Privacy Policy

Last updated: 17 July 2026 · Governing law: England and Wales

1. Introduction and Controller Details

This Privacy Policy explains how VINED LTD ("VINED LTD", "we", "us", or "our") collects, uses, stores, shares, and otherwise processes personal data when you visit https://vined.mobi (the "Site"), submit a private viewing request or registry intake form, communicate with our London registry desk, or otherwise engage with our IT consulting and software-related corporate services. VINED LTD is a company operating from Suite 130 4 Montpelier Street, LONDON, SW7 1EE United Kingdom. For privacy enquiries, contact contact@vined.mobi or telephone +44 7589 334422.

VINED LTD provides IT consulting services, computer systems design and related services, software development services, SaaS solutions, enterprise software solutions, cloud software platforms support, web application development, mobile application development, systems integration services, database development and management, API development and integration, cybersecurity solutions, digital transformation services, application licensing services, and related advisory work for organisations in the United Kingdom and, where agreed, internationally. This Policy is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the Privacy and Electronic Communications Regulations (PECR).

By using the Site or providing personal data to us, you acknowledge that you have read this Privacy Policy. If you do not agree with the processing described here, please do not submit personal data through the Site. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

This Policy applies to personal data relating to identifiable individuals, including website visitors, prospective clients, client contacts, suppliers, and other correspondents. It does not apply to anonymised data that cannot reasonably be linked back to an individual. Where we process personal data on behalf of a client under a services agreement, that processing is governed primarily by the relevant contract and our role as processor or independent controller as specified in writing.

2. Scope, Territorial Application and Audience

This Privacy Policy applies to processing connected with the Site and our United Kingdom operations. Our primary establishment for data protection purposes is in England. Where we engage with individuals located in the European Economic Area or other jurisdictions, we apply UK GDPR standards as a baseline and implement additional safeguards as required for international transfers.

The Site is intended for business audiences evaluating corporate IT consulting and software services. It is not directed at children. We do not knowingly collect personal data from individuals under sixteen years of age. If you believe a child has provided personal data to us, please contact contact@vined.mobi so that we can delete the information where appropriate.

References in this Policy to "you" mean the individual whose personal data we process. Where you provide personal data about another person, such as a colleague named in a project enquiry, you must ensure you have a lawful basis to share that information and that the individual is aware of this Policy where required.

3. Categories of Personal Data We Collect

We collect personal data that is necessary to operate the Site, respond to enquiries, deliver services, and meet legal obligations. The categories below are illustrative and may apply differently depending on how you interact with VINED LTD.

3.1 Identity and contact data

This includes your name, job title, employer or organisation name, business email address, telephone number, postal address where provided, and similar identifiers used to communicate with you. When you complete the private request form, we collect the name, email address, and message content you submit.

3.2 Enquiry and engagement data

This includes the content of your messages, project descriptions, technical requirements, preferred timelines, meeting notes, correspondence history, and any documents you choose to share. It may also include classification notes we create internally to organise your enquiry into service lots for review.

3.3 Technical and usage data

When you visit the Site, we may collect Internet Protocol address, browser type and version, device type, operating system, referring URLs, pages viewed, time and date of visits, approximate location derived from IP address at city or regional level, and similar diagnostic information. Some of this data is collected through cookies or similar technologies as described in our Cookie Policy.

3.4 Contract and billing data

If you become a client, we may process contractual details, authorised signatory information, billing contacts, purchase order references, invoices, payment status, and related commercial records. Payment card data, if ever processed, would be handled through regulated payment providers and not stored in full on our Site.

3.5 Compliance and security data

We may process records of consent, preference management choices, access logs for systems we operate, incident reports, and information required to investigate misuse, fraud, or security events affecting the Site or our services.

4. Sources of Personal Data

We obtain personal data directly from you when you submit forms, email contact@vined.mobi, call +44 7589 334422, attend meetings, or otherwise communicate with us. We also obtain data automatically through the Site's technical systems and, where enabled, analytics tools.

We may receive personal data from your colleagues or authorised representatives, from professional advisers, from publicly available business sources such as company websites or professional directories, and from service providers who support hosting, communications, or security. We do not purchase marketing lists of individuals for indiscriminate outreach.

