Privacy Notice

This section defines terminology used in this Privacy Notice to help readers understand the categories of data and processing operations referenced throughout the document.

Veridara collects personal data in order to provide services, communicate with users and comply with legal obligations. Data may be provided directly by users, collected automatically through site interactions, or obtained from third-party sources where permitted.

The following types of data may be provided by users when contacting Veridara, registering for services or communicating about coaching engagements:

• Contact details: full name, email address and telephone number.
• Company and professional information: business name, role, industry and business size.
• Communications: messages, meeting notes and documents submitted for coaching or assessment.
• Billing and invoicing information: billing contact, invoicing address and payment method details required to process transactions.
• Account data: usernames, account preferences and service enrollment details.
• Consents and preferences: opt-ins, marketing preferences and recorded consents for specific processing activities.

When users interact with fkverida.biz, Veridara may collect information automatically using standard web technologies to operate and improve the site and services.

• Technical data: IP address, browser type and version, device model and operating system.
• Usage data: pages visited, time spent on pages, click activity and navigation paths.
• Analytics data: aggregated metrics from analytics services to understand site performance and feature usage.
• Cookie identifiers and similar local storage data used to maintain session state and preferences.
• Error and diagnostic logs to identify and resolve technical issues.
• Geolocation data at a coarse level derived from IP address for regional reporting.

Veridara may receive personal data about users from third-party sources in certain contexts such as payment processing or analytics services.

• Payment processors and business service providers that handle transactions and related verification.
• Analytics and cloud hosting providers that supply technical and usage information about site interactions.
• Professional contacts and business directories when a user is referred or introduced through a partner.

Veridara processes personal data for specific, documented purposes that are necessary to deliver services and meet legal or contractual obligations.

• To provide coaching and consulting services, including scheduling, session delivery and follow-up communications.
• To process payments, invoices and manage billing relationships.
• To respond to inquiries, provide customer support and manage service-related communications.
• To operate, secure and improve the website and associated systems using analytics and monitoring data.
• To meet legal, regulatory and tax obligations applicable to Veridara's operations in Canada.
• To send service-related notices and, where consent has been obtained, relevant marketing communications.
• To evaluate and manage risks related to fraud prevention and security incidents.
• To support business processes such as accounting, recordkeeping and dispute resolution.

Veridara relies on lawful bases for processing personal data. The specific basis depends on the processing activity and context.

• Performance of a contract: processing necessary to provide the services requested by a user.
• Consent: where users have expressly agreed to specific processing such as marketing communications.
• Legitimate interests: where necessary for Veridara's business operations, security, fraud prevention and improving services, balanced against individual rights.
• Legal obligation: processing required to comply with applicable laws, regulations or court orders.

Veridara shares personal data only where necessary to provide services, comply with legal obligations, or with explicit user consent. Third-party recipients are limited to entities that perform services on Veridara's behalf or where disclosure is required by law.

• Service providers and vendors that support payment processing, hosting, analytics and customer support.
• Professional advisors and accountants when required for legitimate business purposes and compliance.
• Legal and regulatory authorities when disclosure is necessary to comply with a legal obligation or in response to lawful requests.
• Affiliated entities or partners when needed to deliver contracted services to a client.
• Potential acquirers or participants in a corporate transaction, subject to confidentiality and due diligence safeguards.
• Third parties authorised by the user, where the user has provided express consent for that sharing.

Veridara implements administrative, technical and physical measures designed to protect personal data against unauthorized access, use, alteration and disclosure. Measures are regularly reviewed and updated according to evolving standards and operational requirements.

• Encryption in transit (TLS) and encryption at rest for stored sensitive data where appropriate.
• Access controls, role-based permissions and multi-factor authentication for internal systems.
• Regular backups, security monitoring, staff training and an incident response process to address potential breaches.

Depending on applicable law, individuals may have rights in relation to their personal data. Veridara provides mechanisms to exercise these rights and responds to requests in a timely manner.

• Right of access: request a copy of personal data processed by Veridara.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of personal data where retention is not required by law.
• Right to restriction: request limitation of processing in certain circumstances.
• Right to data portability: receive a machine-readable copy of data provided by the user where applicable.
• Right to object: object to processing based on legitimate interests or direct marketing where applicable.
• Right to restriction of processing: You may request that Veridara limits processing of your personal data in specific circumstances, for example while a dispute about accuracy is being resolved.
• Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time; withdrawal does not affect processing that occurred prior to withdrawal.

• Lawful basis for processing: We rely on legal bases such as performance of a contract, compliance with legal obligations, legitimate interests, and consent where required for specific processing operations.
• Transparency and information: Veridara provides clear information about the categories of personal data processed, purposes of processing, recipients, and retention periods to individuals in the EEA.
• Data minimization and purpose limitation: We restrict collection to data that is adequate and relevant for the specified purposes and do not use personal data for unrelated purposes without additional legal basis.
• Data subject rights: Individuals in the EEA may exercise rights including access, rectification, erasure, restriction, objection, and data portability in accordance with GDPR procedures.

If you believe Veridara has not responded appropriately to a GDPR-related request, you may file a complaint with the relevant supervisory authority in your member state. Veridara will cooperate with supervisory authorities as required by applicable law.

Veridara does not knowingly collect or solicit personal data from individuals under 18 for our coaching services. If we learn that personal data of a minor has been collected in error, we will take steps to delete such information promptly.

Our website and communications may include links to third-party websites and services. Veridara is not responsible for the privacy practices or content of those external sites. Review third-party privacy notices before providing personal information.

We may update this privacy notice periodically to reflect operational changes or legal requirements. When changes are material, Veridara will provide notice through our website or direct communication. Continued use of our services after updates indicates acceptance of the revised notice.