Effective date: 29 May 2026 · Vandrix Capital · Controller: Vandrix Capital
Vandrix Capital respects your privacy and is committed to protecting your personal data. This policy explains how we collect and use your information when you visit vandrix.capital or interact with our platform.
1. Who we are
Vandrix Capital is the data controller for personal data collected through this website and platform. We are responsible for deciding how and why your personal data is processed.
For data protection enquiries, contact us at privacy@vandrix.capital.
2. What information we collect
Information you provide directly
- Contact information: first name, last name, company name, and email address submitted through any form on this website.
- Application information: role, company stage, area of interest, and any message or description you include in a form submission.
- Account information: if you are granted platform access, login credentials and profile information.
- Communications: any correspondence you send to Vandrix by email or through the contact form.
Information collected automatically
- Technical data: IP address, browser type and version, device type, operating system, and referring URL.
- Usage data: pages visited, time spent on pages, links clicked, and other interactions with the website.
- Cookie data: as described in our Cookies section below.
3. How we use your information
We use the information we collect to:
- Review and process applications and waitlist registrations.
- Respond to enquiries and route messages to the appropriate team.
- Send you information about your application status, the platform, and relevant updates where you have agreed to receive these.
- Operate and improve the website and platform.
- Comply with our legal and regulatory obligations, including KYC and AML requirements for platform participants.
- Protect the security and integrity of the platform.
- Manage our customer relationship management systems, including Jetpack CRM, to track and manage participant relationships.
We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not use it for unsolicited marketing.
4. Legal basis for processing
We process your personal data on the following legal bases under GDPR:
- Legitimate interests — to operate the platform, manage applications, respond to enquiries, and improve our services.
- Contractual necessity — where processing is necessary to fulfil a service agreement you have entered into with Vandrix.
- Consent — where you have explicitly agreed to receive communications or where consent is required under applicable law.
- Legal obligation — where processing is required to comply with applicable regulatory requirements including KYC, KYB, and AML obligations.
5. Who we share data with
We do not sell your personal data. We may share it with the following categories of recipients:
- Regulated venue partners — for the purpose of participant onboarding and KYC/AML verification required to access the relevant licensed trading venue.
- Service providers — including hosting, email delivery, CRM, and analytics providers who process data on our behalf under data processing agreements.
- Regulatory authorities — where required by law, regulation, or court order.
- Professional advisers — including legal, compliance, and financial advisers under obligations of confidentiality.
Where we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
6. How long we keep your data
We retain personal data for as long as necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations. Specifically:
- Form submissions and application data: retained for a minimum of 5 years from submission to meet regulatory record-keeping obligations.
- Platform participant data: retained for the duration of the participation agreement and for a minimum of 5 years after termination.
- Website analytics data: retained for up to 24 months.
- Communications: retained for up to 3 years unless a longer retention period is required by law.
7. Your rights
Under GDPR and applicable data protection law, you have the following rights in relation to your personal data:
- Access — the right to request a copy of the personal data we hold about you.
- Rectification — the right to ask us to correct inaccurate or incomplete data.
- Erasure — the right to ask us to delete your data in certain circumstances.
- Restriction — the right to ask us to restrict processing of your data in certain circumstances.
- Portability — the right to receive your data in a structured, commonly used format.
- Objection — the right to object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, the right to withdraw it at any time.
To exercise any of these rights, contact us at privacy@vandrix.capital. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
8. Cookies
This website uses cookies and similar technologies to operate correctly and to understand how visitors use the site. Cookies are small text files stored on your device.
Essential cookies
These are necessary for the website to function and cannot be disabled. They include session management and security cookies.
Analytics cookies
These help us understand how visitors interact with the site. We use this information to improve the site experience. These cookies are only set with your consent.
You can control cookies through your browser settings. Disabling certain cookies may affect how the website functions. For more information, visit allaboutcookies.org.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include access controls, encryption in transit, and regular security reviews.
No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. If you become aware of any security issue, contact us immediately at security@vandrix.capital.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after any change constitutes acceptance of the updated policy.