Privacy & cookies
How Venda Group Limited collects, uses and protects your personal data, and the cookies this website uses. Written in plain English, because you should be able to read it without a lawyer.
Last updated 28 October 2026
1. Who we are
This website, www.venda.group, is run by Venda Group Limited, a company registered in England and Wales (company number 15524214) with its registered office at 128 City Road, London, EC1V 2NX.
Venda Group Limited is the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office (ICO).
If you have any questions about this policy or how we handle your data, email info@venda.group or call 01227 255 000.
2. What we collect
We only collect personal data that you give us, or that is needed to keep the website running. We do not buy data about you and we do not track you across other websites.
Information you give us
- Contact form — your name, company, phone number, email address, what you are interested in, roughly how many people are on your site, and your message.
- Fault report form — your name, phone number, email address, the site address or postcode, the machine type, and a description of the fault.
- Phone and email — whatever you tell us when you call or email, including your contact details and the details of your enquiry.
Information collected automatically
- Server logs — our hosting provider records standard technical information when you visit, such as your IP address, browser type, the pages you viewed and the time of your visit. This is used to keep the site secure and working, and is not used to identify you.
- Form submission metadata — when you send a form, the page it was sent from and the time of submission are recorded alongside your message.
We do not collect any special category data (such as health or ethnicity) and we ask you not to include it in messages to us.
3. How we use it
Under UK data protection law we need a lawful basis for each use of your data. These are ours:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry, quote for a machine or arrange a site visit | Taking steps at your request before entering a contract |
| Respond to a fault report and carry out a repair | Performance of a contract, or steps before one |
| Keep records of enquiries and work done | Legitimate interests — running our business and resolving any later queries |
| Keep the website secure and detect abuse or spam | Legitimate interests — protecting our systems |
| Meet legal and accounting obligations | Legal obligation |
| Send you marketing about our services (only if you have agreed) | Consent — you can withdraw it at any time |
We will not add you to a marketing list just because you contacted us. If we ever want to send you marketing, we will ask first, and every message will include a way to opt out.
4. Who we share it with
We never sell your data. We share it only with the suppliers we need to run the website and the business, and only as far as necessary:
- Netlify, Inc. — hosts this website and processes the forms on it. Form submissions are stored in our Netlify account and emailed to us. Netlify is based in the United States; transfers are covered by the UK Extension to the EU-US Data Privacy Framework and Netlify's data processing terms.
- Zoho Corporation — provides our business email, through which we receive and reply to your enquiries.
- Google LLC — supplies the fonts used on this site via Google Fonts. When a page loads, your browser requests the font files from Google, which means Google receives your IP address and browser details. Google states it does not use this to track or profile visitors.
- Our engineers and staff — who need your details to visit your site, deliver a machine or carry out a repair.
- Professional advisers and authorities — our accountants, insurers or legal advisers where needed, and regulators or law enforcement where the law requires it.
If you become a customer, your details will also be used within our own operating systems (such as our Vendalink portal) to manage your machine, takings and any commission owed to you. That use is covered by the agreement we sign with you.
5. How long we keep it
- Enquiries that do not lead to business — deleted 12 months after our last contact with you.
- Fault reports and repair records — kept for 6 years from the date of the work, to cover our warranty and any later dispute.
- Customer records — kept for the length of our agreement and 6 years afterwards, as required for tax and accounting.
- Server logs — retained by our hosting provider for a short rolling period (typically 30 days) and then deleted.
6. Your rights
Under the UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct anything that is wrong or incomplete.
- Erasure — ask us to delete your data, where we no longer have a reason to keep it.
- Restriction — ask us to stop using your data while a query is resolved.
- Objection — object to our use of your data where we rely on legitimate interests, and object to direct marketing at any time.
- Portability — receive the data you gave us in a common electronic format.
- Withdraw consent — where we rely on your consent, withdraw it at any time.
To use any of these rights, email info@venda.group. We will respond within one month and will not charge you, unless a request is clearly excessive. We may need to confirm your identity first.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
7. Cookies
Cookies are small files a website stores on your device. This site uses as few as possible, and nothing that tracks you across other websites.
| Name | Type | Purpose | Expires |
|---|---|---|---|
venda-consent | Essential (local storage) | Remembers the choice you made in the cookie banner so we do not ask again. | 12 months |
| Netlify security cookies | Essential | May be set briefly by our hosting provider to protect against automated abuse. They contain no personal information. | Session |
| Analytics cookies | Optional | We do not currently run analytics. If we add them in future, they will only load after you choose Accept all in the banner, and this table will be updated. | — |
Essential cookies do not need your consent because the site cannot work without them. Optional cookies are only ever set if you agree. You can change your choice at any time using the cookie settings link in the footer of every page, and you can clear or block cookies in your browser settings.
The video on our home page is hosted on our own site, not on YouTube or another third party, so watching it does not set any cookies.
8. Security
This site is served over HTTPS, so anything you send through a form is encrypted in transit. Form submissions are stored in a password-protected hosting account with two-factor authentication, and our email is likewise protected. Access is limited to the people who need it to deal with your enquiry.
No system is perfectly secure. If we ever became aware of a breach affecting your data, we would tell you and the ICO as the law requires.
9. Changes to this policy
We will update this page if our practices change. The date at the top shows when it was last revised. If a change is significant and you are an existing customer, we will tell you directly.
10. Contact us
Venda Group Limited128 City Road, London, EC1V 2NX
info@venda.group
01227 255 000