Privacy Policy.

1. Introduction and general terms

This Privacy Policy covers the processing of personal data by Verspa ("Verspa", "we", "us" or "our" in this policy) when providing its services to its customers.

If you have any questions or comments about this Privacy Policy please contact us at:

Email: success@verspa.ai

Verspa is committed to protecting and respecting your privacy. This Privacy Policy explains the basis on which personal data we collect from you or from public sources will be processed by us. Where we decide the purpose or means for which this personal data is processed, we are the "data controller." We will comply with all applicable data protection laws, including the General Data Protection Regulation 2016/679. You have the right to object to us processing your personal data for direct marketing purposes. Please see paragraph 7 below for more details on how to do this.

This Privacy Policy explains the following:

• What personal data we may collect about you;
• Why our processing is lawful;
• Who we may share your information with;
• How we will use that information;
• Who we may disclose that information to; and
• Your rights regarding the information.

2. What information will Verspa collect about me?

We collect and process the following data, which may include your personal data.

Verspa’s Website: If you contact us about our services or request a demo on our website, the forms you complete or the emails you send may include information about you, such as your full name, your email address, the organisation on behalf of whom you are contacting us and your enquiry.

Verspa’s Online Customer Platform: In order to provide a Verspa Customer with access to our platform and enable them to access our services, we collect the full name, email address and password of each individual authorised by such customer to access the platform.

Analytics on the Website and the Platform: Our website and online customer platform uses cookies and other mechanisms to collect and log analytical information, to help analyse use, to compile statistical reports on use of our website and to improve our website and marketing. The following data may be collected:

• number of visitors to our website;
• pages visited while at the website and time spent per page;
• page interaction information, such as scrolling, clicks and browsing methods;
• websites where visitors have come from and where they go afterwards;
• page response times and any download errors; and
• other technical information relating to end user device, such as IP address or browser plug-in.

Verspa Database: Verspa gathers current and historic business contact data. The data collected about individuals on the Verspa Database comprises:

• Name;
• Employer Company & Company Details;
• Office Location (Country & City);
• Business Telephone Number;
• Business Email Address;
• Job Title.

We also hold data in respect of your employer company such as its name, alias, size, industry, website and industry. In some cases we estimate individuals’ net worth based on publicly available data (for example, the individual’s employment history or if such individual previously sold shares in a company). Where you have moved jobs, we may hold your previous employers and previous titles.

In order to provide certain aspects of its services, Verspa requires a business email address to be recorded against profiles in its database. Where Verspa does not have the business email address of a profile, it may generate a business email address based on the email address structure understood to be implemented by the employer company.

We also hold hashed personal email addresses. Hashing is a method of encryption, whereby the email address itself is obfuscated and replaced with a unique reference instead, called a hash. A hash is one of the means used to locate the same individual on social networking. We do not reverse the hash or use the personal email address to contact you.

The majority of the personal data we collect about you comes from publicly available sources such as from business and employment-oriented social networks, recruitment websites and company websites.

Information is also gathered from correspondence with you (by email or phone), from our customers, recruiters and other premium data providers. Verspa does not seek to collect any non-business-related data such as date of birth, home address, personal email or telephone number and Verspa does not collect sensitive personal data.

3. Grounds of processing

3.1 Consent

On some occasions, Verspa processes your data with your consent. Your consent may be obtained by third parties on Verspa’s behalf. You have the right to withdraw such consent at any time and we will cease to process data after consent is withdrawn.

3.2 Legitimate interest

Verspa processes your personal data when it is in our or our customers’ legitimate interest to do so and when these interests are not overridden by your rights. Our and our customers’ legitimate interests include: having information about potential business customers organised in one searchable database, having access to up-to-date and complete information, being able to identify the individual that occupies a certain role within a B2B lead; being able to identify individuals with a certain estimated net worth, enabling customers to only reach out to relevant contacts, being able to generate and contact potential B2B leads in order to undertake forms of B2B marketing, having access to aggregated statistical insights for the purpose of understanding patterns and trends.

3.3 Necessary because of a legal obligation

Verspa may process your data to comply with our legal and regulatory obligations e.g. preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies.

3.4 Necessary to fulfil an obligation under a contract

Verspa may process your data where we have a contract with the individual and we need to process their personal data to comply with our obligations under the contract.

4. Data sharing

We will share your information with the following:

4.1 Our companies

Access to personal data within Verspa and our group of companies is restricted to those individuals who have a need to access the information for our business purposes.

4.2 Verspa customers

We may share personal data with our customers or their customers as part of the offering of our services. Verspa provides limited access of its database. Verspa customers or their customers may use the data to contact individuals on their business telephone, at their business email address, through other electronic mail or through targeted display ads on social networks in order to market products and/or services.

