Page 1 of 1

Verara Privacy Notice

Last updated: 14 October 2026

1. Who we are and how to contact us

This notice explains how Verara Ltd ("Verara", "we", "us") uses your personal information when you visit our Health Age sales page, and when you buy and complete the Verara Health Age Assessment and 28-Day Nutrition Plan.
• Company: Verara Ltd, a private limited company registered in England and Wales, company number 17152423
• Registered address: 15 Ennismore Road, Crosby, Liverpool, L23 7UG
• Registered with the UK data protection regulator, the Information Commission (previously the Information Commissioner's Office, ICO), registration number ZC263110
• Data protection contact: Steve Matthews, Founder, who is responsible for data protection at Verara
• Email for anything in this notice: hello@verarahq.com (please put "Privacy" in the subject line)
• Post: Steve Matthews, Verara Ltd, 15 Ennismore Road, Crosby, Liverpool, L23 7UG
• We are a small company and we are not required to appoint a Data Protection Officer, so Steve deals with all data protection questions personally.
We are the "controller" of your information. That means we decide how it is used and we are responsible for looking after it.

2. The short version

• We use your answers to calculate your Verara Index, five pillars and Verara Health Age, and to build your 28-day nutrition plan.
• Some of your answers are health information. We only use it with your explicit consent, which you give in each of your two forms. You can withdraw it at any time.
• Your 28-day plan is built automatically by software and emailed to you straight away. A short automatic safety check decides whether the plan is right for you. If it isn't, we stop and refund you in full. You can always ask a person to look at a decision.
• A person reads your measurement answers and checks your Verara Health Age report before it is sent.
• We do not use AI to produce your plan or report.
• We keep your health answers in a separate, access-restricted database from your name and contact details.
• We delete your health answers 12 months after your report is sent, unless you become a member and agree to us keeping them longer.
• We never sell your information. We post your tape measure pack ourselves by Royal Mail, and Royal Mail only receives your name and address.
• Our sales page only uses a Meta Pixel cookie, to measure our Facebook and Instagram adverts, if you click Accept on the cookie banner. If you click Reject, nothing is sent to Meta. We never send Meta your health information or form answers. You can change your choice at any time using Cookie settings at the bottom of the page (see section 14).
• If you buy and click Accept on our cookie banner, we also tell Meta about your purchase from our own systems, using a scrambled (hashed) copy of your email address. If you click Reject, we don't. See section 14.
• If you tick the optional box, we'll email you tips, offers and news about future Verara products until you unsubscribe. It's your choice, and it doesn't affect your assessment.
• The service is for adults aged 18 and over only.
• You can ask to see, correct or delete your information at any time, and you can complain to us or to the regulator.

3. What information we collect

Identity and contact. Examples: Name, email address, date of birth, sex. Where it comes from: You (your two forms), GoCardless (name and email at checkout).
Delivery. Examples: Postal address. Where it comes from: You (first form).
Payment. Examples: Payment reference, amount, status, refund status. Where it comes from: GoCardless. We never see or store your bank account details.
Health and lifestyle (special category). Examples: First form: safety screening answers, allergies and intolerances, the way you eat, foods you avoid, your goal, and optionally height, weight, and rough ranges for fruit and veg, takeaways and alcohol. Measurement form: any change in your health, height, weight, waist and hip measures, activity, fitness tests, food habits, sleep, stress, energy, alcohol, and anything you tell us in free-text boxes or emails. Where it comes from: You (your two forms and replies to our emails).
Results. Examples: Verara Index, pillar scores, Verara Health Age, body-composition estimates, your 28-day plan, reviewer notes. Where it comes from: Created by us from your answers.
Communications. Examples: Emails you send us, check-in replies, your marketing choice and when you made it. Where it comes from: You.
Technical. Examples: Form submission time and basic technical information collected by our form provider. Where it comes from: Tally (our form provider).
Website visits. Examples: Your IP address, browser and device type, and the pages you visit on our sales page. Only if you click Accept on our cookie banner: Meta Pixel cookies, the actions listed in section 14 (such as clicking a buy button), and your GoCardless payment reference when you reach our thank you page. Where it comes from: Your browser, Netlify (our website host) and, only if you click Accept, the Meta Pixel (see section 14).
Health information (for example allergies, measurements, pregnancy or medical conditions mentioned in the safety check) is "special category" data under UK data protection law and gets extra protection.
Do you have to give us this information? No one has to buy the assessment. But if you do, we need your contact details, delivery address and your answers to the required questions to deliver it. Without them we can't build your plan or report.

