Privacy notice
Last updated 19 October 2026
In short
- Vervoro is in alpha. Today the only personal data we collect from the public is the email address you give us to join the waitlist.
- We use it only to tell you about Vervoro's beta and launch. We never sell it or share it for marketing.
- When Vervoro launches, the sellers who use it are responsible for their buyers' data, and we handle that data only on their instructions.
- Your data is hosted in the EU, encrypted, and kept only as long as we need it.
- Who we are
- Our two roles
- This website and the waitlist
- Customer accounts
- Marketplace buyers' data
- Who we share data with
- Where data is stored
- How long we keep data
- How we protect data
- Cookies
- Your rights
- Changes and contact
1. Who we are
Vervoro is run by Vervoro Limited, a private limited company registered in England and Wales under company number 17524562.
Registered office: 81 Chorefields, Kidlington, OX5 1SY, EnglandPrivacy questions: [email protected]
In this notice, "Vervoro", "we" and "us" mean Vervoro Limited. Vervoro is software that marketplace sellers use to run their stock, orders and warehouse.
2. Our two roles
Data protection law (the UK GDPR, the Data Protection Act 2018 and, where it applies, the EU GDPR) gives a different role to whoever decides why data is used.
- We are the controller of the data in sections 3 and 4: visitors to this website, people on our waitlist, and the people who use a Vervoro account (a seller's owners and staff), including billing and sign-in records and our platform security logs.
- We are a processor of the data in section 5: the names and addresses of the buyers who order from our sellers. The seller is the controller of that data, and we handle it only to do the work the seller asks of us, under our data processing agreement.
3. This website and the waitlist
The waitlist
When you join the waitlist we store your email address and the date you joined. We use it to invite you to the closed beta, to tell you when pricing and the public beta are announced, and to answer you if you write to us.
Lawful basis: your consent, which you give by submitting the form. You can withdraw it at any time by using the unsubscribe link in any email we send, or by writing to [email protected], and we will delete your address.
Bot protection
The waitlist form uses Cloudflare Turnstile to check that a person, not a bot, is filling it in. Turnstile looks at technical signals from your browser to do this. We receive only a pass or fail result. Lawful basis: our legitimate interest in keeping the waitlist free of spam and abuse.
Visiting the site
This website is served by Cloudflare. Like any web server, it processes your IP address and basic request details to deliver the page and to protect the site from attacks. We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors. The site's fonts are loaded from Google Fonts, which receives your IP address to deliver them. Lawful basis: our legitimate interest in running a secure website.
4. Customer accounts
This section applies once Vervoro is available to you, in the closed beta and after.
| What we collect | Why | Lawful basis |
|---|---|---|
| Your name, work email address, the companies you belong to, and your role and warehouses in each | To give you access to the right company and the right actions | Contract with your company; our legitimate interest in running the service securely |
| Sign-in records: your passkey's public key, or a hashed password and an authenticator-app secret; your sessions and recovery codes (stored only as hashes) | To sign you in safely with two factors | Contract; legitimate interest in security |
| An audit log of what you do in your company, and our platform security log of sign-ins and security events | So your company can see who did what, and so we can detect and investigate misuse | Legitimate interest in security; contract |
| Billing details: the company's name, address and VAT number, the billing contact, the plan, and Vervoro's invoices | To charge the subscription and meet our tax duties | Contract; legal obligation |
| Messages you send to our support team | To help you | Contract; legitimate interest |
We never see your card or bank details. You enter them only on our payment provider's own pages.
No passwords by email or text. We never send sign-in codes or links by text message or email, and no third party holds your sign-in details.
Our staff do not have standing access to your company's data. If our operator needs to look inside a company to help, it is through a time-limited grant with a written reason, your company is told at once, and it can end the grant.
5. Marketplace buyers' data
If you bought something from a seller who uses Vervoro, the seller is responsible for your data. Please send any request about it to the seller, or to the marketplace you bought on. We help the seller answer it. Here is how we handle that data for sellers:
- Only what is needed to ship. We keep the recipient's name, the delivery address and phone number, the order note and any gift message. For a business buyer we may also keep a company name and VAT number for an invoice. We do not keep buyers' email addresses or payment details.
- Only for that order. We never build a profile of a buyer, never match buyers across orders, marketplaces or sellers, and never use buyer data for marketing, reviews or anything but shipping, tax and the seller's service to that order.
- Encrypted three times. In transit, at rest, and field by field under a key that belongs to the seller's company alone.
- Seen only when needed. Warehouse staff see an address only while its order is being packed and shipped, and every view is logged.
