Vemery Limited customer privacy policy

This privacy policy tells you what to expect us to do with your personal information.

Content

  • Contact details

  • What information we collect, use, and why

  • Lawful bases and data protection rights

  • Where we get personal information from

  • How long we keep information

  • Who we share information with

  • Sharing information outside the UK

  • How to complain

Contact details

Email: contact@vemery.com

What information we collect, use, and why

We collect or use the following information to provide and improve products and services for clients:

  • Names and contact details

  • Addresses

  • Occupation

  • Payment details (including card or bank information for transfers and direct debits)

  • Transaction data (including details about payments to and from you and details of products and services you have purchased)

  • Usage data (including information about how you interact with and use our website, products and services)

  • Website user information

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details

  • Addresses

  • Purchase or service history

  • Account information, including registration details

  • Information used for security purposes

  • Marketing preferences

  • Technical data, including information about browser and operating systems

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details

  • Addresses

  • Marketing preferences

  • Website and app user journey information

  • IP addresses

We collect or use the following personal information to comply with legal requirements:

  • Name

  • Contact information

  • Client account information

  • Any other personal information required to comply with legal obligations

We collect or use the following personal information for recruitment purposes:

  • Contact details (eg name, address, telephone number or personal email address)

  • Employment history (eg job application, employment references or secondary employment)

  • Education history (eg qualifications)

  • Right to work information

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details

  • Account information

  • Purchase or service history

  • Customer or client accounts and records

  • Financial transaction information

  • Correspondence

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy policy.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • We have a legitimate interest in processing personal information in order to deliver, manage, and improve our products and services. This processing is necessary to understand client requirements, manage campaigns, communicate effectively, monitor service performance, and make improvements to how our services operate. Processing this information benefits clients by enabling us to provide relevant, effective, and reliable services that meet their expectations. It also benefits our organisation by allowing us to operate efficiently, improve service quality, and develop our offerings over time. The information used is limited to what is necessary for these purposes, handled securely, and processed in a way that individuals would reasonably expect. We consider that this processing does not override individuals’ rights or freedoms and has a minimal privacy impact.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • We have a legitimate interest in processing personal information to set up, manage, and maintain client and customer accounts. This processing is necessary to administer accounts, provide access to services, manage communications, maintain security, and ensure the ongoing operation of contractual relationships. This processing benefits individuals by allowing them to access and use our services smoothly and securely, and by ensuring their accounts are properly managed and supported. It benefits our organisation by enabling efficient account administration and reducing operational and security risks. Only relevant and necessary information is processed, appropriate safeguards are in place, and individuals’ rights are respected. We consider the impact on privacy to be proportionate and justified.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • We have a legitimate interest in processing limited personal information to communicate relevant service updates and business-related marketing information to individuals who would reasonably expect to receive such communications. This processing is necessary to inform clients and contacts about changes to services, new opportunities, or relevant business information. This benefits individuals by keeping them informed about services or opportunities that may be relevant to them, and benefits our organisation by supporting relationship management and business growth. Individuals are always given control over their marketing preferences, including the ability to opt out at any time. The processing is limited, transparent, and does not override individuals’ rights or freedoms.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information to comply with legal requirements:

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for recruitment purposes are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • We have a legitimate interest in processing personal information for recruitment purposes in order to assess suitability for roles, respond to applications or expressions of interest, and manage the recruitment process effectively. This processing is necessary to identify appropriate candidates, communicate during the recruitment process, and make informed decisions. This benefits individuals by allowing their applications or enquiries to be properly considered and managed, and benefits our organisation by enabling us to recruit suitable candidates when required. The information processed is relevant to recruitment only, handled securely, and retained for appropriate periods. We consider this processing to be expected, proportionate, and not intrusive.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

    • We have a legitimate interest in processing personal information in order to receive, investigate, and respond to queries, complaints, or claims. This processing is necessary to understand the issues raised, communicate with the individuals involved, maintain accurate records, and resolve matters fairly and efficiently. This benefits individuals by ensuring their concerns are taken seriously and handled appropriately, and benefits our organisation by enabling effective issue resolution, service improvement, and the management of legal or contractual risks. The processing is limited to what is necessary for the specific matter, carried out securely, and does not override individuals’ rights or freedoms.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Where we get personal information from

  • Directly from you

  • Publicly available sources

  • Suppliers and service providers

  • Third parties:

    • We may receive limited personal information from third parties where this is necessary to deliver our services. This may include information provided by advertisers, campaign partners, or agents acting on behalf of a client, where they have a lawful basis to share the information with us. In some cases, we may also receive personal information from platforms or service providers used to support our operations, such as website hosting providers, email service providers, payment processors, and accounting software, where individuals interact with us through those services. Any personal information received from third parties is processed in accordance with our privacy policy, is limited to what is necessary for the relevant purpose, and is handled securely.

How long we keep information

We retain personal information only for as long as necessary for the purposes for which it was collected, including to meet contractual, legal, accounting, and regulatory requirements.

Creator and advertiser account information is retained for the duration of the business relationship and for up to 12 months after it ends, unless a longer retention period is required.

Financial and payment information is retained for up to 6 years to comply with tax and accounting obligations.

Marketing contact information is retained until consent is withdrawn or an individual opts out.

Website enquiries and correspondence are retained for up to 12 months after the last contact.

Recruitment information is retained for up to 6 months following the end of the recruitment process, unless required for longer due to legal obligations.

Personal information relating to queries, complaints, or claims is retained for as long as necessary to resolve the matter and for a reasonable period afterwards in case of follow-up or legal requirements.

We regularly review the personal information we hold and securely delete or anonymise data that is no longer required.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Who we share information with

Data processors

  • Website hosting and website platform provider (website services sector, UK \/ EEA)

    • This data processor does the following activities for us: They host and manage our website and related infrastructure, including contact forms and content delivery. Personal information submitted via the website is processed on our behalf in order to respond to enquiries and operate the website securely.

  • Email and communications service provider (communications technology sector, UK \/ EEA)

    • This data processor does the following activities for us: They provide email and messaging services used to communicate with clients, creators, and other contacts, including responding to enquiries and sending service-related communications.

  • Accounting and invoicing software provider (financial software sector, UK / EEA)

    • They process financial and invoicing information on our behalf, including client and creator details required for accounting, billing, and tax compliance.

  • Payment processing provider (payments and financial services sector, UK / EEA)

    • They process payments to and from creators and clients securely, including bank or payment details necessary to complete transactions.

  • IT systems and secure data storage provider (IT and data storage sector, UK)

    • They support the secure storage and management of business data, including limited personal information, using protected systems and access controls.

Others we share personal information with

  • Professional or legal advisors

  • Organisations we’re legally obliged to share personal information with

  • Professional consultants

  • Third parties:

    • Advertisers, campaign partners or client agents (marketing sector, UK/EEA), Limited personal data shared where necessary to manage campaigns and deliver agreed services under contract.

    • Professional advisors (legal and accounting sector, UK) Personal information shared where necessary to obtain legal, tax or professional advice or to comply with legal obligations.

    • Public authorities (public sector, UK) Personal information shared where required by law, including for tax, regulatory or law enforcement purposes.

    • Payment service providers (financial services sector, UK/EEA) Personal and payment details shared to securely process payments and manage financial transactions. 

Sharing information outside the UK

Where necessary, our data processors will share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: Cloud-based service providers used to support business operations

Category of recipient: Category covering IT, communications, payments, accounting

Country the personal information is sent to: EEA and United States

How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge)

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy policy.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated

  • 4th January 2026