Privacy Policy
Version: 1.0
Effective Date: 28 Apr 2025
Who We Are
Data We Collect and Purpose
Sharing of Data
Legal Basis for Processing
Legitimate Interests
Data Retention
International Data Transfers
Your Data Protection Rights
Policy Updates
Contacting Us
Version: 1.0
Effective Date: 28 Apr 2025
Who We Are
Data We Collect and Purpose
Sharing of Data
Legal Basis for Processing
Legitimate Interests
Data Retention
International Data Transfers
Your Data Protection Rights
Policy Updates
Contacting Us
Verity SIA (“v3rity”, “we”, “our”, or “us”) strives to protect your privacy. This Privacy Policy describes our organization and our methods for collecting and managing your personal information along with our practices for information sharing and protection and your available privacy rights. Our website at v3rity.com and the v3rity verification platform operate under the name Services for personal data processing.
V3rity requires you to create an account to use our services. During registration we collect and process your personal information to operate and protect your account. We refer to this as “Account Data” and process it as a controller.
We process information about your workplace position along with your earnings and economic history (known as “Verification Data”) at the request of our clients. Our Clients include prospective employers together with recruitment agencies and financial institutions and their appointed service providers. Our Services enable data validation by performing comparisons between different datasets including payroll records from tax authorities (including HMRC) and bank information. The verification process reveals matched information which we call Verification Data. The sharing of your Verification Data with a client depends on your specific authorization for them to obtain this data from us.
When we process Verification Data solely to execute a client request we function as data processors.
The client controls your data through their privacy policy which you should review for controller data practices.
We operate as controllers when we analyze your Account Data alongside Verification Data and Technical Data for internal purposes like data storage and sending service communications. This Privacy Policy outlines the specific procedures for handling personal information during controller operations.
You can reach out to us using the contact information provided in this Privacy Policy whenever you have questions regarding our personal data handling practices.
V3rity requires you to create an account to use our services. During registration we collect and process your personal information to operate and protect your account. We refer to this as “Account Data” and process it as a controller.
We process information about your workplace position along with your earnings and economic history (known as “Verification Data”) at the request of our clients. Our Clients include prospective employers together with recruitment agencies and financial institutions and their appointed service providers. Our Services enable data validation by performing comparisons between different datasets including payroll records from tax authorities (including HMRC) and bank information. The verification process reveals matched information which we call Verification Data. The sharing of your Verification Data with a client depends on your specific authorization for them to obtain this data from us.
When we process Verification Data solely to execute a client request we function as data processors.
The client controls your data through their privacy policy which you should review for controller data practices.
We operate as controllers when we analyze your Account Data alongside Verification Data and Technical Data for internal purposes like data storage and sending service communications. This Privacy Policy outlines the specific procedures for handling personal information during controller operations.
You can reach out to us using the contact information provided in this Privacy Policy whenever you have questions regarding our personal data handling practices.
Who We Are
V3rity is the Employment and Income Verification service that automates and simplifies the background check process. It ensures reliable job history and salary details, helping employers, background checkers, and financial services make informed decisions quickly and securely.
Website: v3rity.com
Company: Verity SIA (registration number 40203595585)
Address: Latvia, Riga, Kuģu iela 28 - 5, LV-1048
V3rity is the Employment and Income Verification service that automates and simplifies the background check process. It ensures reliable job history and salary details, helping employers, background checkers, and financial services make informed decisions quickly and securely.
Website: v3rity.com
Company: Verity SIA (registration number 40203595585)
Address: Latvia, Riga, Kuģu iela 28 - 5, LV-1048
Data We Collect and Purpose
We collect different types of personal information depending on how you interact with our Services.
The data we process typically falls into the following categories:
1. Information you choose to provide
When you use our Services, you may share personal information with us voluntarily.
For example, to create an account or complete a verification, you may be asked to provide:
or submit an inquiry via our website.
