← Back to Site

Privacy Policy

Last updated: 1 July 2026 · Governing law: Singapore PDPA

This policy explains what personal data VeraCorpus™ collects from visitors to veracorpus.com, why we collect it, how we use it, and what rights you have. We have written it in plain language so it is genuinely readable.

Who we are

VeraCorpus™ is a Singapore-based startup building an authoritative fine art attribution, provenance, and pricing database. The data controller for all personal data collected through this website is:

VeraCorpus
Singapore
[email protected]

If you have any questions about this policy or about your personal data, please contact us at that address.

What data we collect and why

We collect only one category of personal data directly from you:

DataHow collectedPurposeLegal basis
Email address Newsletter signup form on the homepage To send you updates, research articles, and new releases from VeraCorpus™ Your consent (you voluntarily submit the form)

We do not collect your name, location, payment details, or any other personal data through this website. We do not use cookies for tracking or profiling purposes.

How your data is processed

When you submit the newsletter form, your email address is transmitted securely to Web3Forms, a third-party form processing service, which forwards a notification to our inbox and stores your submission on its servers.

Web3Forms is operated by Web3Forms (web3forms.com) and is subject to its own privacy policy. Web3Forms' servers are located in the United States. By submitting the form, you consent to this cross-border transfer of your email address.

We do not sell, rent, or share your email address with any third party for marketing purposes.

Website hosting and infrastructure

This website is hosted by Cloudflare Pages (Cloudflare, Inc., United States). Cloudflare automatically processes certain technical data as part of delivering the site to your browser, including:

  • Your IP address (used for security, DDoS protection, and routing — not stored beyond Cloudflare's standard log retention)
  • Browser type, operating system, and referring URL (aggregated, anonymised)
  • Pages visited and time of visit (aggregated only)

This processing is governed by Cloudflare's Privacy Policy.

Analytics

We do not currently use any analytics or visitor tracking tools. We do not place tracking pixels, session recorders, or fingerprinting scripts on this website. No personal data is collected in order to understand site usage.

Google Fonts

This website loads fonts (EB Garamond and Source Sans 3) from Google Fonts servers. When your browser requests a font file, Google receives your IP address and browser user-agent as part of that request. This data is governed by Google's Privacy Policy. We use Google Fonts because they serve fonts quickly from servers near your location, improving the site's loading speed.

How long we keep your data

We retain your email address for as long as you wish to receive communications from VeraCorpus™. You may withdraw your consent and request deletion at any time by contacting us at [email protected]. We will action such requests within 30 days.

Your rights

Depending on your location, you may have the following rights regarding your personal data:

Under Singapore's Personal Data Protection Act (PDPA):

  • Right of access — to request a copy of the personal data we hold about you
  • Right of correction — to request correction of inaccurate personal data
  • Right of withdrawal — to withdraw consent for us to use your personal data at any time

Under the EU General Data Protection Regulation (GDPR), if you are located in the European Economic Area:

  • Right of access — to obtain a copy of your personal data
  • Right of rectification — to correct inaccurate or incomplete data
  • Right of erasure — to request deletion of your personal data ("right to be forgotten")
  • Right to restriction — to request that we limit how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to processing based on legitimate interests
  • Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal
  • Right to complain — to lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Data security

All data transmitted to and from this website is encrypted using HTTPS (TLS). Cloudflare provides DDoS protection, firewall filtering, and secure transport as part of its infrastructure. We do not store any personal data on our own servers.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page will always show when the policy was last revised. We encourage you to review it periodically. If we make material changes that affect how we use your email address, we will notify subscribers before those changes take effect.

Contact

All privacy-related enquiries should be directed to:

VeraCorpus™
Singapore
[email protected]

We aim to respond to all privacy enquiries within 30 days of receipt.