Privacy Policy

Veda Software (“we”, “us”, “our”) is a UK software development company and part of the Veda group of businesses, which also includes Veda AI and Veda Flow. Our office is at 13–15 Enterprise Centre, Cottingham Road, Hull, East Yorkshire, HU6 7RX. Registered company details: available on request.

For any question about this policy or your personal information, contact us at hello@vedaai.co.uk.

This policy covers personal information collected through this website, vedasoftware.co.uk. In practice that means:

• Visits to our website
• The project-enquiry form (Discuss a Project)
• Email, phone and other direct communication with us
• Analytics and measurement, where you have given consent
• Ongoing client and prospect communications that follow an enquiry

Other Veda group websites — including vedaai.co.uk and vedaflow.co.uk — have their own privacy policies covering their own forms and tools.

Depending on how you interact with us, we may collect the following:

• Name and email address
• Phone number, where you provide it
• Company name, your role, and your business website, where you provide them
• The content of your enquiry — the project, system or requirement you describe
• Marketing attribution such as referral source or UTM parameters, where captured
• Technical data such as pages visited, device and browser type, and analytics identifiers — only where you have given consent

We do not set out to collect special category (sensitive) personal data through this website, and our form is not designed to gather it. Please avoid submitting sensitive personal information unless it is genuinely necessary for your enquiry.

• Responding to your enquiry and answering your questions
• Understanding, assessing and scoping the requirement you describe
• Arranging follow-up conversations, proposals and any resulting engagement
• Improving how the website performs and how its content is used — only with your consent to analytics
• Maintaining website security and preventing spam and abuse
• Meeting our legal and administrative obligations

We do not sell your personal information, and we do not add you to marketing lists from this website (see section 08).

Under UK data protection law we must have a lawful basis for using your personal information. Depending on the situation, we rely on:

• Legitimate interests — for responding to business enquiries, appropriate business-to-business follow-up, and preventing abuse of the website.
• Contract, or steps before entering a contract — for scoping, proposals and delivering client work that follows an enquiry.
• Consent — for non-essential cookies, analytics and similar measurement technologies.
• Legal obligation — where we are required to keep records or comply with the law.

When you submit the project-enquiry form, two things happen:

• Your enquiry is stored in the Veda group’s Supabase database, hosted in the EU region, so that it is recorded reliably and can be handled properly.
• A copy is delivered to our team by email using Resend, a transactional email provider, so we can respond quickly.

That information is used to respond to your enquiry and to manage any engagement that follows. It is not used for marketing lists or shared with unrelated third parties.

This website uses Google Tag Manager and Google Analytics 4 to understand how the site is used — but only after you consent. We use Google Consent Mode v2 with every category denied by default, so no analytics cookies are set and no full analytics hits are sent until you actively accept them. Essential technologies (such as the storage of your consent choice itself) run without consent because the site cannot respect your choice without them.

Separately, we record server-side product analytics using PostHog to understand which journeys lead to enquiries. These events are designed to avoid personal data: where an identifier is needed to group related events, any value derived from your email address is converted to a one-way hashed value first. That is pseudonymous data, not anonymous data, and we never send your raw email address, name or the contents of your enquiry to analytics tools.

Full detail on the specific cookies and similar technologies we use, and how to change your choices, is in our Cookie Policy.

Veda Software does not operate a newsletter or marketing list from this website, and submitting the enquiry form does not subscribe you to anything.

The Veda group’s newsletter is operated by Veda AI on vedaai.co.uk under its own privacy policy. If you choose to sign up there, Veda AI is responsible for that data and its consent wording applies.

Veda Software is part of the Veda group. Where it is genuinely needed to respond to your enquiry — for example, where a project touches strategy work handled by Veda AI, or workflow analysis handled by Veda Flow — your enquiry details may be shared within the Veda group so the right people can respond.

Information shared within the group is used only for responding to your enquiry and managing any resulting engagement, and is protected to the same standard described in this policy.

We share personal information only with trusted service providers (processors) that help us operate the website, and only as needed. These currently include:

• Vercel — website hosting, and privacy-focused web analytics loaded only with your consent.
• Supabase — secure, EU-region storage of enquiry data.
• Resend — delivery of enquiry notification emails.
• Google — Google Tag Manager and Google Analytics 4, used only with your consent.
• PostHog — server-side product analytics using hashed, pseudonymous identifiers.
• Professional advisers, where we need their advice.
• Authorities or regulators, where we are legally required to share information.

Each provider receives only the information needed for its role and is expected to protect it in line with applicable data protection law.

Enquiry data is stored in the EU. Some of our providers may process personal information outside the UK, including in the United States. Where this happens, we rely on UK adequacy regulations where they apply, or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, so that your personal information remains protected in line with UK data protection law.

We keep enquiry information for as long as needed to handle your enquiry and any resulting engagement. Where an enquiry becomes client work, related records are kept for the duration of the engagement and afterwards where legal, accounting or legitimate business purposes require it.

• Enquiries that do not progress are retained only as long as needed for follow-up and administration.
• Client and project records are retained as required for the service and for legal or accounting purposes.
• Analytics data is retained according to the relevant provider’s settings.
• You can ask us to delete your information at any time, subject to any legal or legitimate retention needs.

We take reasonable technical and organisational measures to protect personal information. These include serving the website over HTTPS, access controls on stored data, working with reputable providers, and limiting access to personal information to those who need it.

No method of transmission or storage is completely secure, so while we work to protect your information we cannot guarantee absolute security.

Under UK GDPR you have the right to:

• Access the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information
• Ask us to restrict how we use it
• Object to certain uses of your information
• Request portability of information where applicable
• Withdraw consent at any time, where we rely on consent
• Complain to the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at hello@vedaai.co.uk. You can also complain to the ICO if you are unhappy with how we have handled your information.

This website and our services are intended for business users aged 18 or over. We do not knowingly collect personal information from children.

Our website links to other websites, including other Veda group sites. Those websites have their own privacy policies, and we are not responsible for how they handle your personal information.

We may update this policy as our website, tools and legal obligations change. The latest version will always be shown on this page, with the review date updated accordingly.