Last updated: 08/11/26
Who we are
Venava Ltd ("Venava", "we", "us") is a company registered in England and Wales with company number 16643738. Our registered office is at 77 Walcot Avenue, Luton, LU20PP United Kingdom. We are registered with the Information Commissioner's Office (ICO).
For anything about your personal data, contact us at hello@venava.ai.
This policy explains how we use personal data when we are the controller. When we handle personal data on behalf of our clients, we act as their processor and our Data Processing Agreement applies.
Personal data we collect
| Who you are | What we collect | Where it comes from |
|---|---|---|
| Website visitor | IP address, device and browser details, pages viewed, how you arrived, cookie identifiers | Your device, via cookies (see our Cookie Policy) |
| Someone who contacts us or books a call | Name, work email, phone, company, job title, what you tell us | You, via our forms, email or Cal.com booking |
| Client contact | Name, work contact details, role, messages, approvals, billing contact details | You or your organisation |
| Payment contact | Billing name and address, payment status | You, via Stripe. Card details are handled by Stripe and never stored by us |
| Professional contact we reach out to | Name, job title, company, work email, work phone, LinkedIn profile URL, and how you respond to our messages | Publicly available sources, our clients, and you |
How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and booking calls | Legitimate interests in responding to people who contact us, or steps before entering a contract |
| Providing our services and managing our client relationships | Performance of a contract |
| Billing, accounting and tax records | Legal obligation and performance of a contract |
| Running account-based marketing programmes and event invitations for our clients, including sending business outreach | Legitimate interests (see below) |
| Marketing our own services to business contacts | Legitimate interests, or consent where the law requires it |
| Website analytics and advertising cookies | Consent |
| Improving our services and keeping them secure | Legitimate interests |
| Establishing or defending legal claims | Legitimate interests |
If we contacted you about a client's product, service or event
Some of our services involve contacting professionals on behalf of our clients, for example to share relevant content or invite them to an event. We only use work contact details and information about your professional role.
We rely on legitimate interests: our client's interest in reaching relevant businesses, and our interest in providing that service. We have weighed these against your interests and limit what we use to what is relevant to your job.
Every message tells you who it is from and how to opt out. If you opt out or object, we will stop and add your details to a suppression list so you are not contacted again. Your details may be passed to our client if you respond with interest, for example by accepting a meeting or an invitation.
Who we share it with
We share personal data only where needed:
- service providers who help us run our business and deliver our services, such as hosting, email, design, AI and payment providers (see our Sub-processors list);
- our clients, where you have responded to outreach we ran for them;
- professional advisers such as accountants and lawyers; and
- authorities, where the law requires it.
We do not sell personal data.
International transfers
Some of our providers process data outside the UK, including in the United States. When this happens, we use safeguards recognised under UK law, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK-US Data Bridge for certified organisations.
How long we keep it
| Data | Kept for |
|---|---|
| Enquiries that do not become clients | 12 months after our last contact |
| Client records and contracts | 6 years after the contract ends |
| Billing and accounting records | 6 years, as required by law |
| Outreach contact data for client programmes | Duration of the programme plus 3 months, unless the client keeps it as controller |
| Suppression list | As long as needed to respect your opt-out |
| Cookie data | See our Cookie Policy |
Your rights
You have the right to:
- access your personal data;
- correct inaccurate data;
- ask us to delete your data;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- receive your data in a portable format; and
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email hello@venava.ai. We will respond within one month.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first at hello@venava.ai. We will acknowledge your complaint within 30 days and respond without undue delay.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.