Before collecting any personal data, we will explain what is being requested and why it is needed.
2. Information we collect automatically
When you access our Services, we may automatically collect certain information from your device
(“Technical Data”), which might qualify as personal data under privacy regulations.
This may include:
3. Verification Data
When you authorise a verification through our platform, we may retrieve information from third parties –
such as your employer, bank, or a public authority – in order to complete that verification on your behalf.
Depending on the type of verification, the personal data collected may include:
Employment Verification Data
Income Verification Data
In some cases, we may access bank statement data to identify salary deposits. However, we do not share specific payment amounts with our Clients unless you have explicitly agreed to it. For example, we might confirm that you received monthly income over a 24-month period, without disclosing the exact figures.
4. Access Credentials
Through our platform users can obtain information directly from their third-party accounts including bank accounts and employer payslips and HR provider accounts and (where and to the extent permitted) government or public authority websites including HMRC. We or our third-party providers need your access credentials for your third-party accounts to share Verification Data with the Clients you have authorised (where it is lawful to do so).
5. User Account Information
Our platform operates through the processing of user account information data which belongs to other individuals for platform operation and Service delivery. The information includes first name, last name, employer name, work email address, work phone number/mobile number and in some cases other unique identifiers such as a payroll ID reference and may relate to an employee, a Client representative or contact, or an Employer representative or contact.
6. Marketing Data
We also process information for marketing purposes, which we may obtain directly from you or from third parties, including your name, email, phone number, company name and employment details
In general, we will use the personal information we collect from you according to the purposes described in this Privacy Notice or for purposes we explain to you at the time we collect your personal information. We may also use your personal information for other purposes that are not incompatible with the purposes we have disclosed to you (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable data protection laws.
We collect different types of personal information depending on how you interact with our Services.
The data we process typically falls into the following categories:
1. Information you choose to provide
When you use our Services, you may share personal information with us voluntarily.
For example, to create an account or complete a verification, you may be asked to provide:
- Your full name, date of birth, national identification number (such as a National Insurance number), and contact details: email and phone number for account registration and verification
- Employment-related information, such as job title, employer name, working period, and work email address for verification
- Financial or benefits-related details, including payslips or tax data for verification
or submit an inquiry via our website.
Before collecting any personal data, we will explain what is being requested and why it is needed.
2. Information we collect automatically
When you access our Services, we may automatically collect certain information from your device
(“Technical Data”), which might qualify as personal data under privacy regulations.
This may include:
- Your IP address, device type, operating system, and browser type
- Unique identifiers such as device or session IDs
- General location information (e.g. city or country)
- Interaction data such as pages viewed, links clicked, and verification activity
3. Verification Data
When you authorise a verification through our platform, we may retrieve information from third parties –
such as your employer, bank, or a public authority – in order to complete that verification on your behalf.
Depending on the type of verification, the personal data collected may include:
Employment Verification Data
- Name, date of birth, national insurance number
- Employer name, job title, department, employment start and end dates
- Employment type, work location, reason for leaving, disciplinary status
- Consent records and verification request details
- Payroll-related data and HR records
Income Verification Data
- Base salary, pay frequency, bonuses or commissions
- Tax deductions, pension contributions, salary sacrifice information
- Number of hours worked, hourly rate, and other compensation-related data
- Bank account transaction data used to identify income patterns
- Visa or residency status (where applicable)
In some cases, we may access bank statement data to identify salary deposits. However, we do not share specific payment amounts with our Clients unless you have explicitly agreed to it. For example, we might confirm that you received monthly income over a 24-month period, without disclosing the exact figures.
4. Access Credentials
Through our platform users can obtain information directly from their third-party accounts including bank accounts and employer payslips and HR provider accounts and (where and to the extent permitted) government or public authority websites including HMRC. We or our third-party providers need your access credentials for your third-party accounts to share Verification Data with the Clients you have authorised (where it is lawful to do so).
