Privacy policy

Last updated and approved by the Vestd Board: May 2018

Vestd Limited (“we”, “our”, “us”) is committed to protecting and respecting your privacy. We aim at all times to ensure that we only capture data from you that is required for us to carry out your requirements as expressed by you to us through the Vestd websites, which comprise our platforms, app.vestd.com (the “Platform”) and our marketing sites, vestd.com, (the “Marketing Site”) .

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

By visiting our Platform, or by requesting we contact you via our Marketing Site you are accepting and consent to our use of your personal information in the ways set out in this Privacy Policy.

For the purpose of the Data Protection Act 1998 (the “Act”), Vestd Limited is the data controller and processor. We are registered with the Information Commissioner’s Office with Registration Number: A8068490.

Vestd Ltd has a Data Protection Officer (DPO) who can be contacted at dpo@vestd.com.

INFORMATION COLLECTION

We collect information about you, your Officers, and your Shareholders:

We are also working closely with third parties (including, for example, sub-contractors in technical services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

We may also automatically collect other identifiable information each time you visit this Platform or Marketing Site, including:

USE OF YOUR INFORMATION

We use your information to provide our service to you and to support your relationship with us and, if you agree, to send you information we think may be of interest to you. For example, we may send you information regarding the technical functionality of the Platform, or respond to a request for a demonstration from the Marketing Site.

For users of the Platform:

For users of the Marketing Site:

DISCLOSURE OF YOUR INFORMATION

We may disclose your personal information to any member of our corporate group.

In certain limited situations, we may also disclose your personal information to third parties:

RISKS

We have assessed that the following are the most material risks to the platform’s data security, and also have identified the associated mitigation measures.

Vestd will implement and maintain processes and technical solutions appropriate to protect and keep your data secure. These include organisational controls to restrict access to data to only those who need it as well as technical restrictions to prevent unauthorised access to your data.

If we become aware of a data breach we will endeavor to notify affected customers as soon as possible but not longer than 72 hours of becoming aware of the breach or data loss. We will provide details and updates as appropriate.

SECURITY

Where you have a password for the Platform which enables you to access your account you are responsible for keeping that password confidential and the password should not be shared with anyone.

The Platform contains a dynamically generated personal pin number for each user, such that we can verify the identity of any individual who is seeking to act on behalf of a company or user.

All personal information you provide to us is stored on secure servers. Some of these servers may be located outside of the European Economic Area (EEA). In respect of any transfer of your personal information outside the EEA, we are responsible for ensuring that an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data is ensured in that country.

RETENTION

We will store your data for as long as is necessary to serve you as a customer and fulfill our requirements under law.

If you leave Vestd some data may need to be retained for compliance and reporting reasons but we endeavor to remove sensitive and unnecessary details after 48 hours.

Some actions that are carried out on the Platform that impact your Company will be communicated to Companies House, this data will be entered into a permanent record. We will notify you before these actions are carried out.

Company and personal data will also be retained in backups that are taken. If data is ever recovered from these, deletion requests will be applied to this recovered data.

If you are not a customer your details will be held for as long as we are fulfilling your initial contact request. You can withdraw your consent and unsubscribe from communications at any point. Your details will be retained for 6 months after our last contact. This is so that we have continuity of information, should you contact us again in that period.

We do not directly store Vestd members’ credit card details.

COOKIES

In order to improve this Platform and Marketing Site, we use small files commonly known as “cookies” to track your visit. A cookie is a small amount of data which often includes a unique identifier that is sent to your computer, tablet or mobile phone (referred to in this Privacy Policy as a “Device”) from these sites and is stored on your Device’s hard drive.

A cookie records information relating to your internet activity (such as whether you have visited the sites before). This information is used to track visitor use of our sites and to compile statistical reports on site activity. The cookies we use and those of our chosen 3rd parties also allow us to identify you as you move around the site and when you return.

You may refuse the use of cookies by adjusting your internet browser settings not to accept cookies. Your web browser's help function should tell you how to do this. Alternatively, to find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit the website: http://www.allaboutcookies.org. This website will also explain how you can delete cookies which are already stored on your Device. However, please note that if you refuse the use of cookies you will not be able to use the Platform.

LINKS TO OTHER WEBSITES

This site may contain links to other websites. This Privacy Policy only applies to this site so when you link to other websites you should read their privacy policies. We do not accept any responsibility or liability for any such policy. Please check these policies before you submit any personal data to such sites.

YOUR RIGHTS

You have the right to revoke your consent to use your details for marketing purposes at any point. You can exercise the right at any time by contacting us at help@vestd.com.

ACCESS TO INFORMATION

The Act gives you rights to access information held about you. Your right of access can be exercised in accordance with the Act.

RIGHT TO BE FORGOTTEN

If you wish to remove your personal and your company data from the Platform you should contact us at help@vestd.com, this process will result in your no longer being a Vestd customer.

CHANGES TO THIS PRIVACY POLICY

Any changes we may make to our Privacy and Cookies Policy in the future will be posted on this page and, where appropriate, notified to you by email.