Privacy Policy

Privacy Policy – Vantagepick

Last Updated: May 27, 2026

Effective Date: May 27, 2026

This Privacy Policy (“Policy”) is published and maintained by Vantagepick (“the Company”, “We”, “Us”, or “Our”), a digital marketing and business growth brand incorporated and operating under the laws of the United Kingdom, and whose website is accessible at https://vantagepick.com/ (the “Website” or “Service”).

This Policy sets out, in full and with complete transparency, Our policies and procedures governing the collection, processing, use, retention, transfer, and disclosure of Your Personal Data when You access or interact with the Service. It further informs You of Your legal privacy rights and the protections afforded to You under applicable data protection law, including, without limitation, the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (CCPA/CPRA), the California Online Privacy Protection Act (CalOPPA), and all other applicable local, national, or supranational data protection legislation.

We use Your Personal Data solely to provide, maintain, and improve the Service, and for the other lawful purposes described in this Policy. By accessing or using the Service, You acknowledge that You have read, understood, and agree to the collection and use of Your information in accordance with this Policy. If You do not agree with the terms of this Policy, You must cease all use of the Service immediately.

We are committed to handling Your Personal Data responsibly, securely, and in compliance with all applicable legal obligations. We encourage You to read this Policy in its entirety and to contact Us if You have any questions or concerns.

1. Interpretation and Definitions

1.1 Interpretation

Throughout this Privacy Policy, words and phrases whose initial letter is capitalised carry the specific meanings defined below. These definitions apply uniformly, regardless of whether such terms appear in the singular or plural form, in active or passive voice, and in any section or subsection of this Policy.

1.2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth herein:

  • Account means a unique account created for You to access Our Service or particular features or portions thereof.
  • Affiliate means any entity that controls, is controlled by, or is under common control with a party, where “control” is defined as beneficial ownership of fifty percent (50%) or more of the shares, equity interest, or other voting securities entitled to vote for the election of directors or other persons exercising equivalent governing authority.
  • Behavioural Advertising means the practice of collecting data about a user’s browsing activity across multiple websites and using that data to deliver advertisements that are targeted to the inferred interests, preferences, or characteristics of that user.
  • Company (referred to in this Policy as “the Company”, “We”, “Us”, or “Our”) refers to Vantagepick, a digital marketing and business growth brand operating under the laws of the United Kingdom.
  • Consumer (for the purposes of the CCPA/CPRA) means a natural person who is a resident of the State of California.
  • Cookies are small text files placed on Your Device by a website or its third-party partners. Cookies store details of Your interactions with the website, enable session management, support analytics functionality, and facilitate the delivery of targeted or personalised advertising. Cookies may be “session” cookies (which expire when Your browser is closed) or “persistent” cookies (which remain on Your Device until deleted or until a defined expiry date is reached).
  • Country refers to the United Kingdom.
  • Data Controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For the purposes of this Policy, the Company is the Data Controller.
  • Data Processor (also referred to as “Service Provider”) means any natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Data Controller, pursuant to a lawful basis and, where applicable, a data processing agreement.
  • Data Subject means the identified or identifiable natural person to whom Personal Data relates.
  • Device means any electronic device capable of accessing the Service, including without limitation a personal computer, laptop, mobile telephone, smartphone, tablet, or any other internet-connected hardware.
  • Do Not Track (DNT) refers to a preference setting available in certain web browsers that signals to websites that the user does not wish to be tracked across websites for the purposes of behavioural advertising.
  • GDPR refers collectively to the United Kingdom General Data Protection Regulation (UK GDPR) as it forms part of domestic law in the United Kingdom pursuant to the European Union (Withdrawal) Act 2018, and the EU General Data Protection Regulation (EU) 2016/679, to the extent applicable.
  • Interest-Based Advertising means advertising that is selected and delivered to a user based on inferences drawn from that user’s online activity, including browsing history, search history, and interactions with websites and applications over time.
  • Personal Data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or by reference to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural, or social identity.
  • Sensitive Personal Data means a specific category of Personal Data that, by its nature, warrants heightened protection. Under UK GDPR, this includes racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data concerning health, and data concerning a natural person’s sex life or sexual orientation.
  • Service refers to the Website operated by the Company and accessible at https://vantagepick.com/.
  • Service Provider means any natural or legal person who processes data on behalf of the Company pursuant to a lawful instruction and, where required, under the terms of a written data processing agreement. This includes third-party companies and individuals engaged by the Company to facilitate the Service, deliver the Service on the Company’s behalf, perform services related to the Service, or to assist the Company in analysing usage patterns and improving the Service.
  • Third-Party Social Media Service means any social network, platform, or website through which a user can log in or create an account to access Our Service.
  • Usage Data refers to data collected automatically and electronically, either generated by Your use of the Service or derived from the Service’s underlying technical infrastructure. This includes, but is not limited to, Your Device’s Internet Protocol (IP) address, browser type and version, the specific pages of Our Service that You visit, the time and date of each visit, the duration of time spent on individual pages, unique Device identifiers, referral URLs, operating system details, and other technical diagnostic data.
  • Website refers to the Vantagepick website, accessible at https://vantagepick.com/.
  • You means the individual person accessing or using the Service, or, where applicable, the company or other legal entity on whose behalf such individual is accessing or using the Service.

