PRIVACY POLICY

VeriComp Consulting Ltd

Last updated: 22/11/2025

1. Introduction

Welcome to VeriComp Consulting Ltd (“VeriComp”, “we”, “our”, “us”). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose and protect your information when you:

• visit our website https://www.vericompliance.com

• contact us

• engage our consulting, advisory, audit or resourcing services

• interact with us from the UK, EU, USA, UAE (including Dubai), Egypt, Saudi Arabia, the Middle East and North Africa (MENA) region, or any other region where we operate

By using our website or services, you agree to the practices described in this policy.

Our services are designed for businesses and professional users — we do not knowingly collect data from children.

2. Who We Are

VeriComp Consulting Ltd is a UK-registered consulting firm providing AML, sanctions, regulatory compliance, internal audit, fraud prevention, risk management and professional resourcing solutions to clients in the UK and internationally, including the USA and the Middle East and North Africa (MENA) region, such as the UAE, Dubai, Egypt and Saudi Arabia.

Registered Office : 32 Allington Avenue Lichfield WS13 6PF United Kingdom

Company Number : 16429466

Email : info@vericompliance.com

Phone : +44 7459 228546

VeriComp Consulting Ltd is the data controller for all personal data processed under this Privacy Policy.

This policy is based primarily on UK GDPR and the Data Protection Act 2018, while also aligning with EU GDPR and the privacy expectations of other jurisdictions where we operate.

3. What Personal Data We Collect

We may collect the following categories of personal information:

Identity Data : Name, job title, employer, role, professional background

Contact Data : Email address, telephone number, business address or country.

Technical Data : Automatically collected through cookies, analytics or server logs: IP address, browser type, device information, time zone settings, referring URLs.

Usage Data : Information about how you interact with our website and services..

Marketing & Communication Data : Preferences for receiving insights, updates, and marketing communications

International Client Data : Additional contact or engagement information required for delivering services to clients in the USA, the Middle East and North Africa (MENA) region—including the UAE, Dubai, Egypt, Saudi Arabia—and other global regions.

4. How We Use Your Personal Data

We use your information to:

• Provide AML, sanctions, advisory, auditing, risk and compliance services

• Respond to your enquiries and manage ongoing relationships

• Improve our website, services and business operations

• Send relevant updates, industry insights or marketing (with consent)

• Deliver services internationally, including remote collaboration

• Comply with legal, regulatory, audit and recordkeeping obligations

We do not use your data for automated decision-making or profiling.

5. Legal Bases for Processing (UK & EU GDPR)

We rely on one or more of the following lawful bases:

• Contractual Necessity: To provide services or fulfil a contract.

• Legal Obligation: Compliance with UK or international laws relating to AML, sanctions, fraud, regulatory audits or financial crime prevention.

• Legitimate Interests,

  For activities such as:

• business operations and service improvement

• client relationship management

• website analytics

• professional communications We ensure our legitimate interests do not override your rights.

• Consent: Used for marketing communications or where required for international jurisdictions (e.g., certain U.S. states).

You may withdraw consent at any time.

6. Sharing Your Personal Data

We may share information with:

• Trusted IT, cloud, and hosting providers

• Website analytics and security service providers

• Professional advisers (lawyers, accountants, auditors)

• UK or international regulatory or law enforcement bodies

• Business partners or affiliates assisting with service delivery

• Entities involved in mergers, acquisitions or restructuring

We never sell or rent your personal information.

All third parties must protect your data and use it only for permitted purposes.

7. International Data Transfers

As a UK-based consultancy with international operations, we may transfer or access personal data from outside the UK or EU, including:

• USA

• United Arab Emirates (UAE)

• Dubai (including DIFC or ADGM jurisdictions where applicable)

• Egypt

• Saudi Arabia

• Countries across the Middle East and North Africa (MENA) region

• Other countries where clients or partners are located

We apply appropriate safeguards for all international transfers, including:

• UK/EU Standard Contractual Clauses (SCCs)

• Data Protection Addendums (DPAs)

• Encryption and secure transmission controls

• Role-based access restrictions

• Secure international communication systems

Local privacy expectations we consider

Where possible, we also take into account privacy expectations and applicable data protection principles in jurisdictions where we operate or provide services, including but not limited to:

• UAE – Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

• Dubai International Financial Centre (DIFC) – DIFC Data Protection Law

• Egypt – Personal Data Protection Law No. 151 of 2020

• Saudi Arabia – Personal Data Protection Law (PDPL)

• United States – state-level privacy laws such as CCPA/CPRA

• Additional Middle East and North Africa (MENA) jurisdictions as relevant

Our primary compliance obligations remain under UK GDPR, and all international transfers are handled with appropriate safeguards.

8. Data Retention

We retain personal data only for as long as necessary to:

• deliver services

• meet contractual obligations

• comply with legal, regulatory and professional obligations

• resolve disputes

• maintain business records

Once retention periods expire, data is securely deleted or anonymised.

9. Your Data Protection Rights

Depending on your jurisdiction (UK, EU, or international), you may have the right to:

• Access your personal data

• Request correction of inaccurate information

• Request deletion (where permissible)

• Restrict or object to processing

• Withdraw consent (where applicable)

• Request data portability (UK/EU GDPR)

• File a complaint with the UK ICO or your local regulator

To exercise these rights, email: info@vericompliance.com

10. Cookies

Our website uses cookies and similar technologies to:

• improve user experience

• analyze website performance

• support website security

• deliver optional analytics and marketing (with consent)

We follow UK PECR rules for cookie consent. You can adjust cookies via your browser settings at any time.

A detailed explanation is available in our Cookie Policy.

11. Security

We use appropriate technical and organizational measures to safeguard your data, including:

• encrypted data transmission

• secure hosting and access controls

• cybersecurity monitoring

• staff training and confidentiality agreements

• incident detection and response mechanisms

• secure international collaboration tools

While we apply strong protections, no system is ever fully secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

13. Contact Us

VeriComp Consulting Ltd

32 Allington Avenue

Lichfield

WS13 6PF

United Kingdom

Email: info@vericompliance.com

Telephone: +44 7459 228546