5. User Account Information
Our platform operates through the processing of user account information data which belongs to other individuals for platform operation and Service delivery. The information includes first name, last name, employer name, work email address, work phone number/mobile number and in some cases other unique identifiers such as a payroll ID reference and may relate to an employee, a Client representative or contact, or an Employer representative or contact.
6. Marketing Data
We also process information for marketing purposes, which we may obtain directly from you or from third parties, including your name, email, phone number, company name and employment details
In general, we will use the personal information we collect from you according to the purposes described in this Privacy Notice or for purposes we explain to you at the time we collect your personal information. We may also use your personal information for other purposes that are not incompatible with the purposes we have disclosed to you (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable data protection laws.
Sharing of Data
We may share your data with the following:
Our Clients and employers (described above) will both provide and receive your personal data in the course of our provision of services. For instance, employers will provide Verification Data on you and our Clients will access that Verification Data. When those Clients and employers access, use and otherwise process your personal data, they are acting as independent data controllers, which means they have their own obligations to comply with data protection law. They will have their own privacy notices, which describe how they collect, use and store your personal data, and how you can exercise your rights in relation to it.
As you will have a direct relationship with them, you may already have a copy of their privacy notice, but if not, you can request a copy from them.
We may share your data with the following:
- our Clients such as banks, brokers, credit providers, estate agents, recruitment agencies, prospective new employers and screening providers who have requested Verification Data about you and who you have authorised to request such Verification Data from us.
- our trusted partners and third party service providers who provide data processing services to us, including services obtained for the purposes of supporting the delivery and functionality of our Services or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information. This includes credit reference agencies and providers of payroll processing and other technical services.
- any qualified law enforcement agency or regulatory body or government agency or court or other third party when disclosure is required by law or regulation or to protect our legal rights or to protect your vital interests or those of any other person.
- our professional advisors and agents who help us deliver our Services including our legal advisors and accountants and consultants and our authorized tax agent.
- an actual or potential buyer and its agents and advisers when they purchase or merge with any part of our business while making sure the buyer uses your information only for the purposes described in this Privacy Notice.
- any other person who has your consent to share your data with additional third parties businesses or entities as needed.
Our Clients and employers (described above) will both provide and receive your personal data in the course of our provision of services. For instance, employers will provide Verification Data on you and our Clients will access that Verification Data. When those Clients and employers access, use and otherwise process your personal data, they are acting as independent data controllers, which means they have their own obligations to comply with data protection law. They will have their own privacy notices, which describe how they collect, use and store your personal data, and how you can exercise your rights in relation to it.
As you will have a direct relationship with them, you may already have a copy of their privacy notice, but if not, you can request a copy from them.
Legal Basis for Processing
The reasons why we collect and use your personal data depend on both the type of information involved and the context in which it is processed. In many situations, we act as a data processor on behalf of our Clients (such as employers, lenders, or recruiters). In these cases, it is the Client who determines the purpose of processing and who is responsible for identifying an appropriate legal basis.
When we act as a data controller, we rely on one or more of the following legal grounds:
In certain instances, we may process special category personal data — for example, data relating to health, ethnicity, political opinions, or union membership. If we handle such data, we do so only with your
explicit consent, or when the processing is necessary to establish, exercise, or defend legal claims.
Summary of Processing Activities and Legal Bases
The table below summarises the types of personal information we process in our capacity as a data controller, the purpose of that processing, and the corresponding legal basis:
The reasons why we collect and use your personal data depend on both the type of information involved and the context in which it is processed. In many situations, we act as a data processor on behalf of our Clients (such as employers, lenders, or recruiters). In these cases, it is the Client who determines the purpose of processing and who is responsible for identifying an appropriate legal basis.