2. Data Controller Information

The Company is the Data Controller responsible for Your Personal Data collected through the Service. The Company determines the purposes for which, and the means by which, Your Personal Data is processed.

All enquiries relating to data protection, the exercise of Your rights, or this Policy generally should be directed to Us as follows:

3. Collecting and Using Your Personal Data

3.1 Categories of Personal Data We Collect

We collect different categories of Personal Data depending on Your interactions with the Service. The categories of data We collect, and the circumstances in which each is collected, are described below.

3.1.1 Personal Identification Data

When You voluntarily interact with certain features of the Service — such as completing a contact form, subscribing to a newsletter or mailing list, creating an Account, or otherwise corresponding with Us — We may request and collect certain personally identifiable information, including but not limited to:

  • First name and last name;
  • Email address;
  • Business name or employer (where voluntarily provided);
  • Telephone number (where voluntarily provided); and
  • Any other information You choose to share with Us in the course of such correspondence.

We collect this information solely to the extent necessary to respond to Your enquiry, fulfil the purpose for which it was submitted, or to deliver the services or communications You have requested. Provision of this information is voluntary; however, failure to provide certain information may impair Our ability to respond to You or deliver the requested service.

3.1.2 Usage Data

Usage Data is collected automatically, by technical means, each time You access or interact with the Service. This data is inherent to the operation of the internet and is generated by Your Device and browser in the ordinary course of browsing. Usage Data We collect may include:

  • Your Device’s Internet Protocol (IP) address;
  • Browser type, version, and configuration;
  • Operating system and platform;
  • The specific pages and URLs of Our Service that You visit, and in what sequence;
  • The date, time, and duration of Your visit;
  • The time spent on individual pages and sections of the Service;
  • Referring website or URL (the address of the page from which You navigated to Our Service);
  • Unique Device identifiers and other technical identifiers; and
  • Crash reports, performance data, and other diagnostic information.

Where You access the Service via a mobile Device, We may additionally collect information specific to that Device, including but not limited to the type and model of mobile Device used, Your mobile Device’s unique identifier, the mobile operating system, and the type of mobile internet browser used.

3.1.3 Tracking Technologies and Cookies

We, and certain authorised third-party partners operating on Our behalf or independently on Our Service, use Cookies and analogous tracking technologies — including web beacons (also known as pixel tags or clear GIFs), JavaScript tags, embedded scripts, local shared objects (Flash cookies), and HTML5 local storage — to collect, store, and process information about Your activity on the Service and across other websites and online services over time.

These technologies serve a variety of functions, including:

  • Essential / Strictly Necessary Cookies: These cookies are indispensable to the operation of the Service and cannot be switched off. They are typically set in response to Your actions that constitute a request for services, such as setting Your privacy preferences or logging in. You may configure Your browser to block these cookies, but please be aware that certain parts of the Service will not function as intended if You do so.
  • Performance and Analytics Cookies: These cookies enable Us and Our analytics partners to count visits to the Service, to understand the sources from which traffic originates, and to measure and improve the performance of the Service. The information these cookies collect is aggregated and, where possible, anonymised. If You decline these cookies, We will not know when You have visited the Service and will be unable to monitor its performance.
  • Functionality Cookies: These cookies allow the Service to remember choices You have made — such as language preference or regional settings — and to provide enhanced, personalised features. They may be set by Us or by third-party providers whose services We have incorporated into the Service.
  • Targeting and Advertising Cookies: These cookies are set by Us and by Our advertising partners, including Google, to deliver advertisements that are relevant and of interest to You, and to measure the effectiveness of advertising campaigns. They may track Your Device across websites and build a profile of Your interests. Please see Section 5 of this Policy for detailed information about how these cookies are used in the context of our advertising partnerships.
  • Social Media Cookies: These cookies are set by social media platforms that We have integrated into Our Service, to enable sharing functionality. These third parties may use this data to track Your browsing across websites and build a profile of Your interests, which may affect the content and advertising You see on other websites.

