How we handle your data.

Vateri Ltd is the controller of the personal data described here. We are a company registered in England and Wales, company number 17395468, with our registered office at Pyes Cottage, Barnston, Dunmow, England, CM6 3PR.

We are registered with the Information Commissioner’s Office as a controller, registration number ZC261354.

Registered with the ICOReference ZC261354. Registered 29 September 2026. View the entry on the public register.

For anything to do with your data, write to info@vateri.ai. We do not have a separate data protection officer; the founders answer these questions themselves.

This notice covers the website at vateri.ai and its subdomains, including the investor portal, the product demonstration and our own team area. It also covers the personal data we hold about the people we talk to in the course of building the company.

Vateri is a CRM and ATS for executive search firms. When the product is in use by a search firm, that firm decides what goes into it and is the controller of its own candidates’ and clients’ data; we process it on the firm’s instructions under a separate agreement. We also use the product ourselves. If we hold your details in it as a candidate or a contact, our notice for candidates and contacts covers that.

We count page visits with Vercel Web Analytics, which sets no cookies and keeps no personal data: each visit is counted against an anonymous code that is thrown away after a day. Nothing on the page is loaded from an advertising or social network. Our hosting provider keeps ordinary server logs, which include your IP address, browser type and the pages requested, for a short period to keep the site secure and running. We do not use those logs to identify you.

We keep your name, your email address, the firm you are with, its website if you give it, the size of your team, when suits you and what you write to us, so that we can reply and arrange the demonstration. A request made through the form on this site is stored in our database and sent to us by email. Our basis for this is our legitimate interest in answering people who contact us, and, where a demonstration or a trial is being arranged, the steps needed before a contract.

We keep your work email address, your name and your firm, plus anything you add on the second step: your role, how many consultants your firm has, the CRM you use and whether your team talks in Teams or Slack. We also note how you heard about us, if you tell us, the page you joined from and any campaign tags in the link you followed, so we know which of our posts and emails reach people. If you joined with a partner’s code, we keep the code, so the partner’s offer is honoured when you start paying and we know which groups introduce firms to us. No cookies are used for this.

We use it to tell you whether your firm has a founding place, to book a demo with you and to open your workspace at launch, which is what you asked for by joining. Our basis is the steps needed before a contract and our legitimate interest in answering people who ask to hear from us. If you tick “Send me occasional updates”, we also add your address to a mailing list for news as Vateri is built. That rests on your consent, which we record with its time and wording. Every update carries a link to unsubscribe.

We keep it until launch and then for twelve months, unless you become a client or ask to leave sooner. To leave, reply “leave” to any email from us or write to jack@vateri.ai and we will delete your details.

The portal is protected by a password we share directly with each reader. There is no account and we do not record who reads it or when. A cookie remembers that the password was entered so you are not asked on every page.

The demonstration uses one shared account and every name, firm and figure inside it is invented. Nothing you do in it is stored beyond your own browser session and no personal data about you is collected.

We keep a record of the search firms we have spoken to and the people at them: name, job title, firm, work email address and telephone number, a link to a professional profile where there is one, plus notes of our conversations, including what was discussed and what was agreed next. Most of this comes from you directly; some comes from public sources such as a firm’s website or a professional network.

Our basis for this is our legitimate interest in running a business: remembering who we have spoken to, following up when we said we would and not contacting the same person twice with the same question. You can object at any time. If you do we will stop and remove you, unless there is a specific reason we must keep a record.

The three founders sign in to a private area of the site to run the company. That holds our names, work email addresses and the records described above, plus our company’s own financial entries. Sign-in is handled by Clerk, a specialist provider, which keeps the account and its password on our behalf.

We do not sell personal data and we do not share it for advertising. A small number of companies process it on our behalf, each under a written agreement that limits what they may do with it:

We may also share data where the law requires it, or with professional advisers under a duty of confidence.

Some of those providers are in the United States. Where personal data leaves the United Kingdom we rely on the safeguards the UK GDPR allows: the UK International Data Transfer Agreement or the Addendum to the EU standard contractual clauses, in place with each provider, plus the UK’s adequacy decision for the European Union where data is kept there.

Everything travels over encrypted connections. Our records are held in a database that cannot be reached from the public internet; the only way in is through our own sign-in, which is restricted to the founders by account and by address. Access is reviewed by the three of us and nobody else has it.

You can ask us, at any time:

Write to info@vateri.ai. We will answer within one month. We may ask you to confirm who you are first.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you told us first, so we can put it right.

We set no advertising, analytics or tracking cookies, which is why the site does not ask you to accept any. The cookies it can set are all needed for something you have chosen to do. Each is listed here.

You can delete any of them through your browser’s settings. Doing so signs you out of the area the cookie belonged to and nothing else.

Some features of the Vateri product will ask you to connect a Google account. This section says exactly what we do with the data Google shares with us when you do. Nothing here applies until you connect. Google shows you each kind of access before you agree to it.

We use Google user data only to provide these features to you. We do not sell it, use it for advertising or use it to build or train general AI or machine learning models. Nobody at Vateri reads it unless you ask us to for support, it is needed for security or the law requires it.

Where a feature uses AI, for instance to draft a reply, the text it needs is sent to Anthropic, our AI provider, to produce the result for you. Anthropic acts on our instructions and does not use it to train its models. We keep Google user data in our database in London, encrypted in transit and at rest. It is shared with no one else.

The access Google grants us stays on our servers, encrypted. You can remove it at any time from your Google account’s permissions page or by asking us. We then stop reading your Google data at once and delete the access. Emails and meetings already filed on a record stay with your firm’s records, kept and deleted as its agreement and this notice set out. Ask us and we will delete them sooner.

Vateri’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The site and the product are for professionals and are not aimed at anyone under eighteen. We do not knowingly collect data about children.

When we change this notice we change the date at the top. If a change matters to you, for instance because we start collecting something new, we will say so plainly rather than bury it.