Privacy Notice

ASRE HOLDINGS, trading as VendorReadyHQ, is the data controller for personal data processed through the Service. This notice explains what we collect, why, and what rights you have.

What we collect and why

• Account data (name, email, job title, organization name, login credentials) — to create and secure your account and workspace. Legal basis: performance of our contract with you.
• Workspace content (vendor records, contacts, documents metadata, expiration dates, notes) — to provide the Service you asked for. Legal basis: contract.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Usage and device data (IP address, browser, pages viewed, error logs) — for security, fraud prevention, reliability and product improvement. Legal basis: legitimate interests.
• Email delivery data for renewal reminders you configure. Legal basis: contract.

Who we share data with

• Service providers and subprocessors: hosting and database, email delivery, and error monitoring.
• Paddle, our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We do not sell personal data.

Retention

We keep account and workspace data for as long as your account is active and for up to 30 days after closure, after which it is deleted or anonymised, except where we must retain records for legal, tax or accounting purposes.

Your rights

Subject to your local law, you can request access to your data, correction, deletion, restriction, portability, or object to processing, and withdraw consent where processing relies on it. Contact support@vendorreadyhq.com and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority. Where data is transferred outside the UK/EEA we rely on adequacy decisions or standard contractual clauses.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-organization data isolation enforced at the database level.

Cookies

We use essential cookies and local storage to keep you signed in and to hold an unsaved Health Check result in your browser. We do not use advertising cookies. You can clear these at any time in your browser settings.

Contact

Privacy questions: support@vendorreadyhq.com.