For more information about the specific cookies We use, their purpose, duration, and the parties that set them, please refer to Our Cookie Policy, where applicable, or contact Us directly at info@vantagepick.com.

Cookie Consent and Withdrawal: Subject to applicable law, non-essential cookies — including advertising, behavioural tracking, and analytics cookies — will be deployed only where You have provided informed, freely given, specific, and unambiguous consent, in accordance with UK GDPR, PECR, and applicable international requirements. You may withdraw Your consent at any time by adjusting Your browser settings to block or delete cookies, or by using any consent management mechanism made available on the Service. Please note that withdrawing consent may affect the availability or functionality of certain features of the Service.

3.1.4 Information Provided Through Third-Party Services

If You choose to access or register for the Service using a third-party account — such as a Google or social media account — We may receive certain information from that third-party platform in accordance with Your privacy settings and the platform’s terms of service. The information We receive may include Your name, email address, profile picture, and any other information You have made publicly available or authorised the platform to share. We have no control over, and accept no responsibility for, the privacy practices of third-party platforms. We encourage You to review the relevant platform’s privacy policy before using such sign-in or registration features.

4. Legal Bases for Processing Your Personal Data

We are required under UK GDPR and applicable data protection law to identify a valid lawful basis for each processing activity involving Your Personal Data. We rely on one or more of the following legal bases, as applicable:

  • Performance of a Contract (Article 6(1)(b) UK GDPR): Where processing is necessary for the performance of a contract to which You are a party, or in order to take steps at Your request prior to entering into a contract — for example, creating and managing Your Account, or fulfilling a service request You have made.
  • Compliance with a Legal Obligation (Article 6(1)(c) UK GDPR): Where processing is necessary for compliance with a legal obligation to which the Company is subject, including statutory record-keeping requirements, fraud prevention obligations, and responses to lawful requests from regulatory authorities or courts.
  • Legitimate Interests (Article 6(1)(f) UK GDPR): Where processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party, except where such interests are overridden by Your interests or fundamental rights and freedoms. This basis supports, for example, Our use of analytics to understand and improve Service performance, Our fraud-prevention and security measures, and certain direct marketing activities (subject to Your right to object at any time).
  • Consent (Article 6(1)(a) UK GDPR): Where You have given freely given, specific, informed, and unambiguous consent to the processing of Your Personal Data for one or more defined purposes. This basis applies, for example, to the deployment of non-essential cookies, subscription to marketing communications, and the receipt of interest-based advertising from Our advertising partners. You may withdraw consent at any time without detriment, although such withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal.

5. Third-Party Advertising and Google AdSense Cookies

Vantagepick participates in online advertising programmes and uses third-party advertising technology and services to fund and support the provision of the Service. This section provides full and transparent disclosure of Our advertising practices, in particular Our participation in Google’s advertising programmes, and sets out Your rights and the mechanisms available to You to control how Your data is used for advertising purposes.

5.1 Third-Party Advertising Partners

We use third-party advertising companies, networks, and technology platforms to serve advertisements when You visit Our Website. These companies — including, prominently, Google LLC — are authorised by Us to place advertising cookies and similar tracking technologies on Your Device when You visit https://vantagepick.com/. These technologies enable Our advertising partners to collect data about Your visit to Our Website — and Your visits to other websites across the internet — for the purpose of delivering advertisements about goods and services that are targeted to Your inferred interests, browsing history, and online behaviour.

5.2 Google AdSense and Advertising Cookies: Mandatory Disclosure

We use Google AdSense, a digital advertising service provided by Google LLC (“Google”), to display advertisements on Our Service. In connection with this service, the following disclosures are made:

  • Cookies Used for Personalised Advertising: Third-party vendors, including Google, use cookies to serve advertisements to users based on their prior visits to Vantagepick (https://vantagepick.com/) and to other websites across the internet. These cookies allow Google and its advertising network partners to track Your browsing activity over time and across different websites, platforms, and devices for the purpose of building an interest profile and delivering interest-based or personalised advertisements.
  • Google’s Use of Advertising Cookies: Google’s use of advertising cookies, including the DoubleClick cookie and other advertising identifiers, enables Google and its partners to serve advertisements to You based on Your visit to Our Site and/or Your prior visits to other websites on the internet. Google may also use these technologies in combination with Your Google account data, where You are logged in, to further personalise the advertisements You see. Google’s advertising practices are governed by the Google Privacy Policy.
  • Non-Personally Identifiable Information: In addition to cookie-based tracking, Our third-party advertising partners may use non-personally identifiable information about Your visits to this and other websites to provide advertisements about goods and services of interest to You. This may include demographic inferences, contextual data relating to the content of the pages You visit, and aggregated audience segments.
  • DoubleClick DART Cookie: Google, as a third-party advertising vendor, uses the DART cookie to serve advertisements to users based on their visits to Vantagepick and other websites on the internet. The use of the DART cookie by Google is governed by Google’s advertising privacy policy, which is available at https://policies.google.com/technologies/ads.

