Privacy Policy — VADUM LIMITED

Key point: VADUM LIMITED does not process your payments or run identity checks. When you proceed to buy cryptoassets, you deal directly with a third-party provider (such as Stripe, Mercuryo or Onramper) which collects and processes the personal and payment data needed for that transaction under its own privacy policy.

1. Who we are

This Privacy Policy explains how VADUM LIMITED ("VADUM", "we", "us" or "our") handles personal data collected through our website. VADUM LIMITED is a company registered in England and Wales under company number 17403397, with its registered office at 61 Bridge Street, Kington, United Kingdom, HR5 3DJ. For the personal data we control, we are the "data controller" under the UK GDPR and Data Protection Act 2018.

2. Scope of this policy

This policy covers the data we collect through our own website. It does not cover the data collected by third-party providers when you complete a transaction on their platforms. Those providers are separate controllers of the data they collect, and you should read their own privacy notices.

3. Data we collect

Because VADUM is an interface and does not process payments, the data we collect directly is limited. It may include:

Usage data: pages visited, interactions, approximate location derived from IP address, and device/browser information.
Technical data: IP address, cookie identifiers, and similar technologies.
Quote inputs: non-identifying figures you enter into the estimate tool (for example, the amount and asset selected).
Contact data: your name and email if you choose to contact us or subscribe to updates.

We do not collect or store your payment card details, bank details, government ID, or wallet funds. That information is provided by you directly to a Provider during their checkout and verification process.

4. How we use your data

We use the data above to:

operate, maintain and improve the Site and its features;
show indicative estimates and route you to an appropriate Provider;
analyse aggregated usage to understand and improve performance;
respond to your enquiries and provide support; and
protect the Site against fraud, abuse and security threats, and comply with legal obligations.

5. Legal bases for processing

Under the UK GDPR, we rely on the following legal bases:

Legitimate interests — to run, secure and improve the Site, where not overridden by your rights;
Consent — for non-essential cookies and any marketing communications (which you can withdraw at any time); and
Legal obligation — where we must retain or disclose data to comply with the law.

6. Third-party providers and sharing

When you proceed to buy cryptoassets, you are directed to a Provider (currently including Stripe, Mercuryo and Onramper). Any personal, identity or payment data you submit there is collected and processed by that Provider as an independent controller under its own privacy policy. VADUM does not receive your payment credentials or verification documents.

We may share the limited data we hold with:

service providers who host our website and provide analytics on our behalf (as processors);
professional advisers, and authorities where required by law; and
a successor entity in the event of a business reorganisation or sale.

We do not sell your personal data.

7. Cookies

We use strictly necessary cookies to make the Site function, and, with your consent, analytics cookies to understand usage. You can control cookies through your browser settings. Disabling some cookies may affect how the Site works.

8. International transfers

Some of our service providers may process data outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

9. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, or as required to meet legal, accounting or reporting obligations, after which it is deleted or anonymised.

10. Your rights

Subject to conditions, you have the right to:

access a copy of your personal data;
request correction of inaccurate data;
request erasure of your data;
restrict or object to certain processing;
data portability; and
withdraw consent at any time.

To exercise these rights, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. For data held by a Provider, please contact that Provider directly.

11. Security

We use appropriate technical and organisational measures to protect the data we hold. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

The Site is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be posted on this page with a revised "Last updated" date.

14. Contact us

For privacy questions or to exercise your rights, contact privacy@vadum.online, or write to: VADUM LIMITED, 61 Bridge Street, Kington, United Kingdom, HR5 3DJ.