4. Why we use it, and our lawful basis

UK data protection law says we need a lawful reason ("lawful basis") for each use of your information, and an extra condition for health information.
Take payment, deliver your plan, report and check-in emails, post your tape measure pack, answer your questions. Lawful basis (UK GDPR Article 6): Contract: we need it to provide what you bought (Article 6(1)(b)). Extra condition for health information (Article 9): Not applicable, unless your question includes health details (see below).
Use your first-form answers (including allergies and safety answers) to run the safety check and build your 28-day plan. Lawful basis (UK GDPR Article 6): Contract. Extra condition for health information (Article 9): Your explicit consent (Article 9(2)(a)), given by ticking the health consent box in the first form.
Use your measurement-form answers to calculate your results, and have a person review your report. Lawful basis (UK GDPR Article 6): Contract. Extra condition for health information (Article 9): Your explicit consent (Article 9(2)(a)), given by ticking the consent box in the measurement form.
Keep payment and refund records for tax and accounting. Lawful basis (UK GDPR Article 6): Legal obligation (Article 6(1)(c)). Extra condition for health information (Article 9): Not applicable.
Keep our systems secure, prevent misuse and fix problems. Lawful basis (UK GDPR Article 6): Legitimate interests (Article 6(1)(f)): running a safe, working service. Extra condition for health information (Article 9): Only where needed, and covered by your explicit consent above.
Deal with a legal claim or complaint. Lawful basis (UK GDPR Article 6): Legitimate interests. Extra condition for health information (Article 9): Establishing or defending legal claims (Article 9(2)(f)), where health information is involved.
Send you tips, updates, membership offers and news about future Verara products and services by email. Lawful basis (UK GDPR Article 6): Your consent (Article 6(1)(a)), given only if you tick the optional, unticked box in the first form. If you don't tick it, we won't send you marketing emails. Extra condition for health information (Article 9): We do not use your health information to decide which offers to send you.
Host our sales page, deliver it to your browser and keep it secure. Lawful basis (UK GDPR Article 6): Legitimate interests (Article 6(1)(f)): running a safe, working website. Extra condition for health information (Article 9): Not applicable.
Use the Meta Pixel on our sales page to measure and improve our adverts on Facebook and Instagram (see section 14). This includes the purchase report we send to Meta from our own systems, only if you click Accept (see section 14). Lawful basis (UK GDPR Article 6): Your consent (Article 6(1)(a)), given only if you click Accept on our cookie banner. The Privacy and Electronic Communications Regulations (PECR) also require your consent before the Meta cookies are stored on your device. Extra condition for health information (Article 9): Not applicable. We never send health information to Meta.
Remember your cookie choice in your browser. Lawful basis (UK GDPR Article 6): Legitimate interests (Article 6(1)(f)): respecting your choice. Under PECR this is strictly necessary, so it doesn't need consent. Extra condition for health information (Article 9): Not applicable.
We only ask for your explicit consent to use health information because we can't provide the assessment without it. You can withdraw it at any time (see section 10).
We do not use your health information for research, statistics or developing new products. If we ever want to, we will update this notice first and, where the law requires it, ask for your consent.

5. How your plan, results and safety check work (automated decisions)

Some of what we do is done automatically by software, following fixed rules. We want you to know exactly how.
Your 28-day plan. Software builds your plan automatically from your first form and emails it to you straight away. It leaves out foods containing the allergens you tell us about (and foods that commonly carry "may contain" warnings for them), and foods you ask us to avoid. Sometimes the plan is held so that a person can check it before it is sent: for example if you tell us about a severe allergy, a food our software doesn't recognise, or a kosher diet, or if the software can't build a safe plan. A held plan is checked by Steve Matthews and sent within 1 working day.
Your scores. Your Verara Index, pillar scores and Verara Health Age are calculated by fixed rules. The same answers always give the same result. A person (currently our founder, Steve Matthews) checks every Verara Health Age report before it is sent, and can change anything.
The automatic safety check. The first form includes eight safety questions (for example about chest pain, a heart condition, an active eating disorder, or a clinician advising you not to follow an unsupervised plan). If you answer "yes" to any of them, our system automatically stops: it doesn't build a plan, doesn't post your pack, and refunds your payment in full. This decision is based only on your own answers, and it is there to protect your safety. If you tell us in the measurement form that your health has changed, we skip the fitness questions and a person contacts you.
This safety check is a decision made by automated means using health information, based on your explicit consent. Whether or not it counts legally as a "significant decision", we give you these safeguards:
• we tell you about it here, before you start, and in the email we send if it applies to you;
• you can ask a person to review the decision, tell us anything you think we should know (for example clearance from your GP), and challenge the decision, by replying to that email or writing to hello@verarahq.com;
• Steve Matthews will look at it personally and reply within 1 working day.
No AI. We don't use AI to produce your plan or report. If that ever changes, we will update this notice before we start.