5.3 Your Rights and Opt-Out Options for Personalised Advertising

You have meaningful and legally enforceable rights to control whether Your personal data is used for the purpose of delivering personalised or interest-based advertising. We are committed to ensuring that these controls are clearly communicated and readily accessible to You. The following opt-out mechanisms are available:

  • Google Ads Settings: You may opt out of Google’s use of cookies for personalised advertising at any time by visiting Google’s Ads Settings page at https://www.google.com/settings/ads. On this page, You can review the interest categories Google has associated with Your browser or account, modify Your ad personalisation preferences, and opt out of personalised advertising entirely. If You opt out, You will continue to see advertisements, but those advertisements will no longer be targeted based on Your inferred interests or browsing history.
  • Network Advertising Initiative (NAI) Opt-Out: You may also opt out of a third-party vendor’s use of cookies for personalised advertising by visiting the Digital Advertising Alliance’s consumer choice page at www.aboutads.info. This tool allows You to opt out of interest-based advertising from a wide range of participating advertising networks and technology platforms, including Google.
  • European Interactive Digital Advertising Alliance (EDAA): Users located in the United Kingdom or European Economic Area may additionally exercise their opt-out rights through the EDAA’s Your Online Choices tool, available at www.youronlinechoices.com. This portal allows You to manage Your preferences for behavioural advertising across all IAB Europe-registered advertising vendors.
  • Browser-Level Cookie Controls: You may instruct Your web browser to refuse all cookies, to alert You when cookies are being sent, or to delete existing cookies from Your Device. The method for controlling cookie settings varies between browsers; please consult Your browser’s documentation or support pages for specific instructions. Please be aware that disabling or deleting cookies may impair the functionality of certain features of the Service and of other websites You visit.
  • Mobile Advertising Identifiers: On mobile devices, You may opt out of interest-based advertising by resetting Your mobile advertising identifier or enabling the “Limit Ad Tracking” (iOS) or “Opt out of Ads Personalisation” (Android) setting in Your device’s settings menu.

Please note that opting out of personalised advertising does not prevent the display of advertisements on the Service; it means only that the advertisements You are shown will not be tailored to Your inferred interests or browsing history. You will continue to see contextual or non-personalised advertisements.

5.4 Consent for Non-Essential Advertising Cookies

Where required by applicable law — including, in particular, the UK GDPR, the Privacy and Electronic Communications Regulations 2003 (PECR), and the CCPA/CPRA — We will obtain Your prior, explicit, informed consent before deploying non-essential advertising or targeting cookies on Your Device. Such consent is obtained through a consent management mechanism presented to You upon Your first visit to the Service. You may review, modify, or withdraw Your consent preferences at any time by accessing the consent management tool on Our Website or by adjusting Your browser settings as described above. Withdrawal of consent will not affect the lawfulness of any processing that occurred prior to such withdrawal.

6. Purposes for Which We Use Your Personal Data

The Company processes Your Personal Data for the following lawful purposes. Where a specific legal basis applies to each purpose, it is identified in parentheses.

