Privacy Policy

Last updated: January 2025

1. Introduction

Veridian Corp Limited ("we", "us", "our" or "Validiti") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our anti-money laundering (AML) compliance verification platform.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Legal Obligation: To comply with anti-money laundering regulations and other legal requirements
• Legitimate Interests: To provide our compliance verification services to estate agents and property sellers
• Contract: To fulfill our contractual obligations to our users
• Consent: Where specifically requested for optional services

3. Data We Collect

For Estate Agents:

• Company name and registration details
• Contact information (name, email, phone)
• Account credentials
• Transaction and compliance request data

For Property Sellers:

• Full name and date of birth
• Contact details (email, phone, address)
• Identity verification documents (passport, driving licence)
• Proof of address documents (utility bills, bank statements)
• Property ownership documents
• Biometric data for identity verification (facial images)

4. How We Use Your Data

We use your personal data to:

• Verify identity in accordance with AML regulations
• Verify property ownership and address
• Generate compliance reports for estate agents
• Prevent fraud and money laundering
• Communicate about the verification process
• Comply with legal and regulatory requirements

5. Third-Party Services

We use the following third-party services to provide our platform:

• Sumsub: Identity verification services (UK-based processing)
• DigitalOcean Spaces: Secure document storage (UK data center)
• SendGrid: Email communication services
• OS Postcodes API: Address verification
• HM Land Registry API: Property ownership verification

All our third-party processors are carefully selected and contractually bound to protect your data in accordance with GDPR requirements.

6. Data Storage and Security

• All data is stored securely in UK-based data centers
• We use industry-standard encryption for data in transit and at rest
• Access to personal data is restricted to authorized personnel only
• We implement regular security audits and updates
• We do not transfer your data outside the UK/EU

7. Data Retention

In accordance with AML regulations, we retain:

• Identity verification data: 5 years from the date of verification
• Transaction records: 5 years from completion
• Account information: Duration of account plus 5 years
• Marketing communications: Until consent is withdrawn

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (where legally permissible)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent (where applicable)

To exercise these rights, contact us at alan.i@validiti.co.uk

9. Cookies

We use essential cookies to:

• Maintain your session
• Ensure platform security
• Remember your preferences

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy periodically. We will notify users of material changes via email or platform notification.

12. Complaints

If you have concerns about our data processing, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

13. Contact Us

For any privacy-related questions or concerns:

Data Protection Contact: alan.i@validiti.co.uk
General Enquiries: contact@validiti.co.uk
Postal Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