1. Who we are
vendr operates at vendr.services and provides premium fragrance vending machines to venues across the UK. In this policy, "we", "us" and "our" refers to vendr. Our contact email is hello@vendr.services.
2. What information we collect
We collect information you provide directly to us, including:
- Your name and job title
- Venue or business name and address
- Email address and telephone number
- Bank account details (for revenue share payments)
- Information about your venue (type, capacity, opening hours)
- Any messages or correspondence you send us
We may also collect limited technical data when you visit our website, such as your IP address, browser type, and pages visited, via standard web server logs.
3. How we use your information
We use the information we collect to:
- Process and respond to your enquiries
- Set up and manage your venue partnership agreement
- Arrange installation and ongoing maintenance visits
- Process monthly revenue share payments to you
- Send you service-related communications (e.g. restock notifications, payment confirmations)
- Comply with legal and regulatory obligations
We do not use your personal data for unsolicited marketing without your consent.
4. Legal basis for processing
We process your personal data under the following lawful bases (UK GDPR):
- Contract: processing necessary to enter into or perform our venue partnership agreement.
- Legitimate interests: managing our business operations and responding to enquiries.
- Legal obligation: where required by law (e.g. financial record-keeping).
5. Sharing your information
We do not sell your personal data. We may share it with trusted third parties only where necessary, including:
- Payment processors for revenue share transfers
- Our logistics and installation partners
- Cloud software providers used to run our business (subject to appropriate data processing agreements)
All third parties are required to handle your data securely and in accordance with UK data protection law.
6. How long we keep your data
We retain your personal data for as long as your venue partnership is active, and for up to 6 years afterwards in line with HMRC record-keeping requirements. Enquiry data from prospective partners who do not proceed is deleted after 12 months.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal obligations)
- Object to or restrict certain processing
- Receive your data in a portable format
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at hello@vendr.services. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
Our website uses only essential technical cookies. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required.
9. Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Bank details are handled securely and never stored in plain text.
10. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website or services after changes are made constitutes acceptance of the updated policy.
11. Contact us
If you have any questions about this Privacy Policy, please contact us at hello@vendr.services.