  • To provide, operate, and maintain the Service: Including hosting, delivering content, processing transactions, and ensuring the Service functions correctly and securely. (Contract Performance; Legitimate Interests)
  • To create and manage Your Account: Including verifying Your identity, enabling access to account-specific features, and communicating with You about Your Account. (Contract Performance)
  • To respond to Your communications and support requests: Including addressing enquiries, complaints, technical support tickets, and feedback submitted through any channel. (Contract Performance; Legitimate Interests)
  • To communicate with You about the Service: Including sending administrative communications such as service updates, security notices, technical notifications, and changes to Our terms or policies. (Contract Performance; Legal Obligation; Legitimate Interests)
  • To deliver marketing and promotional communications: Including newsletters, product announcements, special offers, and other content that may be of interest to You, where You have consented to receive such communications or where We have a legitimate interest in doing so (subject always to Your right to withdraw consent or object at any time). (Consent; Legitimate Interests)
  • To conduct analytics and improve the Service: Including monitoring usage patterns, evaluating the performance of the Service, measuring the effectiveness of Our marketing and content, understanding how users navigate the Service, and using the resulting insights to improve the design, functionality, and content of the Service. (Legitimate Interests)
  • To deliver personalised content and advertising: Including working with third-party advertising partners to serve interest-based advertisements to You based on Your browsing activity, where You have consented to the use of advertising cookies. (Consent)
  • To protect the security and integrity of the Service: Including detecting, investigating, and preventing fraudulent transactions, unauthorised access, technical attacks (including denial-of-service attacks), abuse, and other illegal or harmful activities. (Legitimate Interests; Legal Obligation)
  • To comply with legal and regulatory obligations: Including responding to lawful requests from courts, regulators, government authorities, and law enforcement agencies, and fulfilling Our statutory record-keeping and reporting obligations. (Legal Obligation)
  • To exercise or defend legal claims: Including where necessary to establish, exercise, or defend Our legal rights or those of a third party in connection with legal proceedings or regulatory investigations. (Legitimate Interests; Legal Obligation)
  • To carry out business administration and operations: Including internal accounting, financial reporting, business planning, and the management of Our corporate and commercial relationships. (Legitimate Interests; Legal Obligation)

7. Sharing and Disclosure of Your Personal Data

We respect the confidentiality of Your Personal Data and will not sell, rent, or lease it to third parties. We may, however, share Your Personal Data with third parties in the specific, limited circumstances described below.

7.1 Service Providers and Data Processors

We engage carefully selected third-party companies and individuals as Service Providers to perform functions on Our behalf that are necessary for the operation and improvement of the Service. These Service Providers process Your Personal Data solely on Our documented instructions and are contractually prohibited from processing it for their own independent purposes. They include, without limitation, providers of:

  • Web hosting and cloud infrastructure services;
  • Website analytics platforms (including, for example, Google Analytics);
  • Email delivery and marketing automation services;
  • Customer support and helpdesk software;
  • Payment processing services;
  • Advertising technology and ad-serving platforms (including, for example, Google AdSense); and
  • Cybersecurity and fraud prevention services.

7.2 Advertising and Analytics Partners

As described in Section 5 of this Policy, We work with third-party advertising and analytics partners — including Google LLC — who may receive certain data about Your use of the Service in connection with the delivery of advertising and the measurement of advertising performance. These partners operate under their own privacy policies and may also process Your data as independent data controllers. We encourage You to review the privacy policies of these partners directly.

7.3 Affiliates

We may share Your Personal Data with Our Affiliates — that is, entities that are under common ownership or control with the Company — for internal business and operational purposes. Our Affiliates are required to honour this Privacy Policy and to process Your Personal Data only in accordance with it.

7.4 Business Transfers and Corporate Transactions

In the event that the Company is involved in a merger, acquisition, asset sale, corporate restructuring, financing transaction, or other transfer of all or part of the Company’s business or assets, Your Personal Data may be transferred to the relevant successor entity, prospective buyer, or acquiring party as part of that transaction. In such circumstances, We will use commercially reasonable efforts to notify You — for example, by posting a notice on Our Website or by sending You an email to the address associated with Your Account — prior to or upon the transfer becoming effective, and prior to Your Personal Data becoming subject to a materially different privacy policy.

7.5 Legal Obligations and Protection of Rights

We may disclose Your Personal Data where We believe, in good faith, that such disclosure is necessary or appropriate to:

  • Comply with a legal obligation, court order, subpoena, warrant, or other lawful process issued by a competent authority;
  • Respond to a verified request from a government, regulatory, or law enforcement agency;
  • Investigate, prevent, or take action in connection with suspected or actual illegal activity, fraud, or a breach of Our Terms of Use;
  • Protect and defend the rights, property, or safety of the Company, Our users, or third parties; or
  • Investigate and defend Ourselves against any third-party claims or allegations.

7.6 With Your Explicit Consent

We may disclose Your Personal Data to third parties not otherwise described in this Policy where You have provided Your prior, explicit, and informed consent to such disclosure.

8. Retention of Your Personal Data

We retain Your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, and for as long as We are required or permitted to do so by applicable law. When determining the appropriate retention period for any category of Personal Data, We take into account the nature, sensitivity, volume, and potential risk of harm arising from unauthorised use or disclosure of the data, the purposes for which the data is processed, and whether those purposes can be achieved through other means.