Please note that in making available the data to its customers, Verspa is processing such data as a processor on behalf of the customer, who is acting as the controller. Customers will likely have their own privacy policies and opt-out options, and we recommend you review them. Where Verspa has made personal data available to its customers, the customer privacy policy should list Verspa as a data source.

4.3 Suppliers, subcontractors, service providers

We keep your information confidential, but may disclose it to suppliers or subcontractors insofar as it is reasonably necessary for the purposes set out in this privacy policy. However, this is on the basis that they have agreed to safeguard this information. This includes external third-party service providers, such as accountants, auditors, experts, lawyers and other outside professional advisors; IT systems, support and hosting service providers; technical engineers; data storage and cloud providers and similar third-party vendors and outsourced service providers that assist us in carrying out business activities.

4.4 Data management platform

A Data management platform (DMP) is a technology platform used for collecting and managing data, mainly for digital marketing purposes. Verspa supplies DMPs with data so that the DMP can generate audience segments, which are used by advertisers to target specific types of users in online advertising campaigns.

4.5 Government authorities

In addition, we may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).

4.6 Potential acquirers or investors

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, you will be notified via email, account message and/or a prominent notice on our website of any change in ownership or uses of this information, as well as any choices you may have regarding this information.

5. How we will use information we collect about you

Verspa Website and Verspa Customer Platform: We may process your personal data for the following purposes for Verspa’s own:

• to administer platform log-ins (where applicable) and to deliver our services to our customers or their customers under the agreed terms of service;
• to process your enquiries to reply and provide support, including providing you and/or your organisation with information about the services Verspa offers;
• to keep you updated via our mailing list with information on news, offers, and updates about Verspa (see below for how to unsubscribe);
• to compile reports on how visitors use the Verspa website and improve the website;
• to conduct remarketing for Verspa, which allows us to show Verspa ads to people who’ve previously visited our website;
• to conduct advertising on social networks for Verspa, which means that if you link to one of our social media platforms you may be subject to targeted marketing displaying Verspa ads via that site.

We work with the third party advertising networks and social media platforms as set out in our cookie policy. If you would like to find out more about the way these third parties collect and process your information, please refer to their respective privacy policies.

Verspa Database: We may use your personal data on the Verspa Database for the following purposes:

• to build our sales intelligence database to enable our customers or their customers to generate and manage sales leads in respect of businesses and high net worth individuals;
• to enable our customers or their customers to serve relevant display ads on social networks (such as Facebook, LinkedIn and Instagram) and other services;
• to enable our customers or their customers to enrich their existing customer relationship management records and receive timely updates of changes;
• to undertake research and compile statistical aggregated reports based on data held in Verspa’s sales intelligence database;
• to supply data management platforms;
• to run our own marketing campaigns and promote our services.

We also process personal data to comply with our necessary legal and regulatory obligations. These include preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies.

All content: If you send us objectionable content or otherwise behave in a disruptive manner when using our website, we may process personal data included in your messages to respond to and stop such behaviour. Where we reasonably believe you are or may be in breach of the law (for instance, because content you send amounts to harassment or is defamatory), we may use your personal data to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.

6. Marketing opt-out options

If you do not wish for your personal data to be used in the Verspa Database for the purposes set out above, please fill in your details here or contact us using the above contact details.

Where you receive a marketing email from us, and you would like to be removed from that mailing list please let us know by clicking unsubscribe at the bottom of any marketing email that you receive from us.

7. The app

Additional Limits on Use of Your Google User Data: Notwithstanding anything else in this Privacy Policy, if you provide the App access to the following types of your Google data, the App’s use of that data will be subject to these additional restrictions:

7.1 App’s use and transfer to any other app of information received from Google Accounts will adhere to Google API Services User Data Policy, including the Limited Use requirements, which is available at the following link. Please note that these are Google policies, and as such, Verspa does not have any control or interference on the same. We recommend you to visit Google’s policies directly for further details on their procedures and future updates.

7.2 The App will only use access to read, write, modify or control Gmail message bodies (including attachments), metadata, headers, and settings to provide a web email client that allows users to compose, send, read, and process emails and will not transfer this Gmail data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

7.3 The App will not use this Gmail data for serving advertisements.

7.4 The App will not allow humans to read this data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for the App’s internal operations and even then only when the data have been aggregated and anonymised.

8. Hotjar

Notwithstanding anything else in this Privacy Policy, please note that we use Hotjar in order to better understand our users’ needs and to optimise this service and experience. Hotjar is a technology service that helps us better understand our users’ experience and this enables us to build and maintain our service with user feedback. Hotjar stores the information on our behalf in a pseudonymised user profile and is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the "about Hotjar" section of Hotjar’s support site.