If we receive personal data from a third party, we will take reasonable steps to ensure the source is legitimate and that individuals are informed of processing where required by law, unless an exemption applies.

5. Purposes and Legal Bases for Processing

Under UK GDPR, we process personal data only where a lawful basis applies. The primary bases we rely upon are described below. More than one basis may apply to the same processing activity depending on context.

5.1 Responding to enquiries and providing services

We process identity, contact, and enquiry data to acknowledge private viewing requests, classify service needs, prepare proposals, negotiate contracts, and deliver IT consulting and software services. Legal bases include steps taken at your request prior to entering a contract, performance of a contract, and our legitimate interests in operating a selective professional services business.

5.2 Operating and securing the Site

We process technical data to host the Site, maintain availability, diagnose errors, prevent abuse, and improve stability. This processing is based on legitimate interests in securing digital assets and providing a reliable information resource about VINED LTD.

5.3 Communications and relationship management

We may send service-related messages about your enquiry or engagement. Where we send electronic marketing to individuals, we comply with PECR and obtain consent where required, or rely on soft opt-in rules for existing clients where applicable. You may object to marketing at any time by contacting contact@vined.mobi.

5.4 Legal and regulatory compliance

We process personal data where necessary to comply with legal obligations, including accounting and tax requirements, responding to lawful requests from authorities, and maintaining records required under English law.

5.5 Establishing, exercising or defending legal claims

We may retain and use personal data where necessary for legal claims, dispute resolution, or insurance purposes, based on legitimate interests and, where relevant, legal obligation.

6. Legitimate Interests Balancing

Where we rely on legitimate interests, we assess that our interests are not overridden by your interests or fundamental rights and freedoms. Examples include maintaining a professional catalogue-style presentation of our services, preventing Site abuse, improving enquiry handling quality, and keeping limited business development records of organisations that have expressed interest in our capabilities.

You have the right to object to processing based on legitimate interests. If you object, we will consider your particular situation and stop or restrict processing unless we demonstrate compelling legitimate grounds or need the data for legal claims.

7. Cookies and Similar Technologies

The Site may use cookies and similar technologies to support essential functions and, where consented, analytics or preference features. Detailed information about cookie categories, purposes, retention, and control mechanisms is set out in our Cookie Policy. Consent tools, where implemented, allow you to manage non-essential cookies. Essential cookies required for security or basic operation may be set without consent where permitted by PECR.

8. Sharing Personal Data

We do not sell personal data. We may share personal data with trusted categories of recipients where necessary for the purposes described in this Policy.

Hosting, infrastructure, and content delivery providers supporting vined.mobi.
Email, telephony, and collaboration tools used by the London registry desk.
Professional advisers such as lawyers, accountants, and insurers under confidentiality obligations.
Analytics or security vendors where configured and, for non-essential tools, where consent is obtained.
Regulators, courts, or law enforcement where disclosure is required or permitted by law.
Successor entities in connection with a merger, acquisition, or corporate reorganisation, subject to appropriate safeguards.

Where processors handle personal data on our behalf, we impose contractual terms requiring appropriate security, confidentiality, and processing only on documented instructions, consistent with UK GDPR Article 28 standards.

9. International Transfers

VINED LTD is based in the United Kingdom. Some service providers may process data in other countries. Where personal data is transferred outside the UK to a country not covered by UK adequacy regulations, we implement appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or other lawful transfer mechanisms, together with transfer risk assessments where required.

You may request information about relevant safeguards by contacting contact@vined.mobi, subject to redactions necessary to protect confidential commercial information.

10. Retention

We retain personal data only for as long as necessary for the purposes collected, including legal, accounting, and reporting requirements. Enquiry records that do not convert into a contract are typically retained for a limited period to manage follow-up and defend against disputes, then deleted or anonymised. Client contract records are retained for the life of the engagement and thereafter for statutory limitation and accounting periods under English law.

Technical logs are retained for shorter operational periods unless needed for security investigations. Cookie retention periods are described in the Cookie Policy. When retention ends, we securely delete or irreversibly anonymise personal data.

11. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Measures may include access controls, encryption in transit where supported, least-privilege principles for staff access, vendor due diligence, and staff awareness of confidentiality obligations.

No method of transmission over the Internet or electronic storage is completely secure. While we work to protect personal data, we cannot guarantee absolute security. Please use secure channels when sharing sensitive technical or commercial information and avoid including unnecessary special category data in website forms.

