Privacy Policy

At VAM LABS LTD (“we”, “our”, “us”), your privacy matters to us. This Privacy Policy explains what information we collect when you use our website and customer portal, why we collect it, how we use it, and the choices you have. We are committed to being transparent and giving you control over your information.

When you visit our website, we may collect limited technical information and, with your consent, analytics data through Google Analytics 4 (GA4) to understand how our site is used and improve performance. These analytics cookies are managed through our Termly cookie banner, where you can choose to allow or decline them at any time.

When you sign into our portal, we collect only the information necessary to create and manage your account, provide secure access, and deliver the services you request. We do not sell your personal data, and we only share it with trusted providers under strict safeguards or when required by law.

This policy applies to both our website and portal. Please read it carefully so you understand how we handle your data and your rights under applicable privacy laws, including the UK GDPR and EU GDPR.

1. Information We Collect

We collect different types of information depending on how you interact with our services:

Website https://www.vamlabs.ai visitors (no login required):

Analytics data (Google Analytics 4): page views, device/browser type, approximate location, and similar usage metrics. GA4 does not log or store IP addresses. This data is only collected if you consent via our Termly cookie banner.
Technical logs: limited information automatically collected for site security and performance (e.g., request metadata).

Portal users https://portal.vamlabs.ai (login required):

Account information: name, email address, login credentials (stored securely in hashed form).
Usage data: activity within the portal required to deliver features and maintain security.
Support communications: messages or requests you send us.

2. How We Use Information

We use your information to:

Provide and operate our website and portal.
Manage user accounts and authentication.
Monitor and improve performance using GA4 analytics (with consent).
Keep our services secure and prevent fraud.
Respond to inquiries and provide customer support.
Comply with our legal obligations.

3. Legal Bases for Processing (GDPR/UK GDPR)

We process personal data under the following legal bases:

Contract: to create and manage portal accounts and provide requested services.
Consent: for analytics and non-essential cookies (managed through Termly).
Legitimate interests: for site security, fraud prevention, and service maintenance.
Legal obligation: when required to comply with law or regulation.

4. Cookies and Tracking

We use cookies and similar technologies to improve your experience. Essential cookies are always active. Analytics cookies (GA4) are only used if you give consent through our Termly cookie banner.

You can manage or withdraw your choices at any time by clicking the “Cookie Preferences” link in the banner or footer. For details, see our Cookie Policy.

5. Sharing Information

We may share information with:

Service providers who process data on our behalf (e.g., hosting, analytics).
Legal authorities when required by law.
Successor entities in case of a merger, acquisition, or business transfer.

Where data is transferred outside the UK/EEA (e.g., to Google in the US), we use safeguards such as Standard Contractual Clauses (SCCs) and the UK Addendum/IDTA.

6. Data Retention

We keep personal data only as long as necessary. GA4 user- and event-level data is retained for the period we configure in GA4 settings (typically 14 months). Other data (e.g., account info) is retained while you maintain an account and as required for legal or business purposes.

7. Your Rights

If you are located in the UK or EEA, you have the right to:

Access, correct, or delete your personal data.
Restrict or object to processing.
Receive a copy of your data in a portable format.
Withdraw consent at any time (does not affect past processing).

You may also lodge a complaint with your local data protection authority (in the UK, the ICO).

8. Children's Privacy

Our services are not directed to children under the digital age of consent (13 in the UK; up to 16 in some EEA countries). We do not knowingly collect information from children. If you believe we have, please contact us and we will delete it.

9. Security

We use appropriate technical and organisational measures to protect your data. No system is completely secure, but we take steps to prevent unauthorised access, use, or disclosure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Vam Labs LTD
7 ST Petersgate
Stockport
SK1 1EB
England

Email: privacy@vamlabs.ai