Last updated: October 7, 2026
1. Who we are
Verigo Global ("Verigo", "we", "us") is an information security compliance consultancy registered in Connecticut, USA. We are the controller of the personal information described in this policy.
Address: 430 New Park Avenue, Suite 102, Hartford, CT 06105, United States
Privacy contact: admin@verigoglobal.com
This policy covers verigoglobal.com and the services, toolkits, assessments and training we offer through it. When we deliver consulting work, our client agreement may set out additional terms for data we handle on a client's behalf.
2. Information we collect
Information you give us
- Contact and enquiry forms: name, work email, phone number, organization, job title or role, company website, company size, market or region, the framework you're interested in, and your message.
- Quote requests, resource downloads, webinar replays and readiness assessments: your contact details plus the options or scope information you select (for example target framework, assessment level and timeline). Your answers to assessment questions are scored in your browser; we receive your contact and scope details, not your individual answers.
- Training enrollment: your name, contact details, organization, job title, chosen course option, and any notes such as invoicing requirements.
- Payments: when you pay us (for example for training or toolkits), payment is handled by our payment processor. We receive confirmation and billing details, but not your full card number.
- Communications: emails and other correspondence you send us.
Information collected automatically
- Analytics (only with your consent): if you accept analytics cookies, Google Analytics collects information such as pages viewed, time on page, referring site, device and browser type, and approximate location (city/country). Google Analytics 4 does not store IP addresses. If you decline, we use Google's Consent Mode, which sends limited cookieless signals that cannot identify you and are used only for aggregate measurement.
- Form events: when you submit a form we record an anonymous "lead" event in Analytics showing which type of form was used and which framework it related to. No names or contact details are sent to Google.
- Server and security logs: our hosting provider keeps standard web server logs (IP address, browser, pages requested, time). Our form handler records the time, form type and delivery status of each submission, and briefly keeps a one-way hashed form of your IP address (for about 10 minutes) to block spam.
- Your browser's storage: the site stores your cookie choice, and details you've entered in forms so they can be pre-filled on later forms, in your own browser's local storage. This stays on your device.
3. How we use your information
- To respond to enquiries, prepare proposals and quotes, and schedule calls.
- To deliver the resources, toolkits, assessment reports and training you request.
- To perform and administer contracts with clients, including invoicing and payments.
- To send you insights, event invitations and service updates by email — only if you opted in. Every message includes an unsubscribe link, and you can opt out at any time.
- To understand how our website is used and improve it (analytics, with consent).
- To keep our website and services secure, prevent spam and abuse, and comply with legal obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use automated decision-making that has legal or similarly significant effects on you.
4. Legal bases (UK, EU and similar laws)
- Consent: analytics cookies and marketing emails. You can withdraw consent at any time.
- Contract / steps before a contract: responding to your requests, quotes, training enrollment and client work.
- Legitimate interests: running and securing our business and website, and following up on business enquiries you've made. We balance these against your rights.
- Legal obligation: for example keeping financial records.
5. Who we share it with
We share personal information only with service providers who process it on our behalf under contract, and only as needed:
- Website hosting and business email (Hostinger).
- Website analytics (Google Analytics, with your consent) and website fonts (Google Fonts) and code libraries (Cloudflare cdnjs), which receive your IP address when your browser loads them.
- Customer relationship management (CRM) software we use to manage enquiries and client relationships.
- Email newsletter software, for people who opted in to marketing emails.
- Payment processors, for payments you make to us.
- Professional advisers (such as lawyers and accountants), certification bodies or assessors where you've asked us to coordinate with them, and authorities where required by law.
If our business is reorganized or sold, information may transfer to the new owner under the same protections.
6. International transfers
We are based in the United States and our service providers may process data in the US and other countries. Where we transfer personal information from the UK, EEA, India, Singapore or other regions with transfer rules, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the provider's certification under the EU-U.S. Data Privacy Framework and its UK extension, as applicable.
7. How long we keep it
- Enquiries and leads that do not become clients: up to 2 years after our last contact, then deleted.
- Client and contract records: for the length of the engagement and up to 7 years afterwards for legal, tax and accounting purposes.
- Marketing list: until you unsubscribe; we then keep your email on a suppression list so we do not contact you again.
- Analytics data: up to 14 months.
- Form delivery logs: up to 12 months. Spam-prevention IP hashes: about 10 minutes.
8. Your rights
Depending on where you live, you may have the right to: access the personal information we hold about you; correct it; delete it; restrict or object to our use of it; receive a portable copy; withdraw consent at any time; and opt out of marketing.
To exercise any of these rights, email admin@verigoglobal.com. We'll respond within one month (or sooner where local law requires) and may need to verify your identity. We won't treat you differently for exercising your rights.
You can also complain to a data protection authority — for example the UK Information Commissioner's Office (ico.org.uk), your local EU supervisory authority, Singapore's Personal Data Protection Commission (pdpc.gov.sg), or India's Data Protection Board. We'd appreciate the chance to resolve your concern first.
9. Cookies & similar technologies
We only set analytics cookies if you click Accept analytics on our cookie banner. You can change your choice at any time using Cookie settings (also in the website footer). We do not use advertising cookies.
| Name | Type | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Analytics cookie (Google) — only with consent | Distinguishes visitors and sessions to measure site usage | Up to 2 years |
vg_consent | Local storage (strictly necessary) | Remembers your cookie choice | Until you clear it |
verigo_toolkit_user, verigo_toolkit_leads | Local storage (functional) | Pre-fills your details on later forms and keeps your assessment progress on your device | Until you clear it |
You can also delete cookies and local storage through your browser settings.
10. Security
As a security compliance firm, we take protecting information seriously. We use encrypted connections (HTTPS) for our website, authenticated and encrypted email delivery, access controls, and reputable providers. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and regulators of a breach where the law requires.
11. Children
Our website and services are intended for businesses and professionals. They are not directed to children under 16, and we do not knowingly collect their personal information.
12. Changes & contact
We may update this policy from time to time. The "Last updated" date shows the latest version, and we'll highlight material changes on this page.
Questions or requests: admin@verigoglobal.com · Verigo Global, 430 New Park Avenue, Suite 102, Hartford, CT 06105, United States