Privacy notice

How we handle your data.

Vateri is a small company and this is a short notice. It says what we collect, why, where it is kept and what you can ask of us.

Last updated 28 September 2026

Who we are

Vateri Ltd is the controller of the personal data described here. We are a company registered in England and Wales, company number 17395468, with our registered office at Pyes Cottage, Barnston, Dunmow, England, CM6 3PR.

We are registered with the Information Commissioner’s Office as a controller.

For anything to do with your data, write to info@vateri.ai. We do not have a separate data protection officer; the founders answer these questions themselves.

What this covers

This notice covers the website at vateri.ai and its subdomains, including the investor portal, the product demonstration and our own team area, and the personal data we hold about the people we talk to in the course of building the company.

Vateri is a CRM and ATS for executive search firms. When the product is in use by a search firm, that firm decides what goes into it and is the controller of its own candidates’ and clients’ data; we process it on the firm’s instructions under a separate agreement. Today the product is a demonstration running on invented data, so no such data exists yet.

What we collect and why

If you visit the website

We run no analytics and no tracking, and nothing on the page is loaded from an advertising or social network. Our hosting provider keeps ordinary server logs, which include your IP address, browser type and the pages requested, for a short period to keep the site secure and running. We do not use those logs to identify you.

If you email us or book a demonstration

We keep your name, your email address, the firm you are with and what you write to us, so that we can reply and, if you ask for one, arrange a demonstration. Our basis for this is our legitimate interest in answering people who contact us, and, where a demonstration or a trial is being arranged, the steps needed before a contract.

If you read the investor portal

The portal is protected by a password we share directly with each reader. There is no account and we do not record who reads it or when. A cookie remembers that the password was entered so you are not asked on every page.

If you try the product demonstration

The demonstration uses one shared account and every name, firm and figure inside it is invented. Nothing you do in it is stored beyond your own browser session and no personal data about you is collected.

If we are talking to you or your firm about Vateri

We keep a record of the search firms we have spoken to and the people at them: name, job title, firm, work email address and telephone number, a link to a professional profile where there is one, and notes of our conversations, including what was discussed and what was agreed next. Most of this comes from you directly; some comes from public sources such as a firm’s website or a professional network.

Our basis for this is our legitimate interest in running a business: remembering who we have spoken to, following up when we said we would and not contacting the same person twice with the same question. You can object at any time, and if you do we will stop and remove you, unless there is a specific reason we must keep a record.

If you are one of our team

The three founders sign in to a private area of the site to run the company. That holds our names, work email addresses and the records described above, plus our company’s own financial entries. Sign-in is handled by Clerk, a specialist provider, which keeps the account and its password on our behalf.

Who we share it with

We do not sell personal data and we do not share it for advertising. A small number of companies process it on our behalf, each under a written agreement that limits what they may do with it:

We may also share data where the law requires it, or with professional advisers under a duty of confidence.

Where it goes

Some of those providers are in the United States. Where personal data leaves the United Kingdom we rely on the safeguards the UK GDPR allows: the UK International Data Transfer Agreement or the Addendum to the EU standard contractual clauses, in place with each provider, and the UK’s adequacy decision for the European Union where data is kept there.

How long we keep it

How we keep it safe

Everything travels over encrypted connections. Our records are held in a database that cannot be reached from the public internet; the only way in is through our own sign-in, which is restricted to the founders by account and by address. Access is reviewed by the three of us and nobody else has it.

Your rights

You can ask us, at any time:

Write to info@vateri.ai. We will answer within one month. We may ask you to confirm who you are first.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you told us first, so we can put it right.

Cookies

We set no advertising, analytics or tracking cookies, which is why the site does not ask you to accept any. The cookies it can set are all needed for something you have chosen to do, and each is listed here.

CookieWhereWhat it doesLasts
vateri_authInvestor portalRemembers that the password was entered, so each page does not ask again.One year
vateri_welcomeInvestor portalA one-off flag that plays the opening sequence once after signing in.One minute
vateri_deskProduct demonstrationRemembers that the demonstration was opened through its sign-in.Thirty days
__session, __client_uat and other Clerk cookiesTeam areaKeep our own team signed in. Set by Clerk, the sign-in service we use, only when one of us signs in.Up to seven days
vateri_xero_stateTeam areaProtects the handshake when we connect our accounting software.Ten minutes

You can delete any of them through your browser’s settings. Doing so signs you out of the area the cookie belonged to and nothing else.

Children

The site and the product are for professionals and are not aimed at anyone under eighteen. We do not knowingly collect data about children.

Changes

When we change this notice we change the date at the top. If a change matters to you, for instance because we start collecting something new, we will say so plainly rather than bury it.