12. Your Rights under UK GDPR

Subject to legal limitations and exemptions, you have the following rights regarding your personal data:

Right of access: to obtain confirmation of processing and a copy of your personal data.
Right to rectification: to correct inaccurate or incomplete personal data.
Right to erasure: to request deletion in certain circumstances.
Right to restrict processing: to limit how we use personal data in certain cases.
Right to data portability: to receive certain data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
Right to object: to object to processing based on legitimate interests and to direct marketing.
Right to withdraw consent: where processing is based on consent.
Right to lodge a complaint: with the Information Commissioner's Office (ICO) in the United Kingdom.

To exercise these rights, contact contact@vined.mobi with sufficient information to verify your identity and locate your data. We will respond within one month of receipt, extendable by two further months for complex requests where permitted, with notice of any extension. The ICO can be contacted at ico.org.uk. We encourage you to contact us first so we can address concerns directly.

13. Automated Decision-Making

VINED LTD does not use automated decision-making, including profiling, that produces legal or similarly significant effects on individuals in connection with the Site. Enquiry classification into internal service lots is a human-assisted organisational process and does not constitute solely automated decision-making under UK GDPR.

14. Third-Party Links and Embedded Content

The Site may include links to third-party websites or embedded maps and similar content. Those third parties operate their own privacy practices. We are not responsible for their content or processing. The Google Maps embed used to display Suite 130 4 Montpelier Street, LONDON, SW7 1EE United Kingdom may involve processing by Google under its own terms and privacy notice. Review third-party policies before interacting with external services.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The "Last updated" date at the top of this page will be revised accordingly. Material changes may be highlighted on the Site or communicated to active contacts where appropriate. Continued use of the Site after updates constitutes awareness of the revised Policy to the extent permitted by law.

16. Contact for Privacy Matters

For privacy questions, requests, or complaints relating to VINED LTD processing of personal data, please contact: VINED LTD, Suite 130 4 Montpelier Street, LONDON, SW7 1EE United Kingdom. Email: contact@vined.mobi. Telephone: +44 7589 334422. Website: https://vined.mobi.

If you are corresponding about a client engagement where VINED LTD acts as a processor, please also notify your organisation's contract owner so instructions can be coordinated appropriately.

17. Detailed Processing for IT Consulting Enquiries

When you request a private review of IT consulting services or digital transformation services, we process the narrative you provide to understand starting conditions, constraints, and desired confirmed results. This may include descriptions of current software estates, cloud software platforms, integration challenges, cybersecurity concerns, and organisational stakeholders. We use this information solely to evaluate fit, prepare a response, and, if engagement proceeds, to open a formal services relationship. Sensitive commercial information should be shared judiciously at enquiry stage; detailed system credentials should not be submitted through the public form.

VINED LTD documents the above processing category in internal accountability materials and reviews it when service offerings, vendors, or legal requirements change. Questions about this category may be directed to contact@vined.mobi. Our postal address remains Suite 130 4 Montpelier Street, LONDON, SW7 1EE United Kingdom, and our telephone number is +44 7589 334422.

Nothing in this section creates rights beyond those provided by applicable law. Where an exemption, limitation, or competing legal obligation applies, we will explain our position when responding to a rights request to the extent permitted.

18. Processing Related to Software Development Services

Where enquiries relate to custom computer programming services, web application development, or mobile application development, personal data in tickets, repositories, or design files may later be processed under contract. At Site enquiry stage, limit submissions to high-level requirements. Once contracted, processing of personal data within client systems is governed by the services agreement, statements of work, and any data processing addendum. VINED LTD expects clients to minimise personal data in development environments and to anonymise or pseudonymise where feasible.

19. Processing Related to Systems Integration and APIs

Systems integration services and API development and integration often involve technical metadata and, potentially, personal data flowing between systems. During pre-contract discussions, we may collect diagrams or interface lists that incidentally include personal data fields. We treat such materials as confidential business information and restrict access to personnel with a need to know. Clients remain responsible for ensuring they have lawful bases to share any personal data contained in those materials.

