Privacy Policy

1. Introduction

ResellerVault is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

2. Data We Collect

When you subscribe:

• Full name
• Email address
• Payment information (processed by Stripe � we do not store card details)
• Billing address

When you use the Directory:

• Login activity and session data
• Search queries and filters used
• Supplier profiles viewed
• Reports submitted

Automatically collected:

• IP address
• Browser type and device information
• Cookies (see Section 7)

3. How We Use Your Data

We use your data to:

• Process and manage your subscription
• Provide access to the ResellerVault Directory
• Send service-related emails (receipts, renewal reminders, updates)
• Investigate supplier reports you submit
• Improve the Directory based on usage patterns
• Comply with legal obligations

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract � to fulfil your subscription
• Legitimate interests � to improve our service and prevent fraud
• Legal obligation � to comply with UK law including tax obligations

5. Data Sharing

We do not sell your personal data to third parties.

We share data only with:

• Stripe � for payment processing (see stripe.com/gb/privacy)
• Hosting providers � for website operation (data stored in the UK/EEA)
• HMRC � where required by law for tax purposes

6. Data Retention

We retain your personal data for:

• Active subscribers � for the duration of your subscription
• Cancelled subscribers � for 6 years after cancellation (for tax and legal purposes)
• Payment records � for 6 years (HMRC requirement)

7. Cookies

ResellerVault uses essential cookies only to:

• Keep you logged in during your session
• Remember your filter preferences

We do not use advertising or tracking cookies.

8. Your Rights Under UK GDPR

You have the right to:

• Access � request a copy of your personal data
• Rectification � correct inaccurate data
• Erasure � request deletion of your data (subject to legal retention requirements)
• Restriction � limit how we process your data
• Portability � receive your data in a portable format
• Object � object to processing based on legitimate interests

To exercise any of these rights, email: hello@resellervault.co.uk

We will respond within 30 days.

9. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of ResellerVault after changes constitutes acceptance.

11. Contact