How we handle personal information
Last updated: 17 October 2026. This notice is intended for Veridian Business Group's basic consultancy website and business enquiries. It must be reviewed if the site, CRM or outreach operations change.
Who we are
Veridian Business Group Ltd is the data controller for information collected for our own enquiries and business development. Company number SC880734, registered in Scotland. Registered office: 141 Craigmillar Castle Avenue, Edinburgh, United Kingdom, EH16 4DN.
For privacy requests, contact admin@veridianbusinessgroup.com.
What we collect
When you email us or prepare an enquiry through this website, we may receive your name, business name, email address, services requested and your message. For relevant business-to-business outreach, we may record publicly available professional contact details, the source, business context, communications and objections.
How we use it
We use personal data to respond to enquiries, discuss a potential contract, prepare proposals, deliver agreed services, maintain security and records, and undertake relevant business-to-business prospecting where permitted. We do not treat an enquiry as consent to unrelated marketing.
Lawful bases and objections
Depending on the circumstances, our lawful basis may be legitimate interests (responding to professional enquiries and proportionate business development), steps requested before a contract, a contract or legal obligations. You can object to direct marketing at any time and we will stop marketing to you; limited details may be retained to respect your objection.
Providers and where data is handled
Our business email is provided by IONOS. Website hosting may be via IONOS or Cloudflare Pages, depending on the deployed environment. If we later activate online form processing or sales automation, we may also use a secure workflow platform and a CRM; we will update this notice to name those services and explain relevant processing before enabling them. Access or processing outside the UK, including Malaysia, will require applicable safeguards and access controls.
Contact form
On the default static website, the enquiry button opens your own email application with a prepared message; the website does not itself send or save the form contents. If we activate the server-side submission option, a fraud-prevention verification service and workflow service will handle submissions; the notice and operational practices will be updated before that feature is enabled.
Retention
Our intended policy is to review unanswered and completed business enquiries after 12 months, retaining information longer only where relevant to an ongoing relationship, dispute or legal requirement. Business and accounting records may need longer statutory retention. Objection and suppression information may be retained as needed to prevent further unwanted marketing. Actual retention settings and procedures must reflect these commitments.
Your rights
Subject to applicable conditions, you may request access, correction, erasure or restriction, object to processing and raise concerns with the UK Information Commissioner's Office at ico.org.uk.
Cookies and analytics
The basic website does not intentionally set marketing or analytics cookies. If new analytics, embedded booking, or security tools are introduced, any relevant notices and permissions will be reviewed before use.
This notice describes the intended starter configuration. The company must check that its published notice matches its actual hosting, CRM, email, retention and cross-border access arrangements.