Privacy Notice

This page contains the privacy notice for this website and explains what we use your personal information for.
Please contact us if you have any questions.


The Vault collects and uses your personal information (see below for definition) for various purposes.
EU and UK laws require us to tell you why and how we collect, use, share and protect your personal information.
Please read this notice carefully to understand what we do.


The types of personal information we collect and use depend on the services we provide to you (see below for more details).


We need to collect and use your personal information to run our everyday business. In the section below, we list:

  • the reasons we collect, use and share your personal information;
  • whether you can limit this collection and use.

Reasons we collect/use

What we collect/use

Do we share?

Can you limit this?

For your registration on the site Name, email address and if you’re over 18 years old No No – this is the strict minimum we need
For your use of the site Login details (email and password) No No – this is the strict minimum we need
To verify your identity Date of birth (sellers only) and address (buyers only) Yes – only with the identity agency No – this is the strict minimum we need
For payment purposes Your billing address, mobile number and PayPal account details Yes – only with PayPal No – this is the strict minimum we need
To create persona products (sellers only) Any data you upload. This can include sensitive information (see below for definition) if you consent to upload it. No Yes – you can refuse to upload data or certain types of data (opt-in)
To trade persona products (sellers only) The data you consented to upload and have analysed by us. Yes – anonymously and only with the data buyer Yes – you can refuse consent for trading each product (opt-in)

To limit collection/use:

Contact us.


Contact us.


To complain about our processing (collection and use) of your personal information:

  • Contact us;
  • Contact the Information Commissioner Office by visiting or calling them on 0303 123 1113 (outside the UK: +44 303 123 1113).

To complain about other matters, please contact us.

Who is providing this notice?

The Vault (see below for details).

Registration number: (forthcoming).

Visit the ICO website to search for our registration: (forthcoming).

What We Do

How does the Vault protect my personal information?

To protect your personal information from unauthorised access and use, we use security measures that comply with EU and UK laws. These measures include:

  • encryption;
  • computer safeguards;
  • secured files and buildings;
  • ompliance with ISO norms.

How does the Vault collect my personal information?

We collect your personal information, for example:

  • when you open an account with us;
  • to verify your identity;
  • when you send and/or receive payment;
  • when you upload your data on our website.

We do not collect your personal information from other companies.

Does the Vault share my personal information?

We do not:

  • share your personal information, unless we need to verify your identity, for example, for payment purposes;
  • share your name and identity with the buyers (sellers only);
  • sell your data for marketing purposes;
  • sell your data unless you have agreed to a trade (sellers only).

Can I limit all collection and usage?

It is your decision what and how much data you upload to the Vault. You can refuse to upload your data or certain types of data. After you have uploaded data to the Vault, you always have the right to request removal, unless you have agreed to trade the data.

It is your decision with whom you trade and what data you sell. You can refuse to trade your data before the start of a trade, but once you have accepted a trade you must deliver the data if it is successfully matched.

You can also cancel your registration with us.

You can modify your personal data at any time.

What happens when I limit the collection and use?

Your choice not to trade will:

  • mean potential buyers will not be able to access your data;
  • allow us to use the information for data analytics only (i.e. persona identification).

When you cancel your registration your data will be removed as soon as technically possible, except the data which you have sold and which is still under a Data Access Agreement. The data removed will be archived for a period of 3 years, thereafter (or sooner if necessary) it will be deleted.


Personal Information

Data Protection Act 1998 s.1(1) – transposing the European Directive 1995/46/EC:

“’personal data’ means data which relate to a living individual who can be identified – (a) from those data, or (b) from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller, and includes any expression of opinion about the individual and any indication of the intentions of the data controller or any other person in respect of the individual.”

This means, for example: your name, address, mobile number, credit card information.

Sensitive Personal Information

Data Protection Act 1998 s.2 – transposing the European Directive Article 8(1) 1995/46/EC:

“’sensitive personal data’ means personal data consisting of information as to – (a) the racial or ethnic origin of the data subject, (b) his political opinions, (c) his religious beliefs or beliefs of a similar nature, (d) whether he is a member of a trade union (within the meaning of the M1Trade Union and Labour Regulations (Consolidation) Act 1992), (e) his physical or mental health or condition, (f) his sexual life, (g) the commission or alleged commission by him of any offence, or (h) any proceeding for any offence committed or alleged to have been committed by him, the disposal of such proceedings or the sentence of any court in such proceedings.”

The Vault (also Digital Vault)

The company that owns and operates the data trading exchange website ( with registered office at (forthcoming) and registration number (forthcoming).

Your Consent

European Directive Article 2(h) 1995/46/EC:

...shall mean any freely given specific and informed indication of his wishes by which the data subject [you] signifies his agreement to personal data relating to him being processed.”

Other Important Information

You can request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you, please contact us.

This notice was last updated on 14th April, 2016.