Privacy Policy

This policy explains how Vareqa Ltd ("Vareqa", "we", "us") handles personal data when you visit this website or ask us to contact you. We are the controller of that data. This policy is provided for information and should be read together with our Cookie Policy and our Security and Trust page.

1. Who we are

Vareqa Ltd is a private company limited by shares, registered in Ireland. Registered office: Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, Ireland. Company number: 820168. For any question about your personal data, contact us at info@vareqa.com.

2. The data we collect

Information you give us

When you request a Pay Architecture Review or otherwise contact us, we collect your name, work email, organisation, organisation size, the jurisdictions you operate in, your current position on pay structure, and anything else you choose to tell us.

Information we collect automatically

Subject to your cookie choices, when you use the site we collect technical data such as your IP address, device and browser type, the pages you view, and the source that referred you.

3. Why we use it, and our legal basis

• To respond to your enquiry and prepare for a possible engagement: taking steps at your request before entering a contract, and our legitimate interest in answering business enquiries (Article 6(1)(b) and (f) GDPR).
• To understand and improve how the site is used, through analytics: your consent, given through the cookie banner (Article 6(1)(a) GDPR).
• To meet legal, tax, and accounting obligations where they apply (Article 6(1)(c) GDPR).

4. Cookies and analytics

We use a small number of cookies. Strictly necessary cookies keep the site working. Analytics cookies run only with your consent and help us understand usage through Google Analytics and Google Tag Manager. You can change your choice at any time. Our Cookie Policy sets out the detail.

5. Who we share it with

We share personal data only with service providers who process it on our behalf under contract, including our EU-region cloud hosting provider, our email and customer-relationship (CRM) provider, and Google (Analytics and Tag Manager). We do not sell personal data, and we do not share it for others to use for their own purposes.

6. International transfers

Some providers may process data outside the European Economic Area, for example in the United States. Where they do, the transfer is protected by appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision.

7. How long we keep it

We keep personal data only for as long as we need it for the purpose we collected it for. Our retention schedule:

• Enquiry and review-request data: up to 24 months after our last contact with you, then deleted.
• Analytics data: 14 months, configured in Google Analytics.
• Cookie consent record: about 6 months, stored in your browser.
• Records we must keep for legal, tax, or accounting reasons: for the period the law requires.

8. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to our use of it, to data portability, and to withdraw consent at any time. To exercise any of these, email info@vareqa.com.

You also have the right to complain to a supervisory authority. Our lead authority is the Irish Data Protection Commission (www.dataprotection.ie). If you are in another EU country, you may also contact your local authority.

9. Security

We protect personal data with appropriate technical and organisational measures. Our approach is described on our Security and Trust page.

10. Changes to this policy

We may update this policy from time to time. The date above shows when it last changed.