Who we are

Atveris is the “data controller” for personal information described in this notice, meaning we decide how and why it is used.

Company name: Atveris Limited
Registered address: 30 Stamford St, SE1 9LQ, United Kingdom
Email: assurance@atveris.com

If you have questions about this notice or want to exercise your rights, contact us using the details above.

What personal information we collect

We only collect information that is relevant for the purposes described in this notice.

a) Information you provide to us

When you contact us (for example via a form, email, or phone), we may collect:

• Name
• Work email address and/or phone number
• Organisation name and job title (if provided)
• The content of your message/enquiry and any attachments you send

b) Information collected automatically (website usage)

When you use our website, we may collect technical information such as your IP address, browser type, device information, and pages visited (often via cookies or similar technologies).
If we use analytics tools, this information helps us understand how our website is used and improve performance.

How we use your information

We use personal information for the following purposes:

• To comply with legal obligations (e.g., tax/accounting requirements or responding to lawful requests).
• To respond to enquiries and communicate with you (e.g., replying to a message, scheduling a call).
• To provide and manage our services (e.g., proposals, contracting, delivering assurance/audit work, client support).
• To manage our business operations (e.g., maintaining records, improving internal processes, security).
• To improve our website (e.g., troubleshooting, analytics, performance monitoring).

Legal bases for processing

Data protection law requires us to have a valid legal basis for processing personal information. This includes the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and where applicable, the EU General Data Protection Regulation (EU GDPR).

a) Legitimate interests

We may process business contact details and enquiry information where it is necessary to respond to requests, manage business relationships, and operate our services in ways people would reasonably expect, with minimal privacy impact.

When we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and freedoms (and we will honour your right to object where applicable).

b) Contract (or steps prior to entering a contract)

We may process personal information where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you or your organisation (for example, delivering services or managing the engagement).

c) Legal obligation

We may process personal information where necessary to comply with legal obligations (for example, record-keeping or responding to lawful requests).

d) Consent (where required)

In some cases we rely on consent — for example, where required for certain marketing communications or non-essential cookies/technologies. Where we rely on consent, you can withdraw it at any time.

Marketing (B2B)

If we send occasional updates about our services or insights relevant to sustainability assurance, we will do so in line with applicable rules and you can opt out at any time. You can opt out by using an unsubscribe link (if provided) or by emailing us at privacy@atveris.com

Who we share personal information with

We may share personal information with trusted service providers who help us run our business (for example, website hosting, email providers, IT support, and security tools).
We only share information as necessary for the purposes described above and expect providers to protect it appropriately.

We do not sell personal information.

International transfers

Some suppliers may process information outside the UK.
If personal information is transferred internationally, we use appropriate safeguards (such as contractual protections) to help keep it protected.

Retention

We keep personal information only for as long as needed for the purposes described in this notice, and to meet legal, accounting, or regulatory requirements where applicable.

Your rights

UK data protection law gives individuals rights over their personal information, subject to certain conditions and exceptions.
These may include the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of information in certain circumstances
• Request restriction of processing in certain circumstances
• Object to processing in certain circumstances (including direct marketing)
• Request data portability in certain circumstances

To exercise your rights, email privacy@atveris.com
We may need to verify your identity before responding.

Complaints

If you have concerns, please contact us so the Atveris team can resolve your query.
You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO).

Cookie

Our website may use cookies and similar technologies to help it function and (if enabled) to understand how visitors use the site.
Where required, you will be given choices about non-essential cookies (for example through a cookie banner or settings tool).
You can also manage cookies via your browser settings, though some site features may be affected.

Security

We use appropriate technical and organisational measures to help protect personal information.
No online system is 100% secure, but we take steps to reduce risks such as unauthorised access or disclosure.

Changes to this notice

We may update this Privacy Notice from time to time.
The most recent version will be posted on this page with the lastest update being released on February 2026.