Privacy Statement

01 Scope and Who This Applies To

This Privacy Statement applies to the following categories of individuals (“Data Subjects”):

A. Website Visitors

Individuals who access or browse our website, contact us, or interact with content/features on our website.

B. Candidates / Background Screening Subjects

Individuals whose personal data is processed by VERIS in connection with background screening services provided to our clients (typically employers or organizations requesting screening).

C. Business Contacts

Client representatives, prospects, vendors, partners, and other professional contacts who communicate with VERIS.

02 Roles and Responsibilities (Controller vs Processor)

Depending on the context, VERIS may act as:

• Data Controller — for personal data collected directly through our website and business communications (e.g., inquiries, marketing communications), where VERIS determines the purposes and means of processing.
• Data Processor (or equivalent role) — for personal data processed as part of background screening services, where our client typically determines the purposes of processing and VERIS processes data on the client's instructions.

Where required, our processing is governed by applicable laws and contractual arrangements with our clients and service providers.

03 Personal Data We Collect

A. Website Visitors

• Technical and usage data: IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, time spent, and other website interaction logs.
• Cookies and similar technologies: identifiers and preferences stored on your device.
• Inquiry data: name, email address, phone number, company, and message content when you submit an inquiry or contact form.

B. Candidates / Background Screening Subjects

Depending on the screening scope, we may collect:

• Identity information: name, contact details, date of birth, identification numbers (where applicable), and identity documents.
• Employment and education information: employment history, references, education history, qualifications, certifications.
• Verification results and supporting evidence: confirmation outcomes, discrepancies, and related documentation.
• Other check-specific data: information necessary to conduct specific checks requested by the client and permitted by law.

C. Business Contacts

Name, business email, business phone number, job title, organization, and communications history.

04 How We Collect Personal Data

• Directly from you: through forms, email inquiries, document submissions, or consent/authorization forms.
• Automatically: when you navigate our website (e.g., server logs, cookies).
• From third parties: for candidate screening, data may be received from clients (employers), referees, educational institutions, or former employers, where permitted by law.

05 Purposes of Processing

VERIS processes personal data to:

• Operate, maintain, and secure our website and systems.
• Respond to inquiries, support requests, and business communications.
• Perform background screening and verification services requested by clients.
• Validate accuracy, manage quality assurance, and deliver screening reports.
• Ensure compliance with legal, regulatory, and contractual obligations.
• Establish, exercise, or defend legal claims.

06 Legal Bases for Processing

Where required by applicable law, we rely on one or more legal bases:

• Consent / Authorization provided by the data subject.
• Performance of a contract or preliminary contractual steps.
• Compliance with legal obligations.
• Legitimate interests (e.g., operating and securing our systems, preventing fraud).

07 Data Subject Rights & Representation

In accordance with applicable data protection laws (including GDPR and UUPDP), Data Subjects are entitled to exercise rights regarding their personal data, including the right to access, rectification, erasure, restriction of processing, objection, and data portability.

Exercise of Rights & Legal Representation

Data subjects may exercise their rights directly or through an authorised legal representative. Where a request is submitted by a representative, VERIS may request evidence of authority and verify the identity of the data subject and the representative before processing the request.

08 Security and Third-Party Disclosures

VERIS maintains appropriate technical and organizational measures (TOMs) aligned with ISO/IEC 27001:2022 standards to protect personal data against unauthorized access, loss, or disclosure.

Personal data may be shared with trusted third-party service providers (such as website hosting infrastructure, Google Workspace communications, or authorized sub-processors) solely for operational purposes and under strict contractual confidentiality and data security obligations.

09 How to Contact Us

If you have any questions or concerns regarding this Privacy Statement or our data protection practices, please contact us: