Privacy & Cookie Policy
This Global Privacy & Cookie Policy explains how Varentiss Group ("we", "us", "our") collects, uses, shares, and protects personal data when you visit our website, contact us, or use our services. It is intended to address requirements under the EU GDPR, the UK GDPR, and applicable US state privacy laws (including California).
Last updated: 30 December 2025
1. Who we are
Varentiss Group is the controller (or "business" under certain US state laws) for personal data processed in connection with this website and our marketing and business development activities.
Contact: info@varentissgroup.com
2. Scope
This policy applies to personal data we process about website visitors, prospective customers, customers, and business contacts. It does not cover third‑party websites you may access via links on our site.
3. Personal data we collect
Contact & enquiry details
Name, company, email address, phone number (if provided), message content, and other details you choose to share.
Usage & device data
IP address, browser type, device identifiers, pages viewed, approximate location (derived from IP), and diagnostics.
Preferences & analytics
Small files stored on your device to enable core site functions and, where permitted, to analyse site performance.
4. How we use personal data
- To respond to enquiries and communicate with you.
- To provide and improve our services and website.
- To maintain security, prevent fraud, and troubleshoot issues.
- To comply with legal obligations and enforce our terms.
- Where permitted, to understand how our site is used and improve content and performance.
5. Legal bases (EU/UK GDPR)
Where the EU GDPR or UK GDPR applies, we rely on one or more of the following legal bases:
- Contract – to take steps at your request before entering into a contract and to perform a contract with you.
- Legitimate interests – to operate our business, respond to enquiries, and improve our services, balanced against your rights.
- Consent – for non‑essential cookies and similar technologies where required, and for certain marketing communications where applicable.
- Legal obligation – to meet applicable laws, regulations, and lawful requests.
6. Cookies and similar technologies
Cookies are small text files stored on your device. We use essential cookies that are required for the site to function. We may also use functional and analytics cookies. Where required by law (including in the EU/UK), we will request your consent before setting non‑essential cookies.
How to control cookies
- Use your browser settings to delete or block cookies, or to be alerted when cookies are set.
- You can withdraw cookie consent at any time by clearing site data in your browser and revisiting the site.
- If your browser supports it, you may also use privacy signals such as Global Privacy Control (GPC) where applicable.
Note: Blocking some cookies may impact site functionality.
7. Sharing and disclosures
We may share personal data with:
- Service providers/processors who support website hosting, IT, analytics, communications, and security.
- Professional advisers (e.g., legal, accounting) where necessary.
- Authorities if required by law or to protect rights, safety, and security.
- Business transfers in connection with a merger, acquisition, or sale of assets (subject to appropriate safeguards).
We do not sell personal information. We do not use your personal data for cross‑context behavioural advertising unless explicitly stated and permitted by law.
8. International transfers
If we transfer personal data outside the UK/EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA) or Addendum, and additional measures where required.
9. Data retention
We keep personal data only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. Enquiry data is typically retained for a reasonable period to manage our relationship and maintain records of communications.
10. Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. No method of transmission or storage is 100% secure, but we work to maintain safeguards proportional to the risk.
11. Your rights
Your data protection rights
Depending on your location and applicable law, you may have the right to access, correct, delete, restrict, object to processing, and request portability of your personal data, and to withdraw consent where processing is based on consent.
Supervisory authorities
If you are in the UK, you may complain to the Information Commissioner’s Office (ICO). If you are in the EEA, you may complain to your local supervisory authority.
State privacy rights
Residents of certain US states (including California, Colorado, Connecticut, Virginia, and Utah) may have rights to know/access, delete, correct, and opt out of certain processing. You may also have the right to appeal a refusal of a request, where applicable.
To exercise your rights, contact us at info@varentissgroup.com. We may need to verify your identity before fulfilling requests. Authorised agents may submit requests where permitted by law, subject to verification.
California notice
We do not sell personal information. If we process personal information for purposes that constitute “sharing” under the CPRA (for example, certain analytics), you may request to opt out. Where required, we will honour opt‑out preference signals such as Global Privacy Control (GPC).
12. Children
Our website and services are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
13. Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date at the top of this page when changes are made.