Our standard data retention practices are as follows:

  • Account Information: Personal Data associated with a registered Account is retained for the duration of the active account relationship and for a period of up to twenty-four (24) months following the closure or deletion of the Account, to allow Us to resolve any disputes, comply with Our legal obligations, and enforce Our agreements.
  • Website Analytics and Server Log Data: Usage Data, including server access logs and analytics data, is retained for up to twenty-four (24) months from the date of collection for the purposes of trend analysis, performance monitoring, and technical troubleshooting, after which it is securely deleted or irreversibly anonymised.
  • Support and Correspondence Data: Records of Your support requests and general correspondence with Us are retained for up to twenty-four (24) months from the date of last contact, unless a longer period is required or permitted by law, or unless retention of a specific record is necessary for the purpose of resolving an open dispute or legal claim.
  • Marketing Data: Personal Data processed for the purposes of marketing communications is retained until You withdraw Your consent or exercise Your right to object to such processing, at which point We will cease processing Your data for marketing purposes and will remove it from Our active marketing databases within a reasonable time, subject to any minimum retention period required by law.
  • Legal and Compliance Data: Where retention is required for the purpose of complying with a legal obligation or for the establishment, exercise, or defence of legal claims, We will retain the relevant data for the period required by the applicable legal obligation or for the duration of any applicable limitation period, whichever is longer.

Upon expiry of the applicable retention period, or where retention is no longer lawfully justified, Personal Data will be securely deleted, destroyed, or rendered permanently anonymous in accordance with Our data disposal procedures, so that it can no longer be attributed to or associated with any individual.

9. Transfer of Your Personal Data

Your Personal Data is collected and processed by the Company in the United Kingdom. However, given the global nature of the internet and Our use of international third-party Service Providers — including advertising and analytics platforms operated by companies headquartered in the United States and other jurisdictions — Your Personal Data may be transferred to, stored at, or processed in countries outside the United Kingdom and, where applicable, outside the European Economic Area.

Such countries may not have data protection laws that are equivalent in standard or scope to those in the United Kingdom. Where We transfer Your Personal Data to a third country or international organisation, We will do so only where one of the following transfer safeguards is in place:

  • The UK government has issued an adequacy decision in respect of the recipient country, confirming that it affords an adequate level of data protection;
  • The transfer is subject to appropriate safeguards within the meaning of Article 46 UK GDPR, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO), or Binding Corporate Rules;
  • One of the derogations for specific situations set out in Article 49 UK GDPR applies — for example, where the transfer is necessary for the performance of a contract with You, or where You have provided explicit consent to the proposed transfer after being informed of its possible risks; or
  • The transfer falls within any other lawful transfer mechanism recognised under applicable UK data protection law.

If You have questions about the specific transfer mechanisms We use in respect of any particular third-party Service Provider, or if You wish to obtain a copy of the relevant safeguard documentation, please contact Us at info@vantagepick.com.

10. Your Data Protection Rights

Subject to applicable law and the conditions and limitations set out therein, You have the following rights in respect of Your Personal Data held by the Company. We will respond to all verified rights requests within the timeframes required by applicable law — and in any event within one calendar month of receipt of Your request, unless an extension is lawfully permitted and We notify You accordingly.

10.1 Rights Under UK GDPR (Applicable to Users in the United Kingdom and EEA)

  • Right of Access (Article 15 UK GDPR): You have the right to obtain from Us confirmation as to whether Personal Data concerning You is being processed, and, where that is the case, to receive a copy of that Personal Data together with information about the purposes of the processing, the categories of data concerned, the recipients to whom it has been or will be disclosed, the intended retention period, and the existence of Your other rights.
  • Right to Rectification (Article 16 UK GDPR): You have the right to request that We correct, without undue delay, any inaccurate Personal Data held about You, and to have incomplete Personal Data completed, having regard to the purposes of the processing.
  • Right to Erasure / Right to be Forgotten (Article 17 UK GDPR): You have the right to request the deletion of Your Personal Data where, among other grounds: the data is no longer necessary for the purposes for which it was collected; You withdraw consent and there is no other lawful basis for processing; You object to the processing and there are no overriding legitimate interests; or the data has been unlawfully processed. This right is subject to certain exceptions, including where retention is required for compliance with a legal obligation or for the establishment, exercise, or defence of legal claims.
  • Right to Restriction of Processing (Article 18 UK GDPR): You have the right to request that We restrict the processing of Your Personal Data in certain circumstances — for example, where You contest the accuracy of the data (for a period allowing Us to verify its accuracy), or where You have objected to processing based on legitimate interests (pending verification of whether Our legitimate grounds override Yours).
  • Right to Data Portability (Article 20 UK GDPR): Where processing is based on Your consent or on the performance of a contract, and where processing is carried out by automated means, You have the right to receive Your Personal Data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance from Us.
  • Right to Object (Article 21 UK GDPR): You have the right to object, at any time, on grounds relating to Your particular situation, to the processing of Your Personal Data where such processing is based on Our legitimate interests. Where You exercise this right, We shall cease processing Your Personal Data unless We can demonstrate compelling legitimate grounds for the processing which override Your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims. You have an unconditional right to object to the processing of Your Personal Data for direct marketing purposes at any time.
  • Right to Withdraw Consent: Where processing is based on Your consent, You have the right to withdraw that consent at any time, with immediate effect for future processing. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
  • Right Not to be Subject to Solely Automated Decision-Making (Article 22 UK GDPR): You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal effects concerning You or similarly significantly affects You, except where such processing is necessary for the entry into or performance of a contract with You, is authorised by law, or is based on Your explicit consent.

