This Privacy Policy explains how Veritron Compliance Group (“we”, “us”, “our”) collects, uses and protects personal data when you visit veritroncompliance.com or purchase our services. We are committed to handling your data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection law.
Who We Are
Veritron Compliance Group is a website compliance audit firm with offices in San Antonio, Texas, United States and Hoofddorp, Netherlands.
Data controller contact: audit@veritroncompliance.com
What Data We Collect
We collect personal data in the following circumstances:
- When you submit the contact or audit request form on our website (name, email address, company name, website URL)
- When you purchase an audit package (name, email address, payment information processed by Square)
- When you request a sample report (name and email address)
- Automatically when you visit our website (IP address, browser type, pages visited, time spent on site) via Google Analytics
- Via cookies placed on your device with your consent
How We Use Your Data
We use your personal data for the following purposes:
- To deliver the compliance audit services you have purchased
- To respond to enquiries submitted through our contact form
- To send your requested sample report
- To communicate with you about your audit, including delivering your report
- To improve our website and services through analytics
- To comply with our legal obligations
Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract: processing necessary to deliver the services you have purchased
- Legitimate interests: responding to enquiries and improving our services
- Consent: placing non-essential cookies and sending marketing communications where you have opted in
- Legal obligation: retaining financial records as required by applicable law
Cookies
Our website uses cookies. Strictly necessary cookies are placed automatically. Non-essential cookies, including Google Analytics, are only placed after you have given your consent through our cookie consent banner. You can withdraw your consent at any time by clicking the cookie settings link in the footer.
Third Parties
We share personal data with the following third parties where necessary to deliver our services:
- Square: payment processing for audit purchases
- Google Analytics: website analytics (only with your consent)
- WPForms: processing of form submissions on our website
- Hostinger: website hosting
We do not sell your personal data to any third party under any circumstances.
Data Retention
We retain personal data for as long as necessary for the purpose it was collected. Specifically:
- Audit client data is retained for 3 years following delivery of the audit report
- Contact form submissions are retained for 12 months
- Financial records are retained for 7 years as required by applicable law
- Analytics data is retained in accordance with Google Analytics default settings
International Transfers
Our servers are located within the European Economic Area. Where we use third-party services that transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.
Your Rights
Under GDPR you have the following rights regarding your personal data:
- The right to access the personal data we hold about you
- The right to correct inaccurate personal data
- The right to request deletion of your personal data
- The right to restrict processing of your personal data
- The right to data portability
- The right to object to processing based on legitimate interests
- The right to withdraw consent where processing is based on consent
To exercise any of these rights, contact us at audit@veritroncompliance.com. We will respond within 30 days.
Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with your national data protection authority. In the United States this is the Federal Trade Commission. In Iceland this is Personuvernd (personuvernd.is). In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. Continued use of our website after any changes constitutes acceptance of the updated policy.
Contact
For any questions about this Privacy Policy or how we handle your personal data, contact us at audit@veritroncompliance.com.