When we act as a data controller, we rely on one or more of the following legal grounds:
- Your consent – where you have provided clear and informed permission for us to process your data for a specific purpose
- Performance of a contract – where data processing is necessary to deliver a service or product you have requested from us
- Compliance with legal obligations – where we are required to process data to meet legal or regulatory requirements
- Legitimate interests – where the processing is essential to our operational needs or those of a third party, and does not unfairly infringe on your rights or freedoms
In certain instances, we may process special category personal data — for example, data relating to health, ethnicity, political opinions, or union membership. If we handle such data, we do so only with your
explicit consent, or when the processing is necessary to establish, exercise, or defend legal claims.
Summary of Processing Activities and Legal Bases
The table below summarises the types of personal information we process in our capacity as a data controller, the purpose of that processing, and the corresponding legal basis:
Processing activity | Information processed | Legal basis for processing |
End user account creation | Account Data | Legitimate interests Performance of contract |
Employer account creation | Employer User Account Information | Legitimate interests |
Client account creation | Client User Account Information | Legitimate interests |
Accessing and storing Verification Data (for reuse via your account) | Account Data Employment Verification Data Income Verification Data Employer and Client User Account Information | Performance of contract |
Marketing communications | Marketing Data Technical Data | Legitimate interests |
Monitoring usage | Technical Data | Legitimate interests |
Platform analytics | Technical Data | Legitimate interests |
Customer support interactions | User Account Information Technical Data | Legitimate interests Performance of contract |
Responding to service inquiries | Marketing Data | Legitimate interests |
Understanding platform usage and improving services | Technical Data | Legitimate interests |
Promoting our products and services | Marketing Data Technical Data | Legitimate interests |
Legitimate Interests
The table above in the Summary of Processing Activities and Legal Bases demonstrates that we use legitimate interests as our legal foundation for handling your personal information which belongs to us or third parties such as Clients. We guarantee that all data processing operations are proportionate to expectations and respect your rights while maintaining a standard of reasonableness.
Our legitimate interests may include:
The inability to deliver our service results from not providing specific information which is required
for contract performance. For instance, we cannot store or reuse your Verification Data in the future. To obtain more information about our data processing legal grounds please see the Contacting Us section below.
The table above in the Summary of Processing Activities and Legal Bases demonstrates that we use legitimate interests as our legal foundation for handling your personal information which belongs to us or third parties such as Clients. We guarantee that all data processing operations are proportionate to expectations and respect your rights while maintaining a standard of reasonableness.
Our legitimate interests may include:
- Maintaining records to demonstrate the accuracy and validity of Verification Data, particularly in the event of legal or regulatory claims or actions
- Maintaining contact with you about our products and services for marketing purposes
- Monitoring and enhancing the functionality, security, and usability of our platform
- Delivering and supporting services provided to our Clients
The inability to deliver our service results from not providing specific information which is required
for contract performance. For instance, we cannot store or reuse your Verification Data in the future. To obtain more information about our data processing legal grounds please see the Contacting Us section below.
Data Retention
We retain personal information only for as long as it is necessary to fulfil the purposes for which it was collected, including to comply with legal, regulatory, or contractual obligations.
If you hold an account with us, your personal data will generally be retained for seven years following the closure of your account.
If you do not have an account, we typically retain your information for seven years from the date of the last submission of Verification Data related to you, made to one of our Clients. In some cases, we may keep your information for a longer period – for example, where there is an ongoing business need to:
When there is no longer a valid reason to keep your data, we will either safely delete or anonymise it.
If immediate deletion is not possible – for instance, because the data is stored in secure backups –
we will isolate it from any further use and ensure it remains protected until it can be deleted.
We retain personal information only for as long as it is necessary to fulfil the purposes for which it was collected, including to comply with legal, regulatory, or contractual obligations.
If you hold an account with us, your personal data will generally be retained for seven years following the closure of your account.