10.2 Rights Under the CCPA/CPRA (Applicable to California Residents)

If You are a resident of the State of California, You are afforded certain rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively “CCPA/CPRA”), in respect of Personal Information (as that term is defined under California law). These rights are as follows:

  • Right to Know: You have the right to request that We disclose to You: (i) the categories of Personal Information We have collected about You; (ii) the categories of sources from which such Personal Information was collected; (iii) Our business or commercial purpose for collecting, selling, or sharing that Personal Information; (iv) the categories of third parties with whom We share Personal Information; and (v) the specific pieces of Personal Information We have collected about You.
  • Right to Delete: You have the right to request the deletion of Personal Information that We have collected from You, subject to certain exceptions permitted by law.
  • Right to Correct: You have the right to request that We correct inaccurate Personal Information maintained about You.
  • Right to Opt Out of Sale or Sharing: You have the right to direct Us to not sell or share Your Personal Information. Note that We do not sell Personal Information for monetary consideration; however, Our use of advertising cookies may constitute “sharing” under the CCPA/CPRA. You may opt out of such sharing through the mechanisms described in Section 5.3 of this Policy.
  • Right to Limit Use of Sensitive Personal Information: To the extent that We process Sensitive Personal Information (as defined under the CPRA), You have the right to direct Us to limit Our use of such information to the purposes permitted by law.
  • Right to Non-Discrimination: You have the right not to receive discriminatory treatment from Us for exercising any of Your CCPA/CPRA rights. We will not deny You goods or services, charge You different prices or rates, provide You with a different level or quality of service, or suggest that You may receive a different price or rate or a different level or quality of goods or services as a result of exercising Your privacy rights.

CCPA/CPRA — Sale and Sharing Disclosure (Preceding 12 Months): In the preceding twelve (12) months, We have not sold Personal Information for monetary consideration. However, We have shared certain identifiers — including cookie identifiers, IP addresses, and browsing activity data — with third-party advertising partners, including Google, for the purpose of cross-context behavioural advertising, as fully described in Section 5 of this Policy. Such sharing may constitute “sharing” of Personal Information under the CCPA/CPRA. You may opt out of this sharing at any time using the mechanisms set out in Section 5.3.

To exercise Your CCPA/CPRA rights, please contact Us using the details set out in Section 14 of this Policy. We may be required to verify Your identity before processing Your request. We will not charge a fee for processing Your request unless it is manifestly unfounded, repetitive, or excessive.

10.3 California Online Privacy Protection Act (CalOPPA)

In accordance with the requirements of the California Online Privacy Protection Act (CalOPPA), We make the following additional disclosures:

  • Users may visit Our Website anonymously. Once a user creates a registered Account, however, it is no longer possible to interact with Account-protected features anonymously.
  • This Privacy Policy is linked prominently from Our Website’s homepage and from other pages where Personal Data may be collected.
  • Users may request changes to their Personal Information by contacting Us at info@vantagepick.com.
  • Do Not Track (DNT) Signals: Our Website does not currently respond to Do Not Track signals transmitted by web browsers, as there is no industry-standard DNT protocol that We are required to honour. However, You may use the opt-out mechanisms described in Section 5.3 to exercise control over behavioural advertising.

10.4 How to Exercise Your Rights

To exercise any of the rights described in this Section, please submit a request to Us using one of the following methods:

Please provide sufficient information in Your request to allow Us to verify Your identity and to understand and respond to Your request. We will not charge a fee for processing or responding to Your request, unless the request is manifestly unfounded, excessive, or repetitive, in which case We reserve the right to charge a reasonable fee or to refuse to act on the request, as permitted by applicable law.

