1. Who is responsible for your data
Vahue is the controller of personal data described in this notice. You can contact us at human@vahue.ai with privacy questions or requests.
2. Data we collect
- Enquiry data: name, email, company, headcount, areas of interest, and the message you send.
- Recruitment data: name, email, phone number, portfolio or LinkedIn URL, CV, application message, and related correspondence.
- Event or waitlist data: the contact and preference information you choose to provide.
- Technical data: security signals, request and error logs, device/browser information, referring page, and aggregated website usage data.
- Scheduling data: information you provide to Calendly after following a booking link. Calendly also processes that information under its own privacy notice.
3. Why we use personal data
- To respond to enquiries, prepare proposals, and take steps requested before entering a contract.
- To deliver and administer services under a contract.
- To review applications, communicate with candidates, and manage recruitment.
- To secure, operate, troubleshoot, and improve the website and our business systems.
- To send marketing or event updates where you have consented, with an unsubscribe option in every relevant message.
- To meet legal, accounting, fraud-prevention, and regulatory obligations.
Depending on the context, our lawful basis is taking steps at your request before a contract, performing a contract, our legitimate interests in running and securing Vahue, your consent, or compliance with a legal obligation. We do not use consent where another lawful basis is more appropriate.
4. Who receives personal data
We use service providers only where needed to run the website and communicate with you. These currently include:
- Vercel for hosting, privacy-focused web analytics, security checks, and private CV storage.
- EmailJS for transmitting website forms to Vahue.
- Calendly when you choose to book a call.
- Professional advisers, authorities, or counterparties where required by law or a legitimate corporate transaction.
We do not sell personal data.
5. International transfers
Some providers may process data outside the United Kingdom. Where UK data protection law requires it, we rely on an adequacy regulation or approved contractual safeguards and take proportionate steps to assess the transfer.
6. Retention
We keep enquiry and business correspondence only for as long as it is useful for the relationship and our legal records, normally no longer than 24 months after the last meaningful contact unless a contract or law requires longer. Unsuccessful applicant data is normally kept for up to 12 months unless you ask us to delete it sooner or consent to a longer talent-pool period. Private CV access links expire after seven days; the link expiry is separate from the underlying retention period. Provider security and analytics records follow the relevant provider retention settings.
7. Your rights
Subject to applicable law, you may ask for access, correction, deletion, restriction, portability, or object to certain processing. You can withdraw consent at any time without affecting earlier lawful processing. Email human@vahue.ai; we may need to verify your identity before acting on a request.
You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
8. Security and automated decisions
We use access controls, private file links, limited retention, bot protection, and other proportionate safeguards. No internet service can guarantee absolute security. Vahue does not make solely automated decisions through this website that produce legal or similarly significant effects for visitors or applicants.
9. Changes
We may update this notice when our services, providers, or legal obligations change. The date above identifies the current version.