Legal
Privacy Policy
Last updated: 12 May 2026
1. Who we are
Vertano Agency (“Vertano”, “we”, “our”, “us”) is a retention and email marketing consultancy based in the United Kingdom, working with health, wellness and lifestyle DTC brands worldwide.
For the purposes of UK data-protection law (the UK GDPR and the Data Protection Act 2018), Vertano Agency is the data controller of personal data collected through this website and in the course of our business communications.
- Trading name: Vertano Agency
- Registered location: Caister-on-Sea, Norfolk, United Kingdom
- Contact email: account@vertanoagency.com
2. Personal data we collect
We only collect personal data that is necessary to respond to enquiries, deliver our services and run our business. This may include:
- Identity & contact data - name, job title, company, email address, phone number and business address, provided when you email us or contact us about our services.
- Project data - information you share with us about your brand, customers, marketing performance and business operations during an engagement.
- Technical data - IP address, browser type and version, device information and basic usage data automatically collected by our hosting provider and any analytics tools we use on this website.
- Communications data - the content of emails, calls, meeting notes and messages you send to us.
We do not knowingly collect personal data from anyone under the age of 16. Our services are aimed at businesses and not consumers.
3. How we use your data
We process personal data only where we have a lawful basis under UK GDPR. Our typical purposes and bases are:
- Responding to enquiries - legitimate interests (running and growing our business) and, where relevant, steps prior to entering a contract.
- Delivering our services - performance of a contract with your organisation.
- Accounting, invoicing and record-keeping - legal obligation.
- Improving this website and our services - legitimate interests.
- Marketing our own services to existing or prospective business contacts - legitimate interests, with an opt-out available at any time.
4. Client data we process on your behalf
When we deliver retention marketing services, we may process personal data of your customers and subscribers (for example, inside Klaviyo, Shopify or other tools) on your behalf. In that scenario we act as a data processor and you act as the data controller. We process such data only on your documented instructions and in accordance with a data processing agreement where required.
5. Sharing your data
We do not sell personal data. We share it only with trusted service providers who help us run our business, including:
- Email, hosting and cloud infrastructure providers.
- Marketing platforms used in client engagements (e.g. Klaviyo, Shopify, analytics tools), subject to your instructions where you are the controller.
- Accountants, tax advisors and legal advisors where necessary.
- Authorities or regulators when required by law.
Some providers may process data outside the United Kingdom or European Economic Area. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations, Standard Contractual Clauses or the UK International Data Transfer Addendum.
6. How long we keep your data
We keep personal data only for as long as is necessary for the purposes set out in this policy, to comply with legal, accounting or reporting obligations, or to resolve disputes. Project records and contracts are typically kept for up to seven (7) years after the end of an engagement.
7. Your rights
Under UK GDPR you have the right to: access your data; request correction or deletion; restrict or object to processing; data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at account@vertanoagency.com.
You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
8. Cookies & analytics
This website uses only the cookies and similar technologies strictly necessary to operate the site and, where applicable, privacy-respecting analytics to understand aggregate usage. Where any non-essential cookies are introduced in the future, we will request your consent before they are set.
9. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. No system is perfectly secure, so we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page will always reflect the current version.
11. Contact us
Questions about this privacy policy or our use of your data? Email account@vertanoagency.com or write to us at Caister-on-Sea, Norfolk, United Kingdom.