Privacy Policy

1. Who We Are

For the purposes of data protection law, the data controller is:

Vindico Labs designs, prototypes, and launches software ventures. Some of these ventures operate as independent products with their own privacy policies. This policy covers the Vindico Labs website and platform only.

2. Information We Collect

We collect and process the following types of personal information:

Information you provide directly

• Name and email address when you contact us or submit an enquiry
• Information included in idea submissions via our "Submit Your Idea" page
• Account details if you create a login to access restricted areas
• Any additional information you choose to include in correspondence

Information collected automatically

• Page views and general usage patterns (via Plausible Analytics, which does not use cookies or collect personal data)
• Core Web Vitals performance metrics
• Browser type, device type, and screen size
• Referring website

We do not use third-party advertising trackers, and our analytics provider (Plausible) does not collect IP addresses or use cookies.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to enquiries: When you contact us or submit an idea, we use your details to reply and follow up
• To provide access: If you have an account, we use your login details to authenticate you and manage your access to restricted materials
• To improve our website: We use aggregated, anonymous analytics data to understand how visitors use our site and make improvements
• To comply with legal obligations: We may process data where required by law, regulation, or legal proceedings

We do not use your personal information for automated decision-making or profiling.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Legitimate interests: To respond to enquiries, evaluate idea submissions, improve our website, and manage our business operations. We have assessed that these interests do not override your rights and freedoms
• Contract: Where processing is necessary to provide services you have requested, such as account access
• Consent: Where you have given clear consent for us to process your data for a specific purpose. You may withdraw consent at any time by contacting us
• Legal obligation: Where we are required by law to process your data

5. How We Share Your Information

We do not sell your personal information to anyone.

We may share your information in the following limited circumstances:

• Service providers: We use a small number of trusted providers to host our website and deliver our services. These providers process data only on our instructions and are contractually bound to protect it
• Legal requirements: We may disclose information if required by law, court order, or regulatory authority
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy

6. Cookies and Tracking

We use a minimal number of cookies, limited to those essential for website functionality. We do not use advertising or tracking cookies.

Our analytics provider, Plausible, is privacy-focused and does not use cookies, collect personal data, or track individuals across websites.

For full details on the cookies we use and how to manage your preferences, see our Cookie Policy.

7. Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures, including:

• Encryption of data in transit using TLS/SSL
• Restricted access to personal data on a need-to-know basis
• Secure authentication for account access
• Regular review of our security practices

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. If you become aware of any security issue, please contact us immediately at [email protected].

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

• Enquiries and correspondence: Retained for up to 2 years after our last interaction, unless ongoing business need requires longer
• Idea submissions: Retained for the duration of any evaluation period and for a reasonable period thereafter
• Account data: Retained for as long as your account is active. Upon deletion, personal data is removed within 30 days, except where legal retention applies
• Analytics data: Aggregated and anonymous; not linked to individuals

9. International Data Transfers

We are based in the United Kingdom. Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK International Data Transfer Agreements
• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Transfers to countries with an adequacy decision from the UK Government

You may request further details about the safeguards in place by contacting us.

10. Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data where there is no compelling reason for continued processing
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Request your data in a structured, commonly used, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.

12. Third-Party Links

Our website may contain links to third-party websites, including our venture products, which operate under their own privacy policies. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect how we process your personal data, we will provide additional notice where possible.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please contact us: