Privacy Policy

1. Who we are

Versed Global Ltd ("Versed Global", "we", "us", "our") is a UK-registered consultancy providing Salesforce CRM design and build, trust and foundation fundraising support, and CRM training and support services.

Registered address:

Company number: 16933204
Email: hello@versedglobal.com

We are the data controller for personal data collected through this website and our client portals. We are not currently required to register with the Information Commissioner's Office (ICO) as a data controller, but we comply with UK GDPR and the Data Protection Act 2018 in all our data handling activities.

2. Data we collect

We collect personal data in the following ways:

Contact form and email enquiries

• Name, email address, organisation name, telephone number (where provided)
• The content of your message or enquiry

Client portals

• Project status portal: Email address (used to look up your project record)
• Web design portal: Name, email address, organisation, password (stored as a one-way hash), and project-related data entered by you

Analytics and cookies

• Device and browser information, IP address (anonymised where possible), pages visited, time on site, referral source — collected via Google Analytics where you have given consent

Marketing and advertising

• Aggregated, pseudonymous data collected via LinkedIn Insight Tag and Meta Pixel — only where you have given consent

Data you give us directly

• Any information you share with us by email, phone or in meetings as part of an engagement or enquiry

3. How we use your data

• To respond to enquiries and provide the services you have requested
• To manage your client portal account and display your project information
• To fulfil our contractual obligations to you
• To improve our website and understand how it is being used
• To send service-related communications (not marketing) where required
• To comply with our legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Lawful basis

Processing activity	Lawful basis (UK GDPR Art. 6)
Responding to contact form enquiries	Legitimate interests (Art. 6(1)(f)) — responding to your enquiry
Delivering contracted services	Contract (Art. 6(1)(b))
Client portal account management	Contract (Art. 6(1)(b))
Analytics cookies (Google Analytics)	Consent (Art. 6(1)(a))
Marketing cookies (LinkedIn, Meta)	Consent (Art. 6(1)(a))
Legal obligations (e.g. accounting records)	Legal obligation (Art. 6(1)(c))

5. Third parties we share data with

We share personal data only with the following categories of third parties, and only to the extent necessary for the purpose described:

Third party	Purpose	Location
Salesforce (CRM platform)	Storing and managing project and client data	USA (Standard Contractual Clauses apply)
Google Analytics	Website analytics (consent required)	USA (Standard Contractual Clauses apply)
LinkedIn (Insight Tag)	Campaign measurement (consent required)	USA (Standard Contractual Clauses apply)
Meta (Facebook Pixel)	Campaign measurement (consent required)	USA (Standard Contractual Clauses apply)
FormSubmit / email provider	Routing contact form submissions to our inbox	See provider's privacy policy
Namecheap (web hosting)	Website and file hosting	USA (Standard Contractual Clauses apply)

We do not sell your personal data to third parties.

6. International transfers

Some of our third-party service providers are based outside the UK. Where we transfer data outside the UK, we ensure appropriate safeguards are in place — in most cases, UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) approved by the ICO.

7. How long we keep your data

Data type	Retention period
Contact form enquiries (not converted to clients)	12 months from last contact
Client project records	Duration of engagement plus 6 years (UK limitation period)
Portal account data	Until you request deletion or 12 months of inactivity
Analytics data	Up to 26 months (controlled by Google Analytics settings)
Financial and accounting records	6 years (Companies Act requirement)

8. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data (subject to legal obligations)
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@versedglobal.com. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113

9. Cookies

We use cookies to make our website work and (with your consent) to understand how it is used. You can manage your preferences at any time. See our Cookies Policy for the full list of cookies and how to control them.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Significant changes will be communicated more prominently where appropriate.

11. Contact us

For any questions about this Privacy Policy or how we handle your personal data:

• Email: hello@versedglobal.com
• Website: versedglobal.com/contact