If you do not have an account, we typically retain your information for seven years from the date of the last submission of Verification Data related to you, made to one of our Clients. In some cases, we may keep your information for a longer period – for example, where there is an ongoing business need to:
- Improve our platform and services
- Continue providing a feature you’ve opted into (e.g. saved verifications)
- Comply with applicable tax, legal, or accounting requirements
When there is no longer a valid reason to keep your data, we will either safely delete or anonymise it.
If immediate deletion is not possible – for instance, because the data is stored in secure backups –
we will isolate it from any further use and ensure it remains protected until it can be deleted.
International Data Transfers
Your personal data may be transferred to and processed in countries other than the one in which you are resident. These countries may have data protection regulations that differ from those in your home jurisdiction.
Our primary servers are located in the United Kingdom but we also work with third-party service providers and technology partners based in other countries. Your personal information may be processed in one or more international locations as a result.
We implement safeguards to protect your data in accordance with applicable data protection laws
regardless of where the data processing takes place. Those safeguards include use of the Standard Contractual Provisions adopted by the European Commission on 4 June 2021 and of the international data transfer agreement (IDTA) or (where applicable) the international data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (Addendum) issued under
Data Protection Act 2018, s 119A.
Your personal data may be transferred to and processed in countries other than the one in which you are resident. These countries may have data protection regulations that differ from those in your home jurisdiction.
Our primary servers are located in the United Kingdom but we also work with third-party service providers and technology partners based in other countries. Your personal information may be processed in one or more international locations as a result.
We implement safeguards to protect your data in accordance with applicable data protection laws
regardless of where the data processing takes place. Those safeguards include use of the Standard Contractual Provisions adopted by the European Commission on 4 June 2021 and of the international data transfer agreement (IDTA) or (where applicable) the international data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (Addendum) issued under
Data Protection Act 2018, s 119A.
Your Data Protection Rights
You have the following data protection rights:
To exercise any of your rights, please contact us at privacy@v3rity.com.
You have the following data protection rights:
- access the personal data we hold about you, request corrections or update to any inaccurate or incomplete information, ask for your data to be deleted where there is no valid reason for us to retain it, restrict how your information is processed in certain circumstances.
- restrict how your information is processed in certain circumstances, object to the processing of your data – particularly where it is based on our legitimate interests – and request the transfer of your personal data to you or another provider in a portable format.
- opt-out of receiving marketing communications from us at any time. To stop receiving marketing emails, simply click the “unsubscribe” or “opt-out” link included in any of our messages. If you wish to opt-out of other types of marketing – such as postal mail or phone calls – please exercise your rights by contacting us.
- If we process your personal information based on your consent, you have the right to withdraw your consent at any time. Doing so will not affect the lawfulness of any processing carried out before your withdrawal, nor will it impact any processing that relies on legal grounds other than consent.
- lodge a complaint with a data protection authority if you have concerns about how we collect, use, or handle your personal information.
To exercise any of your rights, please contact us at privacy@v3rity.com.
Policy Updates
The Privacy Policy may undergo periodic revisions to adapt to legal requirements and technical developments and operational needs. We will notify you about updates through appropriate channels based on the nature and impact of the changes. Under applicable data protection laws we will request your consent before implementing major updates. The "Effective date” located at the top of this Policy indicates when the document received its most recent revision.
The Privacy Policy may undergo periodic revisions to adapt to legal requirements and technical developments and operational needs. We will notify you about updates through appropriate channels based on the nature and impact of the changes. Under applicable data protection laws we will request your consent before implementing major updates. The "Effective date” located at the top of this Policy indicates when the document received its most recent revision.
Contacting Us
For any questions regarding this Privacy Policy or your personal data, you may contact us at:
Email: privacy@v3rity.com
Postal Address: Latvia, Riga, Kuģu iela 28 - 5, LV-1048
For any questions regarding this Privacy Policy or your personal data, you may contact us at:
Email: privacy@v3rity.com
Postal Address: Latvia, Riga, Kuģu iela 28 - 5, LV-1048
Verify with v3rity