Privacy Policy

1. Introduction

Verdaq respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share information when you visit our website or submit enquiries through our contact forms and pilot registration.

2. Data we collect

When you submit a form on Verdaq (for example, the contact page or homepage pilot sign-up form), we may collect:

• Your name
• Email address
• Phone number
• Company or organisation name
• Your role or audience category (e.g., developer, consultant, provider, investor)
• Message or enquiry details
• Credit types you are interested in (e.g., BNG, nutrient, water, carbon)
• Typical requirement timing or client volume
• Geographic regions or catchments of interest

We do not collect sensitive personal data (such as health information or biometric data) through this website.

3. How we use your data

We use the information you provide for the following purposes:

• To respond to your enquiries and provide information about Verdaq services
• To manage pilot registration and getting you started
• To send transactional communications related to your submission (e.g., confirmation emails)
• To improve our platform, website and user experience
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal basis for processing

Our legal basis for processing your personal data is legitimate interest (to respond to enquiries and manage pilot relationships) and, where applicable, consent (for optional marketing communications). You may withdraw consent at any time by contacting us at hello@verdaq.ai.

5. Data sharing and subprocessors

We use trusted third-party service providers to host and operate the Verdaq platform. These providers process data on our behalf under appropriate data-processing agreements:

• Lovable Cloud — cloud infrastructure, database and backend services
• Lovable Emails — transactional email delivery

We may also share data with professional advisers (such as legal or accounting firms) where necessary, and with regulators or law enforcement if required by law.

6. Data retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected — typically while your enquiry or pilot relationship remains active, and for a reasonable period thereafter to manage any follow-up or legal obligations. If you wish to have your data deleted earlier, please contact us at hello@verdaq.ai.

7. Cookies and analytics

Our website uses standard cookies and similar technologies to ensure proper functionality, security and basic analytics. These may include session cookies and preference cookies. We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings.

8. Your rights

Depending on your location, you may have rights regarding your personal data, including:

• The right to access the data we hold about you
• The right to correct inaccurate or incomplete data
• The right to request deletion of your data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent

To exercise any of these rights, please contact us at hello@verdaq.ai. We aim to respond within one calendar month.

9. Data security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encrypted data transmission (TLS/SSL), access controls on our database, and regular security reviews. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. International transfers

Our infrastructure providers may process data in jurisdictions outside the United Kingdom and European Economic Area. Where this occurs, we rely on appropriate safeguards (such as Standard Contractual Clauses) to ensure an adequate level of protection for your personal data.

11. Children

Our website and services are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. We will post the revised policy on this page with an updated effective date. Significant changes may also be notified by email where we have your contact details.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: hello@verdaq.ai