Last updated: 2 May 2026
This privacy policy explains how VendAhead Ltd ("VendAhead", "we", "us", "our") collects, uses, and protects your personal data when you interact with our website and services.
We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
VendAhead Ltd is the data controller for the personal data we collect about you.
If you have any questions about this policy or how we handle your data, contact us at the email address above.
The data we collect depends on how you interact with VendAhead.
If you join our pre-launch waiting list, we collect:
When the VendAhead platform launches, registered users and customers will provide additional data including:
Payment card details are handled directly by Stripe and never stored on VendAhead's servers. We only receive transaction metadata (such as amount, status, and a token reference).
Vendors and venue partners using the platform will provide business contact information, banking details for payouts (handled via Stripe Connect), and operational data necessary to run the service.
When you visit our website we may automatically collect limited technical data such as IP address, browser type, and pages visited. This is used for security, fraud prevention, and basic service operation.
| Purpose | Lawful basis |
|---|---|
| Adding you to the waiting list and notifying you when VendAhead launches | Consent (UK GDPR Article 6(1)(a)) |
| Sending you ongoing marketing updates beyond the launch announcement | Consent (UK GDPR Article 6(1)(a) and PECR Regulation 22) |
| Providing the VendAhead platform and processing your orders (when live) | Contract (UK GDPR Article 6(1)(b)) |
| Processing payments via Stripe | Contract (UK GDPR Article 6(1)(b)) |
| Fraud prevention, security, and platform integrity | Legitimate interests (UK GDPR Article 6(1)(f)) |
| Meeting our legal and accounting obligations | Legal obligation (UK GDPR Article 6(1)(c)) |
You can withdraw consent at any time by emailing tyler@vendahead.co.uk or by using the unsubscribe link in any marketing email.
We do not sell your data. We share it only with the following processors and parties, and only where necessary:
We do not share your data with any other third parties for marketing or analytics purposes.
Most of your data stays within the United Kingdom, as our hosting is in London.
Stripe is a US-headquartered company and some payment data may be processed outside the UK. Where this happens, the transfer is protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, which Stripe operates under as part of their published data protection terms.
| Data type | Retention period |
|---|---|
| Waiting list signups (without marketing opt-in) | Until 12 months after VendAhead launches, or until you unsubscribe, whichever comes first |
| Marketing list signups | Until you unsubscribe. Reviewed every 24 months and inactive subscribers removed. |
| Transactional records (orders, payments) | 6 years from the date of the transaction, to meet UK accounting and tax requirements |
| Account data for active platform users | For as long as your account is active, plus 6 years for any associated transactional records |
| Technical and security logs | Up to 12 months |
When the retention period ends, we delete or anonymise your data.
Under UK data protection law you have the following rights:
To exercise any of these rights, email tyler@vendahead.co.uk. We will respond within one month.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
We would appreciate the chance to address your concerns first, so please consider contacting us before approaching the ICO.
Our website currently uses only essential cookies required for the site to function (such as session and security cookies). We do not currently run analytics or advertising cookies.
If this changes in the future, we will update this policy and provide a cookie banner allowing you to manage your preferences before any non-essential cookies are set.
We take reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), secure password storage, restricted internal access, and regular review of our infrastructure.
No system can be guaranteed completely secure. If we ever become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected users directly.
We may update this policy from time to time. The date at the top of this page reflects the most recent version. For significant changes (such as new types of data collection or new processors), we will notify waiting list subscribers and active users by email.
For any questions about this policy or your personal data:
Email: tyler@vendahead.co.uk
Post: VendAhead Ltd, 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE