Who we are and what this covers
This policy explains how [VaultRazer legal entity name] (“VaultRazer”, “we”, “us”), [Registered office address], collects and uses personal data when you visit this website, contact us, or do business with us.
When customers use VaultRazer software and the VaultRazer Console, they decide what device and erasure data is processed. For that data we act as a processor on the customer’s behalf, under the customer’s agreement and data processing terms with us. See Data in the VaultRazer products.
Data we collect
Information you give us
- Demo, trial and quote requests: your name, work email, company, organization type, device volumes, the topic you’re interested in, your message, and your consent to be contacted.
- Email and calls: whatever you choose to share when you write to sales@vaultrazer.com or speak with our team.
- Customers and partners: business contact, billing and contract details needed to provide licenses, support and invoices.
Information collected automatically
- Server logs: IP address, browser type, pages requested, referring page and timestamps, used to run, secure and troubleshoot the website.
- Fonts: this website loads fonts from Google Fonts, so your browser sends your IP address and browser details to Google when you visit. See Google’s privacy policy for how Google handles this data.
How we use it
- To reply to your request, arrange demos and trials, and send quotes. Legal basis: steps you ask us to take before a contract, and our legitimate interest in answering business enquiries.
- To provide, support and bill for VaultRazer products. Legal basis: performance of our contract.
- To keep the website and our systems secure and working. Legal basis: legitimate interests.
- To send product news to business contacts, which you can opt out of at any time. Legal basis: consent or legitimate interests, as local law requires.
- To meet legal, tax and accounting obligations. Legal basis: legal obligation.
Data in the VaultRazer products
Erasure certificates and reports can include asset tags, device and drive serial numbers, hardware details, site names, operator names and timestamps. Customers control this data. They choose whether the Console runs in the VaultRazer cloud, on their own servers or in an air-gapped environment, and they decide how long records are kept.
VaultRazer erasure software is designed to destroy the data stored on the media being erased. We do not access, copy or keep the contents of the drives our software erases.
If you are an employee or end user of one of our customers, please contact that organization first about your data. We will help them answer your request.
How long we keep it
We keep enquiry and sales records for as long as needed to respond and follow up, and then for up to 24 months unless you become a customer. Customer and billing records are kept for the life of the relationship and for the period that tax and accounting law requires. Server logs are kept for a short period for security purposes. When data is no longer needed, we delete or anonymize it.
International transfers
Our team and service providers may process data in countries other than yours. When personal data leaves the European Economic Area, the United Kingdom or another region with transfer rules, we use safeguards that the law recognizes, such as standard contractual clauses.
How we protect it
We use technical and organizational measures appropriate to the risk, including access controls and encryption in transit. No system is perfectly secure, so if we learn of a breach that affects your personal data we will notify you and the authorities as the law requires. You can read more on our Security page.
Your rights
Depending on where you live, including under the GDPR, the UK GDPR, India’s Digital Personal Data Protection Act 2023 and California privacy law, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data or complete incomplete data;
- have your data erased;
- object to or restrict certain processing, including direct marketing;
- withdraw consent at any time, without affecting earlier processing;
- receive your data in a portable format;
- nominate someone to exercise your rights if you die or become incapacitated, where the law provides for this;
- complain to your local data protection authority.
To exercise these rights, email privacy@vaultrazer.com. We will verify your request and reply within the time the law requires. We will not treat you differently for exercising your rights.
Children
Our website and products are for businesses and are not directed at children. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy as our services or the law change. We will post the new version here with a new “last updated” date and, for significant changes, tell customers directly.
Contact us
Questions or requests about privacy: privacy@vaultrazer.com. Postal address: [VaultRazer legal entity name], [Registered office address].