9. Your rights in relation to personal data which we process relating to you

You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest. To make a request, please contact us using the above contact details, addressed to the Data Protection Officer.

9.1 You have the right to request a copy of the personal data we hold about you and to have any inaccuracies corrected.

We will use reasonable efforts to the extent required by law to supply, correct or delete personal data held about you on our files (and with any third parties to whom it has been disclosed to).

9.2 Object to us processing data about you

You can ask us to restrict, stop processing, or to delete your personal data if:

• you consented to Verspa processing the personal data, and have withdrawn that consent;
• Verspa no longer needs to process that personal data for the reason it was collected;
• Verspa is processing that personal data because it is in the public interest or it is in order to pursue a legitimate interest of Verspa, you don’t agree with that processing, and there is no overriding legitimate interest for us to continue processing it;
• the personal data was unlawfully processed; or
• you need the personal data to be deleted in order to comply with a legal obligation

9.3 Obtain a machine-readable copy of your personal data, which you can use with another service provider

• If we are processing data in order to perform our obligations to you, or because you consented, if that processing is carried out by automated means, we will help you to move, copy or transfer your personal data to other IT systems.
• If you request, Verspa will supply you with the relevant personal data in CSV format. Where it is technically feasible, you can ask us to send this information directly to another IT system provider if you prefer.

9.4 Make a complaint to a supervisory authority

• If you are unhappy with the way Verspa is processing your personal data, please let us know.
• If you do not agree with the way we have processed your data or responded to your concerns, or if you do not think we are handling your personal data adequately, you have the right to lodge a complaint with the Information Commissioner’s Office. Further information, including contact details, are available at https://ico.org.uk

10. Data retention

We will hold your personal data for as long as is necessary for the relevant purpose.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

11. Children

We do not knowingly solicit data from or market to children under the age of 18. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at privacy@verspa.ai. We will delete such information from our files within a reasonable time.

12. Security

Verspa is committed to keeping your personal data safe and secure from unauthorised access to or unauthorised alterations, disclosure or destruction of information that we hold. We will take all reasonable technical and organisational precautions to prevent the loss misuse or alteration of your personal data.

Our security measures include:

• hashing and encryption of our services and data;
• regular review of information collection;
• encryption of our services and data;
• restricted access of data to employees, contractors and agents; and
• internal policies setting out our data security.

Please be aware that, although we endeavour to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

13. Changes

We will notify you of any changes to this Privacy Policy by email and/or notice on the website, as appropriate.

14. International data transfers

Your personal data which you supply to us is generally stored and kept inside the European Economic Area (EEA). However, due to the nature of our global business and the technologies required, your personal data may be transferred to third party service providers outside the EEA, in countries where there may be a lower legal level of data protection.

Where we transfer your data outside of the EEA, we transfer the minimum amount of data necessary, anonymise it where possible and we have agreements in place with those parties which include standard data protection clauses to ensure that appropriate safeguards are in place to protect your personal data in accordance with this Privacy Policy and the European levels of data protection. If you would like to find out more about these safeguards, please contact us.

15. California residents and CCPA

If you are a California resident, as defined in Section 17014 of Title 18 of the California Code of Regulations, you have certain rights in respect of the personal information we hold about you.

If you have questions or concerns about our privacy policies and practices, please contact us at the details set out at the top of this Policy.

Please see above for:

• the date on which this Policy was last updated (see paragraph 1)
• categories of personal information collected about you (see paragraph 2)
• of sources from which the personal information was collected (see paragraph 2)
• purposes for collecting and selling personal information (see paragraph 5)
• categories of third parties with whom we share personal information (see paragraph 4)
• where you have a profile on our database, a list of categories of personal information sold about you in the last 12 months (see paragraph 2)
• We have disclosed and sold personal information to third parties within the last 12 months.

We do not sell the personal information of minors under 16 years of age without affirmative authorisation.

You can designate an authorised agent to make a request under the CCPA on your behalf. The authorised agent must submit proof that they have been authorised by you to act on your behalf and proof of their own identity.

You have the right to:

• request access to your personal information and request that Verspa disclose what personal information it collects, uses, discloses, and sells;
• request deletion of your personal information collected or maintained by us;
• opt-out of the sale of your personal information (fill in your details here: Do Not Sell My Info);
• not be discriminated against for exercising any of your rights under the California Consumer Privacy Act of 2018 (CCPA).

To make a verifiable request, please contact us using the above contact details, addressed to the Data Protection Officer. We may verify your request by asking for proof of identity.