Privacy Policy
Last updated: 09 January 2026
This policy explains what data VendCura collects, why we collect it, how we protect it, and how long we keep it. VendCura is built with a privacy-first approach: we aim to collect the minimum needed to provide the service and to delete uploaded documents quickly.
Key points
- - Uploaded RAMS documents are automatically deleted within 21 days (often sooner once processing is complete).
- - Your downloadable TXT report includes: summary, risks found, mobilisation blockers, risk score/band, and recommendations.
- - Your documents are accessible only to your account — we do not share them with other customers.
- - We do not sell your data.
- - We do not use your uploaded documents to train models.
- - We host and process data in the UK and do not transfer it outside the UK.
- - You can request access, correction, or deletion of personal data.
What data we collect
- Account data: your email address and authentication details needed to provide access.
- Uploaded documents: RAMS files you upload for analysis (these may include personal data if included in the document).
- Usage and technical data: basic logs and events used to run the service reliably and securely (e.g., sign-in events, error logs, abuse prevention).
- Billing data (if applicable): payment status and invoices/receipts required for accounting.
How we use data
- - To provide the service (analyse documents and generate your TXT report).
- - To operate, secure, and maintain the platform (prevent abuse, troubleshoot issues).
- - To communicate with you about your account and support requests.
- - To meet legal/accounting obligations where required.
VendCura is designed for RAMS risk reduction and review support. It does not guarantee compliance or acceptance by third parties.
Lawful bases for processing
- Contract: processing needed to provide the service you request.
- Legitimate interests: running and securing the service (e.g., preventing fraud/abuse, improving reliability).
- Legal obligation: record keeping for tax/accounting where required.
Retention and deletion
We keep data only as long as needed to provide the service and meet legal requirements. Our default approach is to minimise retention of uploaded documents.
Uploaded RAMS documents
Deleted automatically within 21 days of upload (often sooner once processing is complete).
Processing artefacts
Temporary extracted text and processing files are kept only as needed for processing and then deleted.
Reports / outputs
Reports are provided for download as part of the service. We encourage customers to download and store reports internally once generated.
Account and billing
Account data is kept while your account is active. Billing records may be kept longer where required for accounting/tax purposes.
If you need deletion sooner, contact us and we’ll assist.
Your control of your data
Your uploaded documents and outputs are under your control. You can request deletion of your data at any time. We also automatically delete uploaded RAMS documents within the retention period described above.
Security
We use appropriate technical and organisational measures designed to protect your data. These may include access controls, encryption in transit, secure storage, and least-privilege access for operational needs.
Sharing
We do not sell personal data and we do not share your uploaded RAMS documents with third parties for their own purposes. Your documents are processed only to provide the VendCura service to you.
Data location
VendCura is designed to host and process customer data in the UK. We do not transfer your data outside the UK.
Your rights
You may have rights to access, correct, delete, restrict, or object to processing of personal data, and to receive a copy of your data in certain circumstances.
To exercise these rights, contact us via the contact page.
Contact
For privacy questions or requests, please contact VendCura using the contact page.
Updates to this policy
We may update this policy as VendCura evolves. We will post updates on this page and revise the “Last updated” date above.