6. Who we share it with

We use service providers ("processors") who act only on our instructions under written data processing agreements. Each one only gets what it needs.
Tally. What for: Our questionnaires. Information: Everything you enter in the forms. Where it is held and how it is protected: Belgium (EU). UK law recognises the EU as giving adequate protection. We delete form responses from Tally within 30 days of copying them into our secure database.
Make (Celonis). What for: Moves information automatically between our tools. Information: Form answers, results and contact details, while they are being passed on. Where it is held and how it is protected: Germany (EU), which UK law recognises as giving adequate protection. Make is set so it doesn't keep copies of your answers.
Airtable. What for: Our secure databases: one for identity and contact details, a separate one for health answers, results and reports, linked only by a customer ID. Information: Identity and contact details (identity database); health answers, results and report files (health database). Where it is held and how it is protected: USA. Protected by a contract approved under UK law (the UK International Data Transfer Addendum to the EU Standard Contractual Clauses) in Airtable's data processing agreement.
Google Workspace (Gmail). What for: Sending our emails, including your plan and report, and receiving your replies. Information: Name, email address, email content and attachments (your plan and report). Where it is held and how it is protected: USA and other countries where Google has data centres. For the USA, Google is certified to the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving adequate protection. For other countries, Google uses contract terms approved under UK law.
Render. What for: Hosting the software that builds your plan, calculates your results and creates your PDFs. Nothing is stored there after each request. Information: Form answers and results, only while they are being processed. Where it is held and how it is protected: Servers in Frankfurt, Germany (EU). Render is a US company, so any access from the USA is protected by the UK Extension to the EU-US Data Privacy Framework, with the UK Addendum to the Standard Contractual Clauses as a back-up.
Netlify. What for: Hosting our sales page and thank you page. Information: Your IP address and basic browser information when you visit. Where it is held and how it is protected: USA and Netlify's servers around the world. Netlify is certified to the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving adequate protection, with the UK Addendum to the Standard Contractual Clauses in its data processing agreement as a back up.
Some of these providers use their own sub-processors, which may be outside the UK. They must protect your information to the same standard.
Other organisations that receive some of your information:
• GoCardless takes your payment and any refund. It is a regulated payment provider and acts as a separate controller for your payment information, for example for its own fraud and anti-money-laundering checks, so its own privacy notice also applies. GoCardless is based in the UK and processes most information there, with its main payment processing on servers in the European Economic Area.
• Meta (the company behind Facebook and Instagram) receives information about your visit to our sales page through the Meta Pixel, only if you click Accept on our cookie banner. Meta is a joint controller with us for collecting that information and sending it to Meta, and a separate controller for what it does with it afterwards. Meta never receives your health information, form answers, plan or report. See section 14 for the details. If you click Accept and buy, Meta also receives a purchase report from our own systems (see section 14).
• Make (Celonis, Inc. and its group companies, our automation service, using servers in the European Union) receives your GoCardless payment reference and your cookie choice from our thank you page, and passes your purchase report to Meta for us. Make acts as our processor, under a data processing agreement, and may only use the information on our instructions.
• Royal Mail delivers your tape measure pack. We post it ourselves, so Royal Mail only receives your name and postal address, on the envelope and in its online postage service if we buy postage online. It uses them only to deliver your pack. Royal Mail is in the UK and has its own privacy notice.
• Our accountant, if we use one, may see payment records (never your health information) to prepare our accounts and tax returns. This would be a UK firm.
We may also share information if the law requires it, to deal with a legal claim, or to protect someone's life in an emergency.
We never sell your information and we never share your health information for advertising.

