Legal

Privacy Policy

Last updated: 11 August 2026

This Privacy Policy explains how Verrian Ltd ("we", "us", "our") collects, uses, discloses, and safeguards your information when you visit shipproven.co.uk or interact with the ShipProven marketing site. We are the data controller for personal data processed through this site under UK GDPR and the Data Protection Act 2018.

1. Who we are

2. What personal data we process

The ShipProven marketing site is a static, prerendered website. It processes personal data ONLY when you actively contact us. Specifically:

• Email correspondence — when you email sales@verrian.co.uk, the waitlist inbox, or a member of the team, we process your email address and the contents of your message to reply.
• Meeting bookings — if you book a walkthrough through our public calendar link, that third-party scheduling provider (Cal.com) processes your name, email address and chosen time, and forwards the booking to us. Their processing is governed by their own privacy policy.
• Server access logs — our web server temporarily records the IP address, requested URL, referrer, user-agent and timestamp of each request for security and operational monitoring. Logs are rotated within 30 days.

We do not use marketing analytics, tracking pixels, advertising cookies, session recording, or third-party JavaScript SDKs on this site. If we add any in the future, this policy and a cookie-consent banner will be updated in the same change.

3. Lawful bases

• Legitimate interests (Art. 6(1)(f) UK GDPR) — to reply to your enquiry, book your meeting, and secure our website.
• Consent (Art. 6(1)(a) UK GDPR) — for any future non-essential cookie or marketing communication, we will request opt-in consent before processing.
• Legal obligation (Art. 6(1)(c) UK GDPR) — where we must retain records for tax, accounting or dispute resolution.

4. How long we keep it

We retain email correspondence for as long as it is useful to the ongoing conversation and, thereafter, for up to 24 months in archival storage unless a longer period is required by law. Server access logs are rotated within 30 days.

5. Sharing your data

We share the minimum data necessary with a small set of processors who help us operate the site:

• Cal.com Inc. — calendar bookings.
• Cloud infrastructure providers (Google Cloud Platform, Microsoft Azure) — hosting, mail routing and DDoS protection.
• GitHub Inc. — issue triage where a bug report inherently includes contact details.

We do not sell your personal data, and we do not use it for targeted advertising.

6. International transfers

Some processors listed above are located outside the United Kingdom. Where personal data is transferred outside the UK, we rely on adequacy decisions or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

7. Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, objection, and portability, and the right not to be subject to solely automated decision-making. To exercise these rights, email privacy@verrian.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

8. Security

The ShipProven marketing site is served over HTTPS only, hardened against common OWASP risks, and continuously scanned for vulnerabilities as part of the same production pipeline described on our landing page. Internal access to backups and logs is role-scoped and audit-logged.

9. Changes

We may update this policy from time to time. The date at the top of this page reflects the most recent revision.