Privacy policy

Who we are

Veritado is responsible for the personal data described here. Write to us at contact@veritado.com, or by post to Veritado, Oficina Principal de Correos, Paseo del Prado, 1, 28014 Madrid, Spain.

Checking a certificate

To protect the register from people who download signature photos to make forgeries, we count how many certificates each visitor looks up.

• We count by your IP address (for IPv6, the network it belongs to). The counts are deleted within two hours.
• Before showing a certificate, we ask Cloudflare Turnstile to check that you’re a person. Cloudflare looks at technical signals from your browser to do this.
• None of this is linked to your name. There are no accounts and nothing to sign up for.

Visiting the site

Our hosting provider, Cloudflare, handles every request to the site: your IP address, your browser and the page you asked for. This is needed to deliver pages and to block attacks. Our own technical logs are kept for a few days to find faults.

We use no analytics, no advertising and no tracking. The few cookies we use are explained in our cookie policy.

Writing to us

If you email us, we receive your address and what you write. We use it to answer you and, if you’re a trade client, to work with you. We keep it as long as the conversation needs, and invoices and the records behind them as long as Spanish tax and accounting law requires.

Certificate records

A record describes an item: what it is, whose signature it carries, the photos taken at examination, our findings and the dealer it came through. It names the person whose signature was examined, because that is what the certificate is about. It never names the item’s owner or buyer.

Testimonials

We publish screenshots of messages from collectors only with the sender’s agreement. If you see yours and want it removed, email us and we’ll take it down.

Who else handles data

We use a few providers, under contracts that allow them to use the data only to provide their service to us:

• Cloudflare: hosting, security, storage and the person check
• Google: its Gemini AI reads photos of items to help us draft records (photos of objects, not of people)

Both are US companies. Transfers outside the European Union are covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We never sell personal data.

Why we’re allowed to

We rely on our legitimate interest in keeping the site and the register safe and in answering messages; on our contract with trade clients; on our legal obligation to keep accounting records; and on your agreement for testimonials, which you can withdraw at any time.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to object to its use, or to receive it in a portable format. Email contact@veritado.com and we’ll answer within a month. If you’re not satisfied, you can complain to the Spanish data protection authority, the AEPD (www.aepd.es).

Changes

If we change this policy, we update it here and change the date at the top.