Privacy Policy

Last updated: 17 July 2026

Who we are

VeriRequest is a trading name of Wadard Ltd, a company registered in England and Wales (Company No. 13155846), registered office: Unit 6 Greencroft Works, Kirk Lane, Leeds, LS19 7LX. Wadard Ltd is registered with the Information Commissioner's Office (registration ZB250307). For anything in this policy, contact info@verirequest.co.uk.

Enquiries through our website

When you use our contact form we collect your name, email address, organisation, and the details of your enquiry. We use this information solely to respond to you and to provide the support you've asked about (legal basis: legitimate interests, or steps taken at your request prior to entering a contract). Form submissions are processed by Netlify, our website host. We do not add you to any marketing list.

Business-to-business outreach

We occasionally contact UK schools and organisations about our DSAR support services using professional contact details (such as school office email addresses) compiled from publicly available sources, including the Department for Education's Get Information About Schools register and school websites. We rely on legitimate interests as the legal basis for this business-to-business correspondence. Every message identifies who we are and includes a simple way to opt out; opt-out requests are honoured promptly and retained only so that we do not contact you again.

Client work

When a client engages us for DSAR support, we process personal data contained in the client's files as a processor acting on the client's documented instructions, under a written data processing agreement. Client material is transferred and stored securely, access is limited to those working on the engagement, and material is deleted after completion in line with the agreed retention terms.

Website analytics

We use Cloudflare Web Analytics, a privacy-focused service that does not use cookies and does not profile individual visitors.

Where data is stored

Our email and file systems run on Microsoft 365, with data stored in Microsoft's UK/EU data centres. Our website is hosted by Netlify.

How long we keep data

Enquiry correspondence is retained for as long as needed to handle the enquiry and for a reasonable period afterwards. Client files are deleted after engagement completion in line with the applicable data processing agreement. Opt-out records are kept indefinitely so we can honour them.

Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and the right to object — including an absolute right to object to direct marketing. To exercise any of these, email info@verirequest.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.