vardiqPrivacy notice
Want to be removed? Go straight to the opt-out page. It takes effect immediately, applies to every Vardiq customer, and you don't need an account or a reason.
Who we are
[Registered company name], company number [number], registered at [registered office address], trading as Vardiq.
We are the controller for the business-contact database described below. ICO registration number: [number]. For anything in this notice, contact .
What this notice covers
We hold a database of UK businesses so our customers can find and contact businesses likely to want what they sell. Most of that is information about companies, and information about a company isn't personal data. Some of it — a sole trader's business email, a director's name — is personal data about an identifiable person. This notice is about that part.
What we collect
- Business name, trading address, postcode and location
- Website address, and the business contact details published on it: general email addresses, phone numbers, contact-form and social links
- Company number, legal form, SIC codes and incorporation date, from the public register
- Names and roles of directors and people with significant control, from the public register
- A short description of what the business does, and publicly visible trading signals
- Whether a phone number is registered with the TPS or CTPS
We do not collect special category data, personal (non-business) email addresses, home addresses, or officers' residential details. We don't guess email addresses, and we don't buy lists from data brokers.
Where we get it
| Source | What we take from it |
|---|---|
| Companies House | Legal identity, company number, officers and PSCs, SIC codes |
| Food Standards Agency hygiene register | Existence and address of food businesses |
| OpenStreetMap | Location, website and published contact tags (© OpenStreetMap contributors, ODbL) |
| Google Places | Trading presence and website, where used |
| The business's own website | Published business contact details and a description of what they do |
All of these are public. Our crawler identifies itself, respects robots.txt, and
reads at most a few pages of any site.
Why we process it, and our lawful basis
Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): operating a service that helps UK businesses find relevant business customers. We've carried out a Legitimate Interests Assessment and you can ask us for a summary of it.
Where we or our customers send marketing, we also follow PECR. In practice:
- We only offer email as a channel for businesses we've confirmed are limited companies, LLPs or PLCs. If we can't confirm it — including where we simply don't know — we treat the business as an individual and don't offer an email channel for cold contact.
- We only mark a phone number callable if it's been screened against the TPS and CTPS and found clear within the last 28 days. Unscreened numbers are never presented as callable.
- Every marketing email drafted in our platform carries the sender's identity and a way to opt out.
Who sees it
Our customers, inside our platform, and only to contact businesses about their own products. They're contractually prohibited from reselling it, publishing it, or using it to build a competing dataset. We don't sell the database.
Our suppliers who process data on our behalf — hosting, email delivery, and the AI provider that drafts outreach text — act on our instructions only. [List the processors actually used, and where they host.]
How long we keep it
[e.g. "We keep a business record for up to 18 months after we last refreshed it, unless a customer is actively engaged with it."]
If you opt out we keep a minimal record of the opt-out itself — indefinitely and deliberately — because that's the only way to be sure you aren't added back the next time we refresh from a public source. That record holds nothing beyond what's needed to suppress you.
Your rights
You can ask us to tell you what we hold about you and where it came from; correct anything inaccurate; delete it or restrict what we do with it; or stop using it.
For direct marketing, the right to object is absolute. If you object, we stop. There's no balancing exercise and you don't have to give a reason.
The fastest route is the opt-out page. You can also email and we'll respond within one month.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, helpline 0303 123 1113. We'd rather you told us first so we can put it right.
Automated decision-making
We don't make automated decisions with a legal or similarly significant effect on anyone. Our platform ranks businesses by how well they match a customer's brief, to order a list a person then reviews. A person decides who to contact and writes or approves the message.
Changes
If we change this notice we'll update it here and change the date at the top.