10.5 Right to Lodge a Complaint with a Supervisory Authority

If You are located in the United Kingdom and You believe that Our processing of Your Personal Data infringes applicable data protection law, You have the right to lodge a complaint with the United Kingdom Information Commissioner’s Office (ICO), which is the relevant supervisory authority. The ICO can be contacted at:

  • Website: https://ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address Your concerns before You contact the ICO, and We encourage You to reach out to Us in the first instance at info@vantagepick.com.

11. Security of Your Personal Data

The security of Your Personal Data is of paramount importance to Us. We implement and maintain a comprehensive set of technical, organisational, and administrative security measures designed to protect Your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

  • Transmission of data via encrypted protocols (including Transport Layer Security (TLS) / SSL encryption for all data in transit between Your browser and Our servers);
  • Secure storage of Personal Data in access-controlled environments with appropriate physical and logical security controls;
  • Restriction of access to Personal Data to authorised personnel on a strict need-to-know basis;
  • Regular security assessments, penetration testing, and vulnerability management;
  • Implementation of appropriate backup and disaster recovery procedures; and
  • Staff training on data protection and information security obligations.

While We take all reasonable and commercially practicable steps to protect Your Personal Data, You acknowledge that no method of transmission over the internet and no method of electronic storage is completely secure. We therefore cannot guarantee the absolute security of Your Personal Data. In the event of a Personal Data breach that is likely to result in a risk to Your rights and freedoms, We will notify You and the relevant supervisory authority in accordance with Our obligations under applicable law.

12. Children’s Privacy

The Service is not directed at, and is not intended for use by, persons under the age of sixteen (16) years. We do not knowingly collect, process, or store Personal Data from children under the age of sixteen (16). If You are a parent or legal guardian and You become aware or believe that Your child under the age of sixteen (16) has provided Us with Personal Data without Your consent, please contact Us immediately at info@vantagepick.com so that We may take appropriate steps to investigate and, where applicable, delete the relevant data from Our records.

If We become aware that We have inadvertently collected Personal Data from a child under the age of sixteen (16) without verifiable parental consent, We will take immediate steps to delete that information from Our systems. The Company does not knowingly use the Personal Data of children under sixteen (16) for any commercial, advertising, or profiling purpose.

13. Links to Third-Party Websites and Services

Our Service may contain links, references, embedded content, widgets, and functionality provided by third-party websites, applications, and online services. The inclusion of such links or functionality does not constitute an endorsement or recommendation by the Company of those third-party services, or of the privacy practices or content of those services.

When You click on a link to a third-party website or interact with third-party embedded content, You may be redirected to or interact with a service that is entirely outside Our control. We have no responsibility for, and accept no liability in connection with, the content, privacy policies, data collection practices, security measures, or terms of use of any third-party website or service. We strongly encourage You to review the privacy policy of every website You visit and every service You use.

14. Changes to This Privacy Policy

We reserve the right to update, amend, or revise this Privacy Policy at any time, at Our sole discretion, to reflect changes in applicable law, changes in Our data processing practices, changes in the Service, or for any other legitimate operational or legal reason. When We make changes to this Policy, We will update the “Last Updated” date at the top of the document.

Where changes are material — meaning changes that significantly affect Your rights, Our obligations, or the way in which We process Your Personal Data — We will take reasonable steps to notify You in advance of those changes taking effect. Such notification may be provided by posting a prominent notice on the Service prior to the change becoming effective, by sending an email to the address associated with Your Account, or by any other method reasonably calculated to bring the change to Your attention.

You are encouraged to review this Privacy Policy periodically to stay informed of any updates. Your continued use of the Service after any revised Privacy Policy has been posted on the Service (and, in the case of material changes, after the notice period described above) constitutes Your acknowledgement of, and agreement to be bound by, the revised Policy. If You do not agree with any changes made to this Policy, You should discontinue Your use of the Service and, if applicable, close Your Account.

15. Contact Us

If You have any questions, concerns, or requests relating to this Privacy Policy, the manner in which We process Your Personal Data, Your data protection rights, or any other privacy-related matter, please do not hesitate to contact Us. We are committed to addressing all enquiries promptly and thoroughly.

Vantagepick
Digital Marketing & Business Growth
United Kingdom

We will endeavour to respond to all legitimate enquiries within a reasonable timeframe and, in the case of rights requests, within the timeframes required by applicable law. In any event, We will acknowledge receipt of Your request within five (5) business days.