Vaboo Privacy Policy

Last Updated: 10 January 2026

We respect the privacy of every person who:

1. visits vaboo.co.uk;

2. administers a Vaboo Parent Account; or

3. accesses the Vaboo services via a Vaboo Child Account (as defined below),

(together, the “Sites”) and who uses the services we make available from the Sites (the “Services”). We are committed to protecting your privacy and being transparent about how we use your personal data.

1. Introduction and Purpose

This Privacy Policy explains how Vaboo Limited (“Vaboo”, “we”, “us” or “our”) collects, uses, stores, shares and protects your personal information. It also explains your rights under the UK GDPR and how you can exercise them.

This Policy should be read alongside our Terms & Conditions and Cookie Policy.

2. Who We Are

Vaboo Limited is the data controller for the personal information processed in connection with the Sites and Services. Our registered office is Avaland House, London Road, Hemel Hempstead, Hertfordshire, UK, HP3 9SD. Company number 09521467.

2.1 Contact
Questions or requests about your personal data can be directed to:

- Email: support@vaboo.co.uk
- Telephone: +44 3450 523 957

3. Account Types and Data Sharing

• Parent Account: an account created and administered by a business customer of Vaboo.

• Child Account: a sub-account created by a Parent Account holder for use by that customer’s own end users or customers.

Important: A Child Account does not refer to a child or minor. Vaboo does not knowingly collect or process personal data of children.

When you create a Parent or Child Account, your personal data may be shared with both Vaboo and the client that provided you access for the purposes of providing and improving the Services, including relevant marketing communications. Your data will never be shared with unrelated third parties.

4. Personal Information We Collect and Use

4.1 Account Setup & Service Delivery

• Name, email address, contact information, and other details necessary to create and manage your account.
• Legal basis: Performance of a contract (UK GDPR Article 6(1)(b))
• Shared with: Vaboo and the relevant Parent Account client.

4.2 Payment Information

• Payment details (card or bank information) are collected and processed by Stripe Payments Europe Ltd.
• Vaboo does not store payment card details.
• Legal basis: Performance of a contract and legitimate interest for account reconciliation.

4.3 Customer Service & Support

• Data provided when contacting us for support.
• Legal basis: Legitimate interest to provide efficient customer service.
• Shared with: Customer service platform providers, ticketing systems.

4.4 Analytics, Surveys & Customer Insights

• Information on usage, survey responses, interactions with offers.
• Used to improve the Services, provide personalised content, and create insights for Parent Account clients.
• Legal basis: Legitimate interest, balanced against privacy rights.
• Shared with: Relevant Parent Account client for service improvement purposes.

4.5 Marketing Communications

• Personal data may be used to send relevant marketing emails about offers, promotions, or updates.
• Legal basis: Consent (opt-in required)
• Shared with: Only with Vaboo or client; never sold to third parties.
• Users can withdraw consent at any time.

4.6 Legal and Regulatory Compliance

• Data may be processed to comply with legal obligations, enforce legal rights, protect third-party rights, or in connection with business transitions.
• Legal basis: Legal obligation or legitimate interest as applicable.
• Shared with: Professional advisers, regulatory authorities.

5. Cookies and Tracking Technologies

We use cookies, pixels, log files, and similar technologies. Please see our Cookie Policy for details, including how to manage your preferences.

6. Third-Party Links

Links to other websites or services are not covered by this Privacy Policy. We are not responsible for their privacy practices.

7. International Transfers

Some service providers (e.g., Stripe) may process data outside the UK. We ensure appropriate safeguards, such as standard contractual clauses, are in place to protect your data.

8. Data Retention

We retain personal data for 3 years from your last interaction, account deletion, or subscription end, whichever is later. Data that is only required for a short-term purpose, such as marketing campaigns, may be deleted sooner.

9. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, misuse, modification, or loss. All employees and processors are bound by confidentiality obligations.

10. Your Rights

You have the following rights under UK GDPR:

- Access, rectification, erasure, restriction of processing, data portability
- Object to processing (including for marketing or legitimate interests)
- Withdraw consent where processing is based on consent
- Object to automated decision-making or profiling
- Lodge a complaint with the UK ICO (https://ico.org.uk/concerns/)

We will respond in accordance with applicable law.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, Services, or legal obligations. Significant changes will be communicated by email. Please review this Policy periodically.

12. Credit and Debit Card Information

Stripe Payments Europe Ltd collects and processes all payment information. Vaboo does not store card details. Stripe’s processing is governed by their privacy policy: https://stripe.com/gb/privacy.