Last updated: January 2026
Veyco Ltd (“Veyco”, “we”, “us”) processes personal data to support secure identity verification, compliance checks, fraud prevention, and related onboarding, tenancy and transaction workflows in legal and regulated contexts.
Veyco Ltd is a UK-registered company providing identity verification and anti-fraud tools to law firms, conveyancers, estate agents, letting agents and other regulated institutions (each a “Partner”). Our services are delivered through our platform at https://veyco.com/, via our applications, and via Partner integrations.
We are committed to protecting privacy and maintaining high standards of data protection and transparency. This Privacy Policy explains how Veyco collects, uses, shares and protects personal data, the lawful bases for processing, and the rights available to individuals whose data we process.
Veyco Ltd is registered with the Information Commissioner’s Office (ICO) under registration number ZB033709. Unless stated otherwise, Veyco acts as the data controller for the personal data described in this Policy.
Applicable Law means all applicable data protection and privacy legislation in force in the UK.
Commissioner means the Information Commissioner’s Office.
Controller means the entity that determines the purposes and means of processing personal data.
Data Subject means the individual whose personal data is processed.
Personal Data means any information relating to an identified or identifiable individual.
Processing means any operation performed on personal data.
Processor means a third party that processes personal data on behalf of a controller.
Reports means verification outputs, scores, certificates and audit trails generated by Veyco as part of the Services.
Services means identity verification, document checks, compliance screening, audit trail generation and related onboarding tools.
UK GDPR means the UK General Data Protection Regulation and associated UK data protection legislation.
Veyco acts as a data controller when processing personal data to deliver the Services. We determine what personal data is required, the purposes for which it is processed, and the retention periods applied, including where data must be retained to support legal, regulatory and audit obligations.
In limited circumstances where a Partner determines the specific checks to be carried out and instructs Veyco accordingly, Veyco may act as a processor for those discrete processing activities. In such cases, processing is carried out strictly in accordance with the Partner’s documented instructions and contractual arrangements.
Veyco processes personal data only where a lawful basis applies. Depending on the Services used, this may include:
• Consent, where explicitly provided by the User;
• Performance of a contract, including verifying identity and onboarding Users at a Partner’s request;
• Compliance with legal obligations, including anti-money laundering and regulatory record-keeping requirements; and
• Legitimate interests, such as ensuring platform security, preventing fraud and misuse, and maintaining auditability.
We may process the following categories of personal data, depending on the Services used:
• Name, contact details and date of birth;
• Identity documents such as passports and driving licences;
• Facial biometrics and liveness data;
• Proof of address documentation;
• Compliance screening results (including sanctions and PEP indicators where applicable);
• IP address, device identifiers and technical metadata;
• Platform usage data, logs and audit trail information; and
• Any documents or information submitted for verification or compliance purposes.
Personal data is collected:
• When a User is invited by a Partner to complete a verification or onboarding process;
• When Users upload documents, images or information directly via the Veyco platform;
• Through integrations with third-party verification, screening and database providers; and
• Automatically through technical interactions with our website and applications.
We use personal data to:
• Verify identity and validate documents;
• Perform biometric and liveness checks;
• Run compliance and background screenings;
• Generate Reports and audit trails for regulatory compliance;
• Enable Partners to make tenancy-related or transaction-related decisions; and
• Detect, prevent and investigate fraudulent or unauthorised activity.
We may also use aggregated or pseudonymised data to improve our technology and internal processes. We do not use personal data for marketing purposes or unrelated profiling.
Veyco generates Reports as part of providing the Services. Reports may contain personal data and elements of Veyco intellectual property.
Partners are permitted to store and use Reports for their internal business purposes, including regulatory compliance, tenancy or transaction decision-making, and record-keeping. Partners must not sell, resell, publish, or use Reports for purposes unrelated to the Services, or use them for model training, except where expressly permitted under contract.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including providing the Services, complying with legal and regulatory obligations, maintaining audit trails, resolving disputes and enforcing contractual rights.
In some cases, retention periods are determined by the Partner that invited the User to use the Services. Requests for deletion will be assessed in accordance with Applicable Law and may be refused where retention is required by law.
We use analytics tools to understand how our platform is used and to improve performance and user experience. These include:
• UXCam – used within our applications to analyse non-identifying usage behaviour such as taps and navigation flows; and
• Hotjar – used on our website to monitor visitor experience using pseudonymised data.
No identity verification content is captured for analytics purposes.
We use carefully selected processors to help provide the Services, including identity verification providers, screening providers, hosting and infrastructure providers, and email and support platforms. Where applicable, payment-related checks may be carried out by Stripe.
All processors are subject to contractual obligations to protect personal data and act only on our instructions.
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK-approved standard contractual clauses or other lawful transfer mechanisms.
You have the right to access your personal data, request correction of inaccurate data, request erasure where appropriate, restrict or object to processing, receive your data in a portable format, withdraw consent where processing is based on consent, and lodge a complaint with the ICO.
To exercise your rights, please contact support@veyco.com.
We implement appropriate technical and organisational measures to protect personal data, including encryption, access controls, audit logging, secure hosting environments, and regular security assessments and staff training.
We use cookies on our website for analytics and performance purposes. Users can manage cookie settings through their browser. Some site features may not function correctly if cookies are disabled.
If you have concerns about how your personal data is handled, you may contact us at support@veyco.com or raise a complaint with the ICO:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Email: enquiries@ico.org.uk
We may update this Privacy Policy from time to time. The current version will always be available at https://www.veyco.com/legal/privacy