20. Database and Information Estate Discussions

Database development and management discussions may reference data categories, retention rules, and access models. We process such information to advise on architecture and controls. We do not use client database extracts obtained during sales conversations for any secondary purpose. If sample data is required for assessment, we request synthetic or redacted datasets wherever practicable.

21. Cybersecurity Solutions Context

Cybersecurity solutions engagements may involve vulnerability descriptions, incident summaries, or control inventories. Personal data appearing in security artefacts is handled with heightened confidentiality. Do not send passwords, private keys, or live production secrets through the Site form. Use secure transfer methods agreed with the registry desk after initial contact.

22. Records of Processing Activities

VINED LTD maintains internal records of processing activities proportionate to our organisation size and risk profile, documenting purposes, data categories, recipients, retention, and safeguards. These records support accountability under UK GDPR and may be updated as our service catalogue and tooling evolve.

23. Data Protection by Design and Default

We apply data protection by design and by default principles when configuring the Site and internal enquiry workflows. This includes collecting only fields necessary for private request intake, limiting access to enquiry mailboxes, and avoiding unnecessary free-text capture of special category data. Forms are designed for business enquiries rather than consumer profiling.

24. Staff Access and Confidentiality

Personal data accessible to VINED LTD personnel is limited to those involved in responding to enquiries, delivering services, finance, or compliance. Staff are expected to maintain confidentiality and use company-approved systems. Misuse of personal data is subject to internal disciplinary measures and, where applicable, legal consequences.

25. Vendor Management

Before engaging processors that handle personal data, we assess their security posture and contractual readiness. We prefer vendors that provide UK or adequately protected processing locations and transparent subprocessors lists. Periodic reviews are conducted for material vendors supporting the Site or client communications.

26. Breach Notification

In the event of a personal data breach likely to result in a risk to individuals' rights and freedoms, we will notify the ICO without undue delay and, where feasible, within seventy-two hours of becoming aware, unless the breach is unlikely to result in such risk. Where a breach is likely to result in a high risk to individuals, we will also communicate to affected individuals without undue delay, describing the nature of the breach and recommended protective steps, unless a legal exception applies.

27. Special Category and Criminal Offence Data

We do not seek special category data or criminal offence data through the Site. Please do not include health information, political opinions, religious beliefs, biometric identifiers, or similar sensitive data in the message field. If such data is required for a specialised engagement, it will be handled under explicit contractual instructions and heightened safeguards.

28. Marketing Preferences and Suppression

If you opt out of marketing communications, we retain a suppression record limited to what is necessary to honour your preference. Service messages relating to an active engagement or legal notice may still be sent where appropriate.

29. Accuracy and Your Responsibilities

Please help us keep personal data accurate by informing us of changes to your contact details. If you submit information on behalf of an organisation, ensure it is current and that you are authorised to share it. Inaccurate contact data may delay responses to private requests.

30. Relationship to Other Legal Documents

This Privacy Policy should be read together with our Cookie Policy, Terms of Service, and Terms and Conditions. In the event of a conflict relating specifically to personal data rights under UK GDPR, this Privacy Policy and applicable law prevail over general website terms to the extent of the conflict.

31. Language and Interpretation

This Privacy Policy is issued in English, the language of the Site and our United Kingdom operations. Headings are for convenience only and do not affect interpretation. References to statutes include amendments and successor legislation.

32. Practical Examples of Use

Example one: a technology director submits a private request describing a SaaS consolidation need. We use the name, email, and message to reply, schedule a call, and prepare a high-level service lot outline. Example two: a visitor browses service pages without submitting a form. We may process limited technical logs for security. Example three: a contracted client shares project contacts. We process those contacts to deliver software development services under the agreement.

33. No Sale of Data and No Marketplace Use

VINED LTD does not operate a consumer marketplace, auction platform, or advertising brokerage in personal data. Catalogue and registry metaphors used on the Site are visual and structural only and do not imply sale of personal profiles or bidding on personal information.

34. Accessibility of Privacy Information

We aim to present privacy information in clear language. If you require this Policy in an alternative format due to accessibility needs, contact contact@vined.mobi and we will take reasonable steps to assist.

35. Supervisory Authority and Cross-Border Complaints

The lead supervisory authority for VINED LTD is the UK Information Commissioner's Office. Individuals in other jurisdictions may have rights to complain to their local authority where applicable law provides. We will cooperate with lawful regulatory processes.