Privacy notice
How we handle your data.
Vateri is a small company and this is a short notice. It says what we collect, why, where it is kept and what you can ask of us.
Last updated 28 September 2026
Who we are
Vateri Ltd is the controller of the personal data described here. We are a company registered in England and Wales, company number 17395468, with our registered office at Pyes Cottage, Barnston, Dunmow, England, CM6 3PR.
We are registered with the Information Commissioner’s Office as a controller.
For anything to do with your data, write to info@vateri.ai. We do not have a separate data protection officer; the founders answer these questions themselves.
What this covers
This notice covers the website at vateri.ai and its subdomains, including the investor portal, the product demonstration and our own team area, and the personal data we hold about the people we talk to in the course of building the company.
Vateri is a CRM and ATS for executive search firms. When the product is in use by a search firm, that firm decides what goes into it and is the controller of its own candidates’ and clients’ data; we process it on the firm’s instructions under a separate agreement. Today the product is a demonstration running on invented data, so no such data exists yet.
What we collect and why
If you visit the website
We run no analytics and no tracking, and nothing on the page is loaded from an advertising or social network. Our hosting provider keeps ordinary server logs, which include your IP address, browser type and the pages requested, for a short period to keep the site secure and running. We do not use those logs to identify you.
If you email us or book a demonstration
We keep your name, your email address, the firm you are with and what you write to us, so that we can reply and, if you ask for one, arrange a demonstration. Our basis for this is our legitimate interest in answering people who contact us, and, where a demonstration or a trial is being arranged, the steps needed before a contract.
If you read the investor portal
The portal is protected by a password we share directly with each reader. There is no account and we do not record who reads it or when. A cookie remembers that the password was entered so you are not asked on every page.
If you try the product demonstration
The demonstration uses one shared account and every name, firm and figure inside it is invented. Nothing you do in it is stored beyond your own browser session and no personal data about you is collected.
If we are talking to you or your firm about Vateri
We keep a record of the search firms we have spoken to and the people at them: name, job title, firm, work email address and telephone number, a link to a professional profile where there is one, and notes of our conversations, including what was discussed and what was agreed next. Most of this comes from you directly; some comes from public sources such as a firm’s website or a professional network.
Our basis for this is our legitimate interest in running a business: remembering who we have spoken to, following up when we said we would and not contacting the same person twice with the same question. You can object at any time, and if you do we will stop and remove you, unless there is a specific reason we must keep a record.
If you are one of our team
The three founders sign in to a private area of the site to run the company. That holds our names, work email addresses and the records described above, plus our company’s own financial entries. Sign-in is handled by Clerk, a specialist provider, which keeps the account and its password on our behalf.
Who we share it with
We do not sell personal data and we do not share it for advertising. A small number of companies process it on our behalf, each under a written agreement that limits what they may do with it:
- Vercel, which hosts the website and serves it from locations near the reader. United States.
- Supabase, which runs the database behind our team area, in Frankfurt. European Union.
- Clerk, which handles sign-in for our own team. United States.
- Xero, our accounting software, which holds the details on invoices we issue and receive.
- Our email provider, which carries the messages you send us and we send you.
We may also share data where the law requires it, or with professional advisers under a duty of confidence.
Where it goes
Some of those providers are in the United States. Where personal data leaves the United Kingdom we rely on the safeguards the UK GDPR allows: the UK International Data Transfer Agreement or the Addendum to the EU standard contractual clauses, in place with each provider, and the UK’s adequacy decision for the European Union where data is kept there.
How long we keep it
- Messages you send us: for as long as the conversation is live and up to two years after our last exchange.
- Records of firms and people we are talking to: for as long as we are in conversation with you or your firm and up to two years after our last contact, unless you ask to be removed sooner.
- Financial records: six years after the end of the financial year they relate to, as the law requires.
- Server logs: kept by our hosting provider for a short, fixed period and then deleted.
How we keep it safe
Everything travels over encrypted connections. Our records are held in a database that cannot be reached from the public internet; the only way in is through our own sign-in, which is restricted to the founders by account and by address. Access is reviewed by the three of us and nobody else has it.
Your rights
You can ask us, at any time:
- what personal data we hold about you, and for a copy of it;
- to correct anything that is wrong;
- to delete it;
- to stop using it, or to limit what we use it for;
- for a copy in a form you can take elsewhere;
- to object to our use of it where we rely on legitimate interests, which includes any marketing.
Write to info@vateri.ai. We will answer within one month. We may ask you to confirm who you are first.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you told us first, so we can put it right.
Cookies
We set no advertising, analytics or tracking cookies, which is why the site does not ask you to accept any. The cookies it can set are all needed for something you have chosen to do, and each is listed here.
| Cookie | Where | What it does | Lasts |
|---|---|---|---|
| vateri_auth | Investor portal | Remembers that the password was entered, so each page does not ask again. | One year |
| vateri_welcome | Investor portal | A one-off flag that plays the opening sequence once after signing in. | One minute |
| vateri_desk | Product demonstration | Remembers that the demonstration was opened through its sign-in. | Thirty days |
| __session, __client_uat and other Clerk cookies | Team area | Keep our own team signed in. Set by Clerk, the sign-in service we use, only when one of us signs in. | Up to seven days |
| vateri_xero_state | Team area | Protects the handshake when we connect our accounting software. | Ten minutes |
You can delete any of them through your browser’s settings. Doing so signs you out of the area the cookie belonged to and nothing else.
Children
The site and the product are for professionals and are not aimed at anyone under eighteen. We do not knowingly collect data about children.
Changes
When we change this notice we change the date at the top. If a change matters to you, for instance because we start collecting something new, we will say so plainly rather than bury it.