Privacy Policy

Last updated: 2026-01-22

This Privacy Policy explains how Veqaro ("we", "us", "our") collects, uses, shares, and protects personal data when providing debt collection and invoice-chasing services (the "Services"). We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

---

1. Who We Are

Controller: Wakeflow Ltd.

Registered address: 2A Ledbury Mews N, London W11 2AF, UK

Contact email: care@veqaro.com

In most cases, we act as a data processor on behalf of our business clients (the creditors). In some limited circumstances (e.g. compliance, billing, marketing), we act as a data controller.

---

2. Personal Data We Collect

Depending on the nature of the Services, we may collect and process the following categories of personal data:

a) Debtor information

• Name
• Business name
• Job title
• Postal address
• Email address
• Telephone number
• Invoice references and payment status
• Communications relating to the debt

b) Client (creditor) information

• Name and business contact details
• Billing information
• Account credentials
• Contractual and correspondence data

c) Technical and usage data

• IP address
• Device and browser information
• Log files and access records
• Cookies and similar technologies

---

3. How We Collect Personal Data

We collect personal data from:

• Our clients when they onboard or upload invoices
• Debtors when they respond to communications
• Publicly available business sources (e.g. Companies House)
• Our website and digital platforms
• Third-party service providers used to deliver the Services

---

4. Purposes and Legal Bases for Processing

We process personal data only where permitted by law, including:

Purpose	Legal basis
Debt recovery and invoice chasing	Legitimate interests / Contract
Communication with debtors	Legitimate interests
Compliance with legal obligations	Legal obligation
Client onboarding and service delivery	Contract
Fraud prevention and audit	Legitimate interests
Service improvement and analytics	Legitimate interests

Where required, we will obtain consent.

---

5. How We Use Personal Data

We use personal data to:

• Contact debtors regarding outstanding invoices
• Manage and progress debt recovery workflows
• Provide reporting and updates to our clients
• Comply with legal and regulatory obligations
• Maintain platform security and prevent misuse

We do not use personal data for automated decision-making that produces legal or similarly significant effects without appropriate safeguards.

---

6. Sharing Personal Data

We may share personal data with:

• Our clients (the creditors)
• Payment service providers
• Legal advisers and courts where required
• IT and cloud service providers
• Regulators, law enforcement, or public authorities when legally required

All third parties are required to protect personal data and use it only for specified purposes.

---

7. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• Adequacy regulations
• International Data Transfer Agreements (IDTAs)
• Standard Contractual Clauses

---

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, including:

• The duration of the debt recovery process
• Legal, regulatory, or contractual retention requirements

Retention periods are reviewed regularly.

---

9. Data Subject Rights

Individuals have the right to:

• Access their personal data
• Request rectification or erasure
• Restrict or object to processing
• Request data portability
• Withdraw consent (where applicable)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made by contacting us using the details above.

---

10. Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

• Access controls and authentication
• Encryption in transit and at rest
• Regular security reviews
• Staff confidentiality obligations

---

11. Cookies

Our website uses cookies and similar technologies. For more information, please see our Cookie Policy.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website and, where appropriate, notified to clients.

---

13. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, please contact:

Email: care@veqaro.com

Post: 2A Ledbury Mews N, London W11 2AF, UK