Privacy Policy
This policy explains what personal data EcoVerify Limited (“we”, “us”, “our”) collects through our website, why, and what rights you have. It was last updated in September 2026 and replaces all earlier versions.
Who we are
EcoVerify Limited is the data controller for the personal data described in this policy.
Registered office: Unit 9, Fernleigh Business Park, Leicester, LE19 4AQ
Company number: 14693655
VAT registration: GB 449 8732 41
Privacy contact: Steve Bland, steve@ecoverify.co.uk, +44 7903 103983.
We do not currently meet the threshold requiring a formal Data Protection Officer. This will be kept under review as the business grows.
What data we collect
- Identity and contact data: name, email address, phone number, job title and employer, where provided
- Enquiry and engagement data: the content of messages you send us, and records of our work together
- Technical and usage data: IP address, browser type, pages visited and time on site, collected automatically
How we use your data, and on what basis
| Purpose | What we use | Lawful basis |
|---|---|---|
| Responding to enquiries made via the Contact Us form | Name, email address, phone number, message content | Legitimate interests — necessary to respond to a request you have made of us (Art 6(1)(f) UK GDPR) |
| Managing an ongoing client relationship (proposals, scorecard work, invoicing) | Name, email, phone number, company details, correspondence | Performance of a contract, or steps taken at your request before entering one (Art 6(1)(b)) |
| Contacting former clients about renewing an expiring EcoVadis scorecard, within 12 months of expiry | Name, email address, previous engagement details | Legitimate interests, relying on the PECR “soft opt-in” for existing customers (reg 22 PECR) — you can opt out at any time |
| Understanding how visitors use our website, to improve it | Aggregated, cookie-less visitor statistics (pages viewed, session length, general location), via Cloudflare Web Analytics | Legitimate interests (Art 6(1)(f) UK GDPR) — no cookies or similar tracking technologies are used, so PECR's cookie-consent rules don't apply; you can still opt out via Cookie Preferences |
Marketing to former clients
If your EcoVadis scorecard is due to expire, we may contact you about renewing it, for up to 12 months after expiry, using the contact details from your previous engagement. This relies on the existing-customer “soft opt-in” under regulation 22 of PECR, which permits this without separate consent provided the message concerns similar services and you are given a clear way to opt out. Every such message will include an unsubscribe or opt-out option, and you can also opt out at any time by emailing steve@ecoverify.co.uk.
International data transfers
Cloudflare and Resend are based in the United States. Where your data is transferred there, we rely on the following safeguards:
- The UK extension to the EU-US Data Privacy Framework, where the recipient is certified under it, and/or
- The UK's International Data Transfer Addendum to the EU Standard Contractual Clauses
How we store and protect your data
Your data is stored on secure, cloud-based servers operated by our processors. We take reasonable technical and organisational steps to protect it against unauthorised access, loss or misuse.
How long we keep your data
Enquiry and prospective-client data is kept for 12 months from your last contact with us, after which it is deleted unless a live engagement or legal requirement means it should be kept longer. Data relating to completed client engagements is kept for as long as needed to support that relationship and any renewal outreach (see above), and in line with our standard business record-keeping practice.
Cookies
Our website does not currently set any cookies. Visitor statistics are collected using Cloudflare Web Analytics, which measures how the site is used without cookies or any other technology stored on your device. If we introduce a feature that does use cookies in future — for example, if we start using Google Ads — we will update this section and put a consent banner in place before any such cookie is set.
You can opt out of website statistics at any time using the Cookie Preferences link in the footer of our website. You can also control cookies through your browser settings; if we do introduce cookies in future, blocking some may affect how the site functions.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected, or incomplete data completed
- Request erasure of your data, in certain circumstances
- Restrict or object to our processing of your data, in certain circumstances
- Receive your data in a portable format, or have it transferred directly, in certain circumstances
- Withdraw consent at any time, where we rely on consent
- Complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data
To exercise any of these rights, contact steve@ecoverify.co.uk. We will respond within one month, or within three months for complex or numerous requests — if we need the extra time, we'll tell you within the first month and explain why.
Complaints
If you have a complaint about how we've handled your personal data, please contact steve@ecoverify.co.uk in the first instance. We will acknowledge your complaint within 30 days of receiving it, and handle it without undue delay after that, keeping you informed of progress and the outcome. If you remain unsatisfied, you can escalate to the Information Commissioner's Office.
Children
Our website and services are directed at businesses, not children. We do not knowingly collect data from children.
Changes to this policy
We review this policy periodically and will update the date at the top when we do.
Cookie Preferences
Website statistics: on