This policy explains what personal information Varisett collects when you visit varisett.com, contact us, or hold a Varisett customer account, and what we do with it.
Who we are
Varisett is Varisett Limited, a company registered in England and Wales (company number 17497303), registered office 27 Old Gloucester Street, London WC1N 3AX. We are registered with the Information Commissioner's Office, registration number ZC266928.
For anything about your information, email info@varisett.com.
Two different roles
- This policy covers information we decide how to use (we are the "controller"): visitors to varisett.com, people who contact us or book a call, and the people who hold a Varisett customer account.
- Information inside a customer's own system (for example their staff's training records, their customers' bookings, or their warehouse orders) belongs to that business. They decide how it's used and we process it for them under our Data Processing Agreement, which every customer receives with our terms. If you're an employee or customer of a business that uses Varisett, contact that business first; we'll help them answer you.
What we collect and why
| What | When | Why (lawful basis) |
|---|---|---|
| Name, business name, email, phone, what you're interested in | You book a call, email us, or use the contact options | To reply and talk to you about Varisett (legitimate interests; steps before a contract) |
| Name, email, password (stored as a one-way hash), business details, which platforms you have | You create a varisett.com account or order | To provide your account and the platforms you order (contract) |
| Billing details | You pay | Payments are handled by Stripe; card details go straight to Stripe and never reach us. We keep records of what was paid and when (contract; legal obligation to keep accounts) |
| Messages you type into the website assistant (once it's switched on) | You use the assistant | To answer you and, if you choose to leave details, to follow up (legitimate interests) |
| Visit statistics | You browse varisett.com | To see which pages help people (legitimate interests). These are cookieless: your IP address and browser details are combined with a key that changes every day into a code that can't be traced back to you, and the IP address itself is never stored |
| Testimonials and reviews | Only if you give one and approve it | To show other businesses what customers think (consent, which you can withdraw) |
| Business contact details (name, role, business, work email and phone) | We find your business as a possible customer and get in touch | To tell you about Varisett where it's relevant to your business (legitimate interests). We email limited companies and other incorporated businesses; sole traders and partnerships only with their consent. We don't make cold phone calls. Ask us to stop at any time and we'll keep only enough to make sure we never contact you again |
| Name typed to accept, date and time, IP address and browser details | You accept a free trial agreement | As a record that the agreement was accepted (contract; legitimate interests) |
| Copies of the emails we send you | We email you about your account, order or trial | To show what we told you and when (contract; legitimate interests) |
We don't sell personal information, and we don't use it for advertising profiles.
Our AI assistant
Some of our emails to businesses are written and sent by Faye, Varisett's AI assistant, and we use AI to find publicly listed businesses and their published contact details, and to sort the replies we get. Faye is always introduced as an AI. A person decides what she does, and our team reads every reply. Nothing that affects you in a legal or similarly significant way is decided automatically.
Who we share it with
Only the services we need to run Varisett, under contracts that require them to protect it and use it only for us:
| Type of service | What for | Where |
|---|---|---|
| Cloud database and file storage provider | Each customer's separate database and files; our own records | Customer databases: London, UK. Our own records: Dublin, Ireland (EU) |
| Cloud application hosting provider | Running varisett.com and the platforms | London, UK |
| Email delivery provider | Sending our emails | United Kingdom or EU |
| Stripe | Taking payments: card details go to Stripe and never reach us | UK/EU and USA |
| AI provider | Helping write our emails to businesses, finding businesses' published contact details, sorting replies, and the website assistant (once it's switched on) | USA |
Customers can see the named list of these services in their Varisett account, or ask us at info@varisett.com.
Where information goes outside the UK, we make sure it's protected by the safeguards UK data protection law requires: the UK's adequacy regulations, or the ICO's international data transfer agreement or its addendum to the EU standard contractual clauses.
We may also share information if the law requires it.
How long we keep it
We keep information only for as long as we need it, and delete it automatically when the time is up:
| Information | How long |
|---|---|
| Call bookings and enquiries | 2 years after our last contact, unless you become a customer |
| Business contacts we got in touch with | 12 months after our last contact if you never replied; 2 years if you did. If you ask us to stop, we keep only your business name and email, so we never contact you again |
| Your varisett.com account | While your business uses Varisett. It's deleted 30 days after your last platform's data is deleted, or 2 years after your last sign-in if your business never ordered |
| Your business's data in its platforms | As set out in our terms: when a platform closes, a full download is kept for 30 days and then the data is permanently deleted. Backup copies expire within 7 days after that |
| Billing and payment records | 6 years after the end of the financial year they belong to, as tax law requires |
| Free trial records | If you accepted a trial, 6 years after it ended, as evidence of the agreement. Invitations that were never accepted, 2 years |
| Copies of emails we send | The text is removed after 90 days. A short record (who we emailed, the subject and when) stays with your account, or for 2 years if you're not a customer |
| Testimonials | Until you withdraw them, and they come down when your business stops using Varisett, unless you tell us you're happy for them to stay |
| Website assistant chats (once switched on) | 6 months |
| Visit statistics | Counts only, which can't identify anyone |
Your rights
You can ask to see the information we hold about you, have it corrected or deleted, restrict or object to how we use it, or receive it in a portable format. Email info@varisett.com; we'll reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we'd like the chance to put things right first.
Security
Each customer business runs on its own separate database in London, access within it is limited by role, information is encrypted when stored and whenever it travels, and databases are backed up daily.
Changes
We'll update this page if anything changes and show the date at the top. If a change matters to customers, we'll email them.