Privacy Policy

This Privacy Policy explains how Vera Solutions ("Vera Solutions", "we", "us") handles personal data when you visit veraa.solutions, contact us, or use our products. We follow the principles of the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), and other applicable data protection laws.

1. Who we are

Vera Solutions is the controller of the personal data described in this policy. Registered entity: [legal entity name], [registered address]. You can reach us about privacy at hello@veraa.solutions or on +243 993 256 390.

2. Data we collect

Information you give us

• Contact form: your name, email address, phone number, company name, company website (optional), what you need, product of interest (optional) and the project details you write.
• Correspondence: anything you send us by email, phone or messaging apps.
• Customers of our products: account, billing and usage data, handled under the agreement for that product.

Information collected automatically

• Technical data our hosting provider records to deliver and secure the site, such as IP address, browser type, pages requested and timestamps (server logs).
• Your cookie choices, stored in the vera_consent cookie. See our Cookie Policy.

We do not use advertising trackers, and we do not knowingly collect special categories of data. Please do not include sensitive personal data in the contact form.

3. How and why we use your data

• To answer your enquiry and discuss a project. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
• To provide, support and improve our products and services. Legal basis: performance of a contract.
• To keep the website secure and working, and to prevent abuse or spam. Legal basis: legitimate interests.
• To keep a record of your cookie choices. Legal basis: legal obligation (proof of consent).
• To comply with legal, tax and accounting requirements. Legal basis: legal obligation.

We do not sell or share personal data for cross-context behavioural advertising, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We use trusted service providers (processors) that handle data only on our instructions and under data processing terms:

• Vercel Inc. – website hosting and delivery.
• Sanity AS – content management and storage of contact enquiries and consent records.
• Resend – delivery of contact-form notification emails.
• Our email and hosting provider – business email.

We may also disclose data to professional advisers, to a successor if our business is reorganised or sold, or where required by law or to protect our rights.

5. International transfers

Some providers process data outside your country, including in the United States and the European Union. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep data

• Enquiries that do not lead to a project: up to 24 months after our last contact.
• Client and contract records: for the duration of the relationship plus the period required by tax and commercial law.
• Consent records: up to 5 years, to demonstrate the choice you made.
• Server logs: according to our hosting provider's retention, typically a few days to weeks.

7. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data or complete incomplete data;
• have your data deleted;
• restrict or object to processing, including processing based on legitimate interests;
• data portability;
• withdraw consent at any time, without affecting earlier processing;
• know what personal information we collect and how we use it, and not be discriminated against for exercising your rights (California residents).

To exercise your rights, email hello@veraa.solutions. We will reply within one month (45 days for CCPA requests) and may need to verify your identity. You also have the right to complain to your local data protection authority.

8. Security

We use encryption in transit (HTTPS), access controls and reputable providers to protect personal data. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

9. Children

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If changes are significant, we will highlight them on this page.

11. Contact

Questions about this policy or your data: hello@veraa.solutions, +243 993 256 390, [registered address].