7. Transfers outside the UK

Some of our providers hold or access information outside the UK. When that happens, we make sure it stays protected in one of these ways:
• The country is approved by the UK. UK law recognises some countries as protecting personal information to a UK standard ("adequacy"). This includes the EU and the European Economic Area.
• The company is approved by the UK. For US companies certified to the UK Extension to the EU-US Data Privacy Framework, UK law treats the transfer as adequately protected.
• A UK-approved contract. Otherwise we use a contract approved under UK law: the International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. These legally require the provider to protect your information to UK standards.
Section 6 shows which applies to each provider, and section 14 explains the safeguard for Meta. Email us if you'd like more detail or a copy of the relevant safeguard.

8. How long we keep it

Health and lifestyle answers, results, plan and report. How long: 12 months after your report is sent (or after your plan is sent, if you never complete the measurement form), then deleted or fully anonymised. Longer only if you become a member and agree to it. Copies in our sent emails are deleted on the same timetable.
Form responses held by Tally. How long: Deleted within 30 days of being copied into our database.
If the safety check stops your order. How long: Your safety answers are kept for 30 days to process your refund and answer any questions, then deleted. We keep a basic record that you were refunded.
If you withdraw your consent for health information. How long: Your health answers are deleted straight away (see section 10).
Name, contact details, order and delivery records. How long: 2 years after your purchase, unless you become a member.
Name and email address, if you ticked the marketing box. How long: Until you unsubscribe or ask us to stop. We keep only your name and email for this, not your address or health information.
Payment and refund records. How long: 6 years from the end of the financial year they relate to, for tax and accounting law.
Complaints and requests about your information. How long: 2 years after they are closed.
Record of your marketing choice. How long: While we hold your details, plus a short record that you unsubscribed (your email address only) so we don't contact you again.
Your cookie choice (Accept or Reject). How long: Kept in your browser for 180 days, then we ask you again. It is not sent to us.
Meta Pixel cookies (_fbp and _fbc), only if you click Accept. How long: Up to 90 days in your browser, unless you clear them or click Reject in Cookie settings.
Information Meta receives through the Meta Pixel. How long: Meta keeps it for up to 2 years under its Business Tools Terms. We only see summary reports about our adverts in Meta's tools, not information about individual visitors.
Website logs held by Netlify. How long: Kept by Netlify for a short time for security and fixing faults, under its data processing agreement.

9. How we keep it safe

• Health information is kept in a separate database from your name and contact details, linked only by a customer ID.
• Only Steve Matthews, our founder, can open the health database, and he must use two-factor authentication.
• We never pass your health answers around by email or messaging apps internally. Your plan and report are emailed only to you.
• Our providers encrypt information in transit and at rest.
• If something goes wrong with your information that could put you at high risk, we will tell you, and we will report it to the regulator where the law requires.

10. Your rights

You have the right to:
• Access a copy of your information
• Correct anything that is wrong or incomplete
• Delete your information (sometimes called the "right to be forgotten")
• Restrict how we use it, or object to how we use it where we rely on legitimate interests
• Data portability: receive the answers you gave us in a common, machine-readable format
• Withdraw your consent at any time, for health information, marketing or the Meta Pixel on our sales page. For health information or marketing, just email us. For the Meta Pixel, click Cookie settings at the bottom of the sales page and choose Reject (see section 14). See below for what happens.
• Ask a person to review an automated decision and challenge it (see section 5)
• Unsubscribe from marketing at any time, using the link in any marketing email or by emailing us
To use any of these rights, email hello@verarahq.com. We may need to check your identity first. We will reply within one month (we can extend this by up to two more months for complex requests, and we will tell you if so). There is normally no charge.
If you withdraw your consent for us to use your health information:
• we stop using your health information straight away and delete it;
• if we haven't yet sent you the plan or report that uses those answers, we can't finish it, and we will refund you in full;
• if we have already sent it to you, we won't give a refund, but this doesn't affect your statutory rights;
• withdrawing doesn't affect anything we did before you withdrew, and we still keep the records the law requires, such as payment records.
If you withdraw your consent for the Meta Pixel: the Meta Pixel stops on our sales page straight away and we remove the Meta cookies our page set. It doesn't affect your purchase or your assessment in any way. Information already sent to Meta before you withdrew stays with Meta, and you can ask Meta to delete it (see section 14).
Your right to cancel. You normally have 14 days from your purchase to cancel. Because your plan is digital content, when you buy you ask us to start straight away and agree that you lose your right to cancel once your plan has been delivered. Your plan usually arrives within minutes, so in practice the right to cancel ends when you receive it. If you cancel before your plan has been delivered (for example while it is held for a check), we will refund you in full. Your statutory rights are not affected.

