Privacy Policy

Last updated: 30 August 2026

This notice explains what we do with personal data collected through vettalex.com. It is written for people who contact us through this website, and it is deliberately short, because this site collects very little.

Who we are

VettaLex is a trading name of Project NV Ltd, a company registered in England and Wales under company number 17109959, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Project NV Ltd is the controller for the personal data described in this notice. If you have a question about it, or want to exercise any of the rights set out below, email nic@vettalex.com.

What this notice covers

It covers personal data we collect when you use this website or contact us about our services.

It does not cover personal data we process on behalf of a client during an engagement. In that situation the client is usually the controller and we act as a processor under the terms of the engagement, and their own privacy notice applies to the individuals concerned.

Information we collect

Information you give us

If you complete the enquiry form, we collect your name, your organisation, your email address and whatever you write in the message field. If you email us directly, we collect whatever your message contains.

Information collected automatically

Our hosting provider keeps standard server logs, which typically include IP addresses, browser type and the pages requested. These are generated automatically by the technology that serves the site and are used to keep it running and secure. We do not use them to build any profile of you.

This site sets no cookies of its own and runs no analytics or advertising trackers.

How we use it, and our lawful basis

Responding to your enquiry

Legitimate interests (UK GDPR Article 6(1)(f)). It is in both our interests that we can reply to someone who has approached us about our services. Where a conversation progresses towards an engagement, we also rely on Article 6(1)(b) — steps taken at your request before entering into a contract.

Keeping a record of correspondence

Legitimate interests. We keep a record of what was discussed and agreed, and of any conflict-of-interest considerations that arose.

Running and securing the website

Legitimate interests, in keeping the site available and protecting it from misuse.

Meeting legal obligations

Legal obligation (Article 6(1)(c)), where we are required to retain records or respond to a lawful request.

We do not use your details for marketing. We do not operate a mailing list, we will not add you to one, and we do not sell, rent or share your details for anyone else's purposes.

Who we share it with

We do not sell or disclose your personal data other than as set out here. Your details may be handled by the following categories of recipient, each acting on our instructions under a written contract:

• our website hosting provider;
• the provider of the form service that delivers enquiries to us;
• our email and business software providers; and
• our professional advisers, where they need it to advise us.

We may also disclose personal data where we are required to do so by law, by a court, or by a regulator.

Storage and international transfers

Some of the providers above may store or process personal data outside the United Kingdom. Where that happens, we make sure the transfer is covered either by UK adequacy regulations or by an appropriate safeguard — normally the International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses.

How long we keep it

Where an enquiry does not lead to an engagement, we keep the correspondence for 24 months from our last contact with you, and then delete it. We keep it that long so that we can pick up a conversation that resumes later, and so that we have a record of what was discussed.

Where an enquiry does lead to an engagement, the records are kept under the retention terms of that engagement.

Security

The site is served over HTTPS. We keep the number of people who can access enquiry correspondence to the minimum, use access controls on the accounts that hold it, and keep the software we rely on up to date. No system is perfectly secure, but we take the protection of what you send us seriously.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to erase your data, where there is no good reason for us to keep it;
• ask us to restrict how we use it while a concern is resolved;
• object to our processing where we rely on legitimate interests; and
• receive your data in a portable format, where that right applies.

To exercise any of these, email nic@vettalex.com. We will respond within one month. We may ask you to confirm your identity first. There is no charge unless a request is manifestly unfounded or excessive.

You are not obliged to give us any personal data. If you choose not to complete the enquiry form, we simply will not be able to reply to you.

Automated decision-making

We do not make any decision about you by automated means, and we do not carry out profiling, on the basis of the information you submit through this website.

Children

This website is aimed at businesses and the people who work in them. It is not directed at children and we do not knowingly collect their personal data.

Changes to this notice

If we change how we handle personal data, we will update this page and change the date at the top of it.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first at nic@vettalex.com so that we have the chance to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.