts someone using Verentis, the first message includes a short notice saying who they are, where the details came from, and how to object. Customers can adjust the wording but not remove it.

Electronic marketing rules

Under PECR, unsolicited B2B email to corporate subscribers is permitted with clear sender identity and a working opt-out. Sole traders and some partnerships are treated as individuals and need consent. Rules differ across the EU (Germany, for example, generally requires prior consent), so Verentis applies jurisdiction checks before anything can be sent.

Sources we use, and ones we don't

We use company websites, public registries and filings, job postings, conference and webinar agendas, and published articles, plus data providers customers connect with their own contracts. We do not scrape LinkedIn or automate activity on it, and footprint checks are restricted to an allow-list of professional sites.

Monitoring and tracking

Tracking is limited to the accounts a customer chooses to target and to public professional signals: company pages, filings, registries, job posts, talks and publications. Footprint checks use a reviewed allow-list of professional sources, not hundreds of social sites. Re-checks run on a fixed cadence, unchanged data is not duplicated, and an objection or opt-out stops tracking for that person immediately.

Suppression, retention and rights

Objections and opt-outs go to a suppression list that applies across a customer's workspace. Unused records are purged on a fixed retention schedule. Access and erasure requests are handled within statutory timescales.

This page describes our approach. It is not legal advice, and each customer remains responsible for its own use of personal data. Questions: privacy@verentis.ai.