11. Complaints

If you're unhappy with how we have handled your information, please tell us first so we can put it right. Email hello@verarahq.com with "Privacy complaint" in the subject line, or write to us at the address in section 1. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome without undue delay.
You also have the right to complain to the UK data protection regulator, the Information Commission (previously called the Information Commissioner's Office, ICO), at any time: ico.org.uk/make-a-complaint.

12. Age

The Health Age Assessment and 28-Day Nutrition Plan are only for adults aged 18 and over. It is designed for people aged 40 to 65. Please don't buy it or fill in our forms if you are under 18. If we find out that someone under 18 has given us information, we will refund them and delete their information.

13. Important: this is not medical advice

The Health Age Assessment is for education and lifestyle planning. It isn't a medical diagnosis or medical care. Please speak to your GP if you have a health condition, take regular medication, or have any symptoms that worry you.

14. Our sales page, cookies and the Meta Pixel

This section covers our sales page at verara-health-age.netlify.app and its thank you page at verara-health-age.netlify.app/thanks/. It applies to everyone who visits, whether or not you buy.
Who is responsible. Verara Ltd (company number 17152423, registered with the Information Commission under number ZC263110) is the controller for our sales page. Contact us at hello@verarahq.com, with "Privacy" in the subject line. For the Meta Pixel, we share responsibility with Meta, as explained below.
Hosting. Our sales page is hosted by Netlify. Like any website host, Netlify receives your IP address and basic information about your browser when you open the page, so it can deliver the page to you and keep it secure. This happens for every visitor and doesn't use cookies.
Our cookie banner. When you first visit, a banner asks whether you accept a Meta Pixel cookie. You choose Accept or Reject.
• If you click Reject, or ignore the banner, the Meta Pixel doesn't load, our page sets no Meta cookies, and nothing about your visit is sent to Meta.
• If you click Accept, the Meta Pixel loads and works as described below.
• We remember your choice in your browser for 180 days, so we don't ask you on every visit. After 180 days we ask again.
• You can change your mind at any time by clicking Cookie settings at the bottom of the sales page or the thank you page.
What the Meta Pixel is for. The Meta Pixel is a small piece of code from Meta, the company behind Facebook and Instagram. We use it to measure and improve our adverts on Facebook and Instagram: to see which adverts bring people to our sales page and lead to a purchase, to stop adverts that don't work, and to help Meta show our adverts to people who are more likely to be interested.
What is sent to Meta, only if you click Accept.
PageView. When it happens: You open our sales page or thank you page. What it includes: That the page was viewed.
ViewContent. When it happens: You open our sales page. What it includes: The product name (Verara Health Age Assessment) and its price, £24.97.
InitiateCheckout. When it happens: You click one of the buy buttons. What it includes: The product name and its price, £24.97.
Purchase. When it happens: You reach our thank you page after paying. What it includes: The product name, the value (£24.97 GBP) and your GoCardless payment reference, so the same purchase is not counted twice.
With each of these, Meta also receives the address of the page (on the thank you page this includes your GoCardless payment reference), the page you came from, your IP address, information about your browser and device, the time, and the codes stored in the Meta cookies below. If you use Facebook or Instagram in the same browser, Meta may link your visit to your account.
Cookies and browser storage.
verara_cookie_choice (browser storage, set by our page). What it is for: Remembers whether you clicked Accept or Reject. It stays on your device and is not sent to us or to Meta. How long it lasts: 180 days.
_fbp (cookie, set by the Meta Pixel, only after Accept). What it is for: Lets Meta recognise the same browser across visits, to measure our adverts. How long it lasts: 90 days.
_fbc (cookie, set by the Meta Pixel, only after Accept and only if you arrived by clicking one of our adverts). What it is for: Records which advert click brought you to our page. How long it lasts: 90 days.
verara_purchase (browser storage, set by our page, only after Accept). What it is for: Holds your GoCardless payment reference so the same purchase is not reported to Meta twice. How long it lasts: Until you clear your browser's stored data.
Meta may also read cookies it has already placed in your browser when you use Facebook or Instagram. Meta's Cookies Policy explains these.
What is never sent to Meta. We never send Meta your health information, your form answers, your results, plan or report, or your name, email address or postal address. The Meta Pixel is only on our sales page and thank you page. It is not on our forms (Tally) or on the GoCardless payment page. We have also switched off Meta's automatic detection of buttons and page content, so the Pixel only sends the four actions listed above.
