Privacy Policy
1. Introduction
This Privacy Policy explains how Vardot for Programming and Vardot, LLC (together, "Vardot", "we", "us", or "our") collect, use, share, retain, and protect personal information, and the rights you have over your information.
It applies to all websites and online services we operate, including www.vardot.com, support.vardot.com, accounts.vardot.com, other *.vardot.com and *.vardot.io sites, www.varbase.com and *.varbase.io, our newsletters and other email content, and any content or services we provide through mobile apps (together, the "Service").
This policy does not apply to third-party websites or services we link to or that link to us. We are not responsible for their content or privacy practices.
By using the Service, you agree to this Privacy Policy. Where the law requires consent (for example, for certain cookies or marketing), we rely on your consent and you may withdraw it at any time.
2. Who We Are
Vardot is the controller of your personal information. Our operating locations include Santa Clara, California, USA (headquarters); Amman, Jordan; and Cairo, Egypt.
For any privacy question or to exercise your rights, contact us at [[email protected]] or using the details in Section 15.
3. Personal Information We Collect
We collect the following categories of personal information:
| Category | Examples |
|---|---|
| Identifiers and contact data | Name, email address, phone number, postal address, employer, job title |
| Account data | Username, credentials, support-portal identifiers |
| Usage and log data | IP address, browser type and version, pages viewed, referring pages, dates, times, and duration of visits |
| Device data | Device type, operating system, unique device identifiers |
| Location data | Approximate location from IP address, or precise location if you grant permission |
| Cookies and similar technologies | See Section 6 |
| Communications | Messages, form submissions, newsletter preferences, support requests |
| Marketing and engagement data | Email opens and clicks, campaign responses, event registrations |
| Recruitment data | If you apply for a role: CV, work history, and related information |
| Client and project data | Information you share with us when engaging our services |
We do not intentionally collect special category or sensitive personal information through the Service. Please do not send us sensitive information unless we specifically request it.
4. How We Collect Your Information
We collect personal information: (a) directly from you, when you fill in a form, subscribe, contact us, apply for a job, or engage our services; (b) automatically, through cookies and similar technologies when you use the Service; and (c) from third parties, such as analytics and advertising providers, our CRM and marketing platform, and event or referral partners.
5. How We Use Your Information and Legal Bases
We use personal information for the purposes below. For visitors covered by the GDPR/UK GDPR, the applicable legal basis is shown.
| Purpose | Legal basis (GDPR/UK) |
|---|---|
| Provide, operate, and improve the Service | Legitimate interests; performance of a contract |
| Respond to enquiries and provide support | Performance of a contract; legitimate interests |
| Send newsletters, marketing, and promotional content | Consent (or legitimate interests where permitted) |
| Analytics and measuring Service performance | Consent (for analytics cookies); legitimate interests |
| Advertising and remarketing | Consent |
| Recruitment and hiring | Steps prior to a contract; legitimate interests |
| Security, fraud prevention, and protecting our rights | Legitimate interests; legal obligation |
| Comply with legal obligations and respond to lawful requests | Legal obligation |
| Business transfers (merger, acquisition, asset sale) | Legitimate interests |
6. Cookies and Similar Technologies
Cookies are small data files stored on your device. We use cookies and similar technologies in the following categories:
- Strictly necessary: required for the Service to function. These do not require consent.
- Functional: remember your preferences and choices.
- Analytics: help us understand how the Service is used (for example, Google Analytics 4).
- Advertising: used to deliver and measure ads and remarketing.
Where required by law, we request your consent before setting non-essential cookies through our cookie consent banner, and you can change your choices at any time. You can also set your browser to refuse cookies, though some parts of the Service may not work.
7. Analytics and Advertising Partners
We work with third parties that use cookies to serve and measure advertising based on your visits to the Service and other sites. These may include Google, Meta (Facebook and Instagram), LinkedIn, and X (formerly Twitter).
You can control interest-based advertising here:
- Google Ads Settings: https://adssettings.google.com
- Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
- Meta (Facebook) ad preferences: https://www.facebook.com/adpreferences
- LinkedIn ad choices: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
- X (Twitter) personalization settings: https://twitter.com/settings/personalization
- Industry opt-out tools: Digital Advertising Alliance (https://www.aboutads.info/choices), DAAC Canada (https://youradchoices.ca), and EDAA Europe (https://www.youronlinechoices.eu).
8. How We Share Your Information
We share personal information only as described here:
- Service providers (processors): vendors that host, operate, analyze, or support the Service on our behalf, such as our CRM and marketing platform, analytics providers, hosting and infrastructure providers, and email delivery services. They may use your information only to perform services for us and are contractually bound to protect it.
- Advertising partners: as described in Section 7.
- Legal and safety: when required by law, subpoena, or lawful request, or to protect the rights, safety, and security of Vardot, our users, or the public.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with notice as required by law.
We do not sell your personal information for money. Some sharing for advertising and analytics may be considered a "sale" or "sharing" under California law; see Section 11.
9. Data Retention
We keep personal information only for as long as needed for the purposes described in this policy, then delete or anonymize it. Retention periods depend on the type of information and the purpose, for example: marketing data until you unsubscribe or after a period of inactivity; support and client records for the life of the relationship plus any legally required period; and log data for a limited operational period.
10. International Data Transfers
We operate globally, and your personal information may be transferred to and processed in countries other than your own, including the United States, Jordan, and Egypt, where data protection laws may differ from those in your jurisdiction.
Where we transfer personal information out of the EEA, the UK, or other regions with transfer restrictions, we use appropriate safeguards such as Standard Contractual Clauses.
11. Your Privacy Rights
11.1 EEA and UK (GDPR)
You have the right to: access your personal information; correct inaccurate information; request erasure; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local supervisory authority.
11.2 California (CCPA/CPRA)
If you are a California resident, you have the right to: know the categories and specific pieces of personal information we collect, use, and disclose; delete your personal information; correct inaccurate information; and opt out of the "sale" or "sharing" of personal information and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.
We honor Global Privacy Control (GPC) signals where required. You may use an authorized agent to submit requests.
11.3 Jordan (PDPL)
If you are in Jordan, you have rights under the Personal Data Protection Law, including to be informed about processing, access your data, request correction or deletion, object to or withdraw consent for processing, and complain to the competent authority.
11.4 How to Exercise Your Rights
Submit a request to [[email protected]] or use the details in Section 15. We will verify your identity and respond within the timeframe required by applicable law. These rights may be subject to legal limits and exceptions.
12. Data Security
We use commercially reasonable technical and organizational measures to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. To report a security issue, see https://www.vardot.com/how-report-security-issue.
13. Children's Privacy
The Service is not directed to children. We do not knowingly collect personal information from children under 16, or under the minimum age of consent in your jurisdiction (for example, 13 in the United States under COPPA). If you believe a child has provided us with personal information, contact us and we will take steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date, and where required by law, we will provide additional notice. Please review it periodically.
15. Contact Us
If you have any questions about this Privacy Policy, please contact us.