Privacy Policy.

Vettsafe (“Vettsafe”, “we”, “us”) provides automated due diligence checks for bridging lenders. We are the data controller for the personal data described in this policy.

For any privacy question, request or complaint, contact us at contact@vettsafe.com. Our registered company details and postal address are available on request.

• Account data: your name, work email address and password (stored only as a secure hash), created for you when your account is set up.
• Check data: the details you enter for a check — firm name, company number, contact name and email address — plus the results we retrieve, the flags we raise, and the accreditation and verification records you keep in the app.
• Evidence: screenshots captured from public registers at the time of each check, stored in private storage linked to your account.
• Technical data: server logs such as request times and error logs needed to run and secure the service.

By its nature, a Vettsafe check contains personal data about people other than the user — company directors, persons with significant control, disqualified directors and individuals found on the FCA or SRA registers. This information comes from public registers and is processed to give you the due diligence result you asked for.

As our customer, you control which names and email addresses you enter. You are responsible for having an appropriate lawful basis (such as a legitimate interest in assessing a counterparty) for the third-party details you submit, and we provide the checks, audit trail and evidence to support that assessment.

• Performance of a contract: running checks, storing results and evidence, and producing PDF credit files for your account.
• Legitimate interests: securing the service, preventing misuse, and communicating service updates about your account.
• Legal obligations: keeping records where required by law and responding to lawful requests from authorities.

• Public registers: Companies House, the FCA Register, the SRA register and scam alerts, the Law Society directory, the ICO register, The Gazette and trade bodies (NACFB/FIBA). Data shown in a report comes from these public sources at the time of the check.
• Screenshot capture: our screenshot provider (Firecrawl) loads the public register pages and captures the evidence images on our behalf.
• Hosting and storage: the app, its database and evidence storage run on Lovable Cloud (backed by Supabase), with authentication and private storage.
• Email: we use your email address to operate your account and to respond to support and enquiries sent to contact@vettsafe.com.

Account and check data are kept for as long as your account is active, so your check history and audit trail remain available. Evidence screenshots are kept with their checks for the same period.

If you ask us to close your account, we delete your checks, evidence and account data within 30 days, unless we must keep something for a legal reason. Server logs are kept for up to 12 months.

Data is encrypted in transit. Access to check and evidence records is restricted to the account that created them, enforced at database level. Passwords are stored only as secure hashes. No system is perfectly secure, but we review and update our protections regularly.

Some providers we use, including our screenshot provider, may process data outside the UK. Where that happens, we rely on the transfer safeguards recognised under UK GDPR, such as the UK International Data Transfer Addendum or standard contractual clauses.

Under UK GDPR you have the right to access your personal data, correct it, delete it, restrict or object to its use, and receive a copy of it in a portable format. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you are unhappy with how we handle your data.

To exercise any right, email us at contact@vettsafe.com and we will respond within one month.

We may update this policy as the service evolves. The latest version is always on this page, with the date it last changed at the top.