Privacy Policy

Effective Date: 2025-07-19

Vindico ICS Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://vindico.net), use our mobile application (SWAPP), or access any related platform or service.

1. Scope

This Privacy Policy applies to our services operated from the United Kingdom and complies with the UK GDPR, EU GDPR, and relevant international laws. If you access our services from outside these jurisdictions, your data may be processed and stored according to regional requirements.

2. Information We Collect

Contact Information: name, email, phone number
Account Details: authentication tokens from Google, Facebook, Apple, X
Payment Information: processed via Stripe, GoCardless
Usage Data: IP, device info, location, cookies
Support Communications: messages you send to support@vindico.net

3. Use of Information

We use your information to:

Provide and maintain our services
Improve functionality and user experience
Send you administrative messages
Respond to inquiries
Comply with legal obligations

4. Cookies and Tracking

We use cookies and analytics tools like Google Analytics, Plausible to understand how users interact with our services. For full control over your cookie preferences, please visit our Manage Cookies page.

5. Data Storage and Localisation

Data is stored regionally: UK data in the UK, EU data in the EU, US data in the US, and Australian data in Australia. In rare cases where data is accessed across borders (e.g. for support), safeguards like SCCs and IDTAs are applied.

6. Data Sharing and Third Parties

We may share your data with:

Trusted vendors and subprocessors (e.g. Google Analytics, Plausible, Stripe, GoCardless)
Public authorities when legally required
Other parties with your consent

7. Data Retention

We retain personal data for 12, or as required to fulfil our legal or contractual obligations.

8. Security

We implement security measures including encryption, access control, and regular vulnerability assessments to protect your personal data.

9. Your Rights

Access your data
Correct inaccurate data
Request deletion ("Right to be Forgotten")
Object to processing or withdraw consent
Complain to a supervisory authority

10. Children's Privacy

We do not knowingly collect data from children under 13. If you believe a child has submitted personal data, please contact privacy@vindico.net.

11. Business Transfers

In the event of a merger or acquisition, user data may be transferred to the acquiring entity under the terms of this Privacy Policy.

12. External Links

Our website may contain links to third-party sites. We are not responsible for their content or privacy practices. Please review their policies before sharing any data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted at https://vindico.net/privacy. Your continued use of our services after changes are made constitutes acceptance.

14. Contact Us

For privacy-related questions or data access requests:

Email: privacy@vindico.net
Support: support@vindico.net
Address: Vindico Arena, Olympian Dr, Cardiff, CF11 0JS, United Kingdom