Purchase reports sent from our own systems (server side), only if you click Accept.
When you pay for the Health Age Assessment and then click Accept on our thank you page, our page also sends a short note to Make saying that this payment's buyer accepted. Make keeps that note for no longer than 30 days. When GoCardless confirms your payment, Make checks the note, and only if you accepted does it send Meta one purchase report directly, server side. This is the same purchase the Meta Pixel reports from your browser, so Meta counts it once. It helps when the browser report is lost, for example because of an ad blocker or a slow connection.
The purchase report contains:
• your email address, hashed (scrambled with SHA256 so Meta can match it to a Facebook or Instagram account but cannot read it), and your country (GB), also hashed;
• your GoCardless customer ID, hashed;
• the payment reference, the time of purchase, the product name and the price (£24.97 GBP);
• if the Meta Pixel set them in your browser, the _fbp and _fbc cookie values described above.
It never contains your name, postal address, health information, form answers, results, plan or report.
Recipients: Make, as our processor (see section 6), and Meta. For matching and measuring this report Meta acts as our processor; for anything else it does with the information it is a joint controller with us, and then a separate controller, as explained above for the Meta Pixel. The same transfer safeguard applies.
Our lawful basis is your consent under UK GDPR Article 6(1)(a), given by clicking Accept. If you click Reject, or never make a choice, no purchase report is sent to Meta from our systems.
How to withdraw. Click Cookie settings at the bottom of the sales page or thank you page and choose Reject, or email hello@verarahq.com and ask us to opt you out. We will delete your note in Make and send nothing further. Withdrawing doesn't affect a report already sent; to remove that, use Your activity off Meta technologies in Facebook or Instagram, or Meta's deletion routes, as explained above. Withdrawing never affects your purchase, your plan or your report.
Our lawful basis. Your consent. The Privacy and Electronic Communications Regulations (PECR) require your consent before the Meta cookies are stored on or read from your device, and we rely on your consent under UK GDPR Article 6(1)(a) to collect information about your visit through the Meta Pixel and send it to Meta.
Meta is a joint controller with us. For visitors in the UK, Verara and Meta Platforms, Inc. (USA) are joint controllers for collecting information through the Meta Pixel and sending it to Meta. We have agreed Meta's UK Controller Addendum, which sets out who is responsible for what. In short:
• we are responsible for telling you about the Meta Pixel (this notice) and for asking for your consent;
• Meta is responsible for your rights to access, correct, delete, restrict and move the information Meta holds after it receives it;
• you can use your rights directly with Meta, or contact us and we will pass your request to Meta within 7 days.
Once Meta has received the information, Meta uses it as a separate controller, for example to provide our advert reports, to decide who sees adverts, to personalise the adverts you see, and to improve and secure its products. Meta's Privacy Policy explains who Meta is, how to contact it, the lawful basis it relies on, and how to use your rights with Meta. If you are in the European Union, the joint controller is Meta Platforms Ireland Limited, under Meta's Controller Addendum.
Transfers outside the UK. Meta Platforms, Inc. is in the USA. Information from the Meta Pixel is protected by a contract approved under UK law: the UK Addendum to the EU Standard Contractual Clauses, set out in Meta's UK Data Transfer Addendum. Netlify's safeguard is shown in section 6.
How to withdraw your consent and control your information.
• On our page: click Cookie settings at the bottom of the sales page or thank you page and choose Reject. The Meta Pixel stops straight away and we remove the Meta cookies our page set. You can also clear cookies and site data in your browser settings.
• Information already sent: withdrawing doesn't affect what was sent to Meta before you withdrew. In Facebook or Instagram, go to Accounts Centre, then Your information and permissions, then Your activity off Meta technologies, to see and disconnect activity that businesses have shared with Meta. You can also ask Meta to delete it using the routes in Meta's Privacy Policy.
• Adverts you see: you can change your advert settings in Facebook or Instagram under Accounts Centre, then Ad preferences, and find out more about online advertising choices at youronlinechoices.com/uk.
• Withdrawing your consent, or clicking Reject, never affects your purchase, your plan or your report.
If you have any questions about the Meta Pixel, email hello@verarahq.com, or see section 11 if you want to complain.

15. Changes to this notice

We will update this notice if the way we use your information changes. The date at the top shows when it was last updated. If a change is significant, we will tell you by email before it takes effect.