Legal
Privacy notice
This notice explains what Vanadyr (“we”, “us”) collects when you use vanadyr.com or apply to the Founding Design Partner Program, why we collect it, who handles it and what you can ask us to do. It is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR, the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE Personal Data Protection Law) and the California Consumer Privacy Act (CCPA), so it applies to you wherever you are.
Who we are
Vanadyr builds Vanadyr OS, software infrastructure for systematic investing. We operate from Dubai, United Arab Emirates. Vanadyr is the party responsible for your personal data under this notice (the “controller” in GDPR terms). The registered company details will be added here when incorporation completes.
For anything about your data, write to privacy@vanadyr.com.
What we collect
When you apply as a design partner, the form asks for your name, work email, firm, role, team size, your primary workflow pain, and an optional message. That is everything. We do not ask for financial details about you or your firm.
When you visit the site, our hosting provider, Cloudflare, processes the technical information any web request carries, such as your IP address, browser type and the pages requested, in order to serve the site and protect it from abuse. The application form also runs Cloudflare Turnstile, a check that tells apart people from automated scripts; it may store a small verification value in your browser for that purpose alone.
We run no analytics and set no tracking cookies. The site does not follow you around the web, build a profile of you or share your visit with advertisers. If that changes, this notice will say so before it does, and it will explain how to opt out.
Why we collect it
We collect your application details because you asked us to consider your team for the design partner program: to read your application, to reply, and, if we both decide to go ahead, to work with you. In GDPR terms this is the legitimate interest of running the program and the steps you asked us to take before any agreement.
We process technical visit data to keep the site available and secure, which is a legitimate interest of ours and, we think, of yours.
We do not use your details for marketing unless you have asked us to keep you informed, and you can withdraw that at any time by replying to any email from us.
Who handles it
Your application arrives in our email, which we run on Google Workspace. To get it there, and to send you a confirmation, we use two service providers who act on our instructions only:
- Cloudflare hosts vanadyr.com, runs the application form’s server code and provides the Turnstile check.
- Resend delivers the two emails: the application to us, and your confirmation to you.
None of these providers may use your details for their own purposes. We do not sell personal data and have not done so, and we do not share it with anyone else unless the law requires it.
Because these providers operate in the United States and the European Union, your details leave the country you are in. Where that is a transfer out of the EU or the UK, it is covered by the providers’ standard contractual clauses approved for that purpose.
How long we keep it
We keep application details for twelve months after our last contact with you, so that we can pick the conversation back up when the program opens further. If your team becomes a design partner, we keep the details for as long as we work together and for the period our agreement requires afterwards. If you ask us to delete your application sooner, we will, unless a legal obligation requires us to keep it.
Technical visit data held by Cloudflare is kept for the short periods described in Cloudflare’s own policies and is not retained by us.
Your rights
You can ask us, at privacy@vanadyr.com:
- to tell you what we hold about you and to give you a copy;
- to correct anything that is wrong;
- to delete your details;
- to stop or limit what we do with them, or to object to our processing;
- to receive the details you gave us in a portable form.
We will answer within one month. We will never treat you differently for exercising a right.
If you are in the EU or the UK, these rights come from the GDPR and the UK GDPR, and you may also complain to your national data protection authority; in the UK that is the Information Commissioner’s Office.
If you are in the UAE, the UAE Personal Data Protection Law gives you equivalent rights, and you may complain to the UAE Data Office.
If you are a California resident, the CCPA gives you the right to know what personal information we collect and how we use it, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as the CCPA defines those terms, and we have no financial incentive programs. Vanadyr may be below the thresholds at which the CCPA applies; we honour these rights regardless.
Children
vanadyr.com and the design partner program are for professionals and are not directed at anyone under 18. We do not knowingly collect details from children.
Changes to this notice
When we change how we handle personal data, we will update this page and the date at the top. Substantive changes, such as introducing analytics, will be explained here before they take effect.