Legal
Privacy Policy
Last updated: May 2025
Our commitment to data protection
Verdantia takes the handling of personal data seriously. This policy explains what information we collect when you use our website or engage with our services, how we use it, and what rights you have in relation to it.
We collect only what's necessary, hold it only as long as needed, and never sell it to third parties. If you have questions about anything in this policy, please get in touch through our contact page.
What data we collect
Contact form submissions
When you use our contact form, we collect your name, email address, and the content of your message. This is used solely to respond to your enquiry.
Website usage data
If you consent to analytics cookies, we collect anonymised data about how you navigate the site — pages visited, time spent, and general geographic region. No personal identifiers are associated with this data.
Cookie preferences
We store your cookie consent choices in your browser's local storage so we don't ask again on repeat visits. This data never leaves your device.
Client data (service engagements)
For clients engaging our services, we may process additional data relating to your organisation. This is governed by a separate data processing agreement and is handled with the same standards described here.
Legal basis for processing
Consent — for optional cookies and marketing communications, where you have explicitly agreed.
Legitimate interests — for responding to enquiries and maintaining the security and performance of our website.
Contractual necessity — for data processed in the course of delivering our services to clients.
Legal obligation — where we are required to retain or disclose data under applicable law.
How we use your data
To respond to messages and enquiries submitted via our contact form.
To understand how visitors use our website and improve its content and structure.
To deliver services to clients who have engaged us — ESG reporting, data gathering, or readiness reviews.
To maintain the security and integrity of our website and systems.
To comply with applicable legal and regulatory obligations.
Data sharing and third parties
We do not sell personal data to third parties. We may share data with trusted service providers who assist in operating our website (such as analytics platforms), subject to data processing agreements. Where advertising cookies are enabled, certain data may be processed by advertising networks in accordance with their own privacy policies.
We may also disclose data where required by law, court order, or to protect the rights and safety of others.
How long we keep data
Contact form enquiries are retained for up to 12 months from the date of last contact, unless an ongoing client relationship requires longer retention. Analytics data is held in aggregated, anonymised form with no fixed expiry. Client engagement data is retained for as long as necessary to fulfil our contractual obligations and comply with legal requirements.
You can request deletion of your data at any time by contacting us.
Data protection measures
Data in transit is protected by HTTPS/TLS encryption.
Access to personal data is restricted to those who need it for a specific, defined purpose.
We review and update our data handling practices regularly.
In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.
Your rights
Right of access — request a copy of the personal data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure — request deletion of your personal data, subject to legal retention obligations.
Right to data portability — receive your data in a structured, machine-readable format where applicable.
Right to object — object to processing carried out on the basis of legitimate interests.
Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us via our contact page.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: avoid filling out contact forms, account registrations, or any data-submitting features; disable cookies through your browser settings (see our Cookie Policy for more details); or contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out to us via the Contact page. We will process your request promptly.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, the "last updated" date at the top of this page will be revised. We encourage you to review this policy periodically.