VeriTool is the data controller for the personal data described here. We process data under the UK GDPR and the Data Protection Act 2018.
1. What we collect
- Account data: name, email, password hash, trade, optional phone and avatar.
- Tool data: brand, model, serial number, photos, receipts, purchase date, value, notes.
- Reports & sightings: postcode/town, date, crime reference, police force, contact phone.
- Usage data: log/diagnostic data needed to keep the service running and secure.
- Payment data: handled directly by Paddle as merchant of record — we don't store card numbers.
2. Why we use it
- To provide the register, recovery and verification services (contract).
- To run the public stolen register (legitimate interest — crime prevention).
- To send service emails such as sighting alerts (legitimate interest / your consent for digests).
- To prevent fraud and abuse, and to comply with the law.
3. What's public
By default everything in your account is private. Information becomes public only when you choose to publish it — listing a tool as stolen, or enabling your public profile at /u/your-handle. Stolen listings show brand, model, serial number, photos and the area of theft.
4. Who we share it with
- Service providers who help us run VeriTool (hosting, email delivery, payments).
- Police and insurers when you generate an ownership pack or share a verification link.
- Law enforcement where legally required.
We never sell your personal data.
5. International transfers
Some providers process data outside the UK/EEA. Where they do, we rely on UK IDTA / SCCs to protect your data.
6. How long we keep it
While your account is active and as long as we need it for the purposes above. After deletion we keep limited stolen-report summaries for crime-prevention and statutory record-keeping; everything else is removed within 30 days.
7. Your rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Contact privacy@veritool.co.uk. You can complain to the ICO at ico.org.uk.
8. Security
Data is encrypted in transit and at rest. Access is restricted via row-level security and admin audit logs. Report security issues to security@veritool.co.uk.
9. Cookies
See our Cookie Policy.