- Removed 30 days after delivery. The name, address, phone, tracking number, note, gift message and label are removed 30 days after the order is delivered (or dispatched, if no delivery date is known). An erasure request is carried out at once.
- What stays. After that, the order keeps only what the seller's accounts need: the order number, dates, items, batches and the destination country. A VAT invoice that was issued is kept unchanged for the period tax law requires. For orders sent outside the UK, the carrier, tracking number and delivery date and country are kept as export evidence for the statutory period.
- Never in test systems. We build and test with made-up buyers only.
We also follow each marketplace's own data protection rules, which are often stricter than the law.
6. Who we share data with
We never sell personal data. We share it only with the service providers that run Vervoro for us (our sub-processors), under contracts that require them to protect it, and where the law requires us to.
| Provider | What it does for us | Where |
|---|---|---|
| Cloudflare | Runs this website, the waitlist, the Vervoro application and its file storage, and the bot check on our forms | Application placed in the EU; requests pass through Cloudflare's global network |
| Neon | Runs our databases | EU |
| Amazon Web Services | Receives Amazon's order notices and passes them to Vervoro, storing nothing beyond short retries | EU |
| Stripe | Takes subscription payments and issues our invoices (account and billing data only) | UK, EU and US |
| Our email delivery provider | Sends emails to account users and to the waitlist. Emails name an order, never a buyer | Named in our sub-processor list before the closed beta |
| Our AI provider | Answers account users' questions inside Vervoro. Buyer data is masked before any request, so it receives none | Named in our sub-processor list before the feature is available |
Sellers' carriers are chosen and contracted by the seller, not by us. Sending an address to a seller's carrier to buy a label is the seller's instruction.
We give sellers 30 days' notice before we add or change a sub-processor that handles their data. The current list is on our sub-processors page.
7. Where data is stored
Account data and buyer data are stored in the EU. Some providers above may reach data from outside the UK and the EU, for example when Cloudflare's network serves a request near you or when Stripe processes a payment. Where that happens, the transfer is protected by the safeguards the law requires, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or by an adequacy decision.
8. How long we keep data
| Data | Kept for |
|---|---|
| Waitlist email | Until you unsubscribe or ask us to delete it, or 12 months after general availability, whichever comes first |
| Account data | While the person is a member of a company. Removing a person clears their email address in that company at once; their name stays on the history they made |
| A closed company's data | Erased 30 days after the company closes, after an export if the seller wants one |
| Buyer data on orders | 30 days after delivery (see section 5) |
| Company audit log | At least 1 year |
| Platform security log | 12 months |
| Vervoro's own invoices to customers | 6 years after the end of our financial year, as tax law requires |
| Backups | Up to 30 days, then they expire. A restore re-applies every erasure made since the backup before anyone can use it |
9. How we protect data
- Two-factor sign-in for everyone: a passkey, or a password with an authenticator app.
- Each company's data is kept apart from every other company's, enforced by the database itself.
- Encryption in transit (TLS 1.2 or higher) and at rest, and field-by-field encryption of buyer data under each company's own key.
- Central security logs, monthly vulnerability scans, a yearly independent penetration test, quarterly access reviews and a written incident response plan.
- If an incident affects a seller's buyer data, we tell the seller, and any marketplace whose data is involved, within 24 hours of becoming aware. Where we are the controller, we tell the Information Commissioner's Office within 72 hours when the law requires it.
10. Cookies
This website does not set cookies for analytics or advertising. Cloudflare may set a strictly necessary cookie to protect the site and to run the bot check on the waitlist form.
The Vervoro application, once you can sign in, uses one strictly necessary session cookie to keep you signed in, for at most 24 hours. It does not store your session, role or any buyer data in your browser's storage. Strictly necessary cookies do not need your consent. Our cookie policy lists each one.
11. Your rights
Where we are the controller, you have the right to:
- ask for a copy of your personal data;
- ask us to correct it, or to delete it;
- ask us to restrict how we use it, or object to our use of it based on legitimate interests;
- ask for the data you gave us in a portable format;
- withdraw your consent at any time, where we rely on it.
Write to [email protected]. We answer within one month. If you are a marketplace buyer, please contact the seller first (see section 5).
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live. We would be grateful for the chance to put things right first.
12. Changes and contact
We will update this notice as Vervoro moves through its beta phases and as we add features. The date at the top shows the latest version. If a change matters for how we use your data, we will tell you before it takes effect.
Questions: [email protected], or by post to Vervoro Limited, 81 Chorefields, Kidlington, OX5 1SY, England.