Privacy policy

Introduction

At VERACURA, we understand that privacy is fundamental to trust. As an advisory firm serving discerning collectors and institutions across the globe, we are committed to protecting your personal information with the same care and diligence we bring to every client relationship.

This Privacy Policy explains how we collect, use, store, and protect your personal data. It has been designed to meet the highest standards across all jurisdictions in which we operate.

By engaging with VERACURA — whether through our website, services, or communications — you acknowledge that you have read and understood this policy.

Information We Collect

We collect only the information necessary to provide our services and maintain our relationship with you. This may include:

Identity and Contact Information: Name, title, email address, telephone number, postal address, and professional affiliations.

Client Profile Information: Collecting interests, preferences, acquisition history, and portfolio details relevant to our advisory services.

Transaction Information: Details of acquisitions, sales, valuations, and related advisory services we have provided.

Communications: Records of correspondence, meeting notes, and other communications with our team.

Technical Data: IP address, browser type and version, device information, operating system, and time zone settings.

Usage Data: Information about how you interact with our website, including pages visited, time spent, and navigation patterns.

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data). Should such information be provided to us incidentally, we will treat it with heightened protection and process it only with your explicit consent or as required by law.

How We Use Your Information

We use your personal information for the following purposes:

Service Delivery: To provide buyer advisory, brokerage, research, strategic planning, and educational services.

Client Relationship Management: To maintain our relationship, communicate with you about your portfolio, and provide relevant market insights.

Market Intelligence: To send you research, reports, and insights relevant to your collecting interests (where you have consented or where we have a legitimate interest).

Service Improvement: To analyse how our services are used and identify opportunities to enhance our offering.

Legal and Regulatory Compliance: To comply with applicable laws, regulations, and legal processes.

Security and Fraud Prevention: To protect our business, clients, and website from unauthorised access, fraud, and other security threats.

Information We Collect

Where required by law, we process your personal data on one or more of the following legal bases:

Contractual Necessity: Processing necessary to perform our contract with you or to take steps at your request before entering into a contract.

Legitimate Interests: Processing necessary for our legitimate business interests, provided your rights and interests do not override these. This includes maintaining client relationships, improving our services, and conducting business development activities.

Consent: Where you have given explicit consent for us to process your personal data for a specific purpose, such as receiving marketing communications.

Legal Obligation: Processing necessary to comply with a legal obligation to which we are subject.

Data Sharing and Disclosure

We treat your information with the utmost confidentiality. We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

Service Providers: With carefully selected third-party service providers who assist us in operating our business (such as IT infrastructure, payment processing, and professional advisors). These providers are contractually bound to protect your data and use it only for the purposes we specify.

With Your Consent: Where you have instructed us to share information with a third party in connection with a transaction or service (for example, with an auction house, seller, or authentication specialist).

Legal Requirements: Where disclosure is required by law, regulation, legal process, or governmental request.

Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.

International Data Transfers

Given the global nature of our business, your personal data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer personal data internationally, we implement appropriate safeguards to ensure your data remains protected to the standards required by applicable law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements.

In determining retention periods, we consider the nature and sensitivity of the data, the purposes for processing, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.

For active client relationships, we typically retain personal data for the duration of our engagement and for a period thereafter to address any queries, claims, or obligations that may arise. Transaction records may be retained for extended periods as required by tax, anti-money laundering, or other regulatory requirements.

Your Rights

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal data:

Right of Access: The right to request a copy of the personal data we hold about you.

Right to Rectification: The right to request correction of inaccurate or incomplete personal data.

Right to Erasure: The right to request deletion of your personal data in certain circumstances.

Right to Restriction: The right to request restriction of processing of your personal data in certain circumstances.

Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time.

Right to Lodge a Complaint: The right to lodge a complaint with a supervisory authority in your jurisdiction.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience, analyse usage, and support our marketing efforts. Cookies are small text files placed on your device when you visit our website.

We use the following types of cookies:

Essential Cookies: Necessary for the website to function correctly. These cannot be disabled.

Analytics Cookies: Help us understand how visitors interact with our website, allowing us to improve our content and user experience.

Marketing Cookies: Used to deliver relevant content and measure the effectiveness of our communications.

You can manage your cookie preferences through your browser settings or through our cookie consent tool. Please note that disabling certain cookies may affect website functionality.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure data storage, and regular security assessments.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security, but we are committed to maintaining the highest standards of data protection.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities in accordance with applicable legal requirements.

Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please get in touch with us immediately so we can take appropriate action.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last updated" date. For significant changes, we may also notify you directly via email or through other communication channels.

We encourage you to review this policy periodically to stay informed about how we protect your information.

VERACURA

Trust and care — the principles behind every decision we make.