Privacy Policy

1. Overview & Data Controller Identification

Vaultbundleroms Research Ltd ("Vaultbundleroms", "we", "us", or "our"), incorporated under the laws of England & Wales (Company No. 14892014) with its registered office at 48 Chancery Lane, Holborn, London WC2A 1JF, United Kingdom, serves as the data controller responsible for the personal data collected through vaultbundleroms.com.

We are dedicated to safeguarding the privacy rights of our readers, engineering partners, and enterprise correspondents. This Privacy Policy details our operational protocols concerning data acquisition, lawful processing grounds, third-party disclosure limits, and user rights under the UK General Data Protection Regulation (UK GDPR), EU GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

2. Categories of Information Collected

We restrict data collection to what is strictly necessary to deliver editorial analysis and maintain secure web operations:

• Directly Provided Inquiries: When you submit our contact form, we collect your name, business email address, inquiry topic, and message text.
• Technical and Connection Telemetry: Log files automatically capture IP addresses, browser user agent strings, HTTP referrers, request timestamps, and operating system types to detect denial-of-service attempts and routing errors.
• Consent Preferences: Local browser storage values preserving your cookie selections across browsing sessions.

3. Lawful Grounds for Processing

We process personal data solely where an established legal basis under Article 6 of the UK GDPR applies:

• Legitimate Interests: Operating, securing, and maintaining our technical research platform against unauthorized intrusion or resource abuse.
• Consent: Storing non-essential analytic cookies or processing inbound communication initiated voluntarily by you via our contact portal.
• Legal Compliance: Satisfying statutory audit obligations, responding to verified judicial orders, or defending legal claims.

4. Third-Party Processors & Infrastructure

We do not sell, rent, or trade your personal data. Data is processed solely through vetted infrastructure service providers bound by Data Processing Agreements (DPAs) incorporating standard contractual clauses:

• Hosting and Content Delivery: Cloud infrastructure providers executing static edge caching and SSL termination within the United Kingdom and European Economic Area (EEA).
• Communication Gateways: Transactional SMTP infrastructure used strictly to route inbound inquiries to our editorial team.

5. Data Retention Schedules

Inbound contact form transmissions are retained in active inbox storage for a maximum of twenty-four (24) months to facilitate ongoing correspondence, after which records are permanently expunged or anonymized. Edge web server connection logs are rotated and deleted after thirty (30) days.

6. Your Statutory Rights (GDPR & CCPA)

Depending on your geographic residency, you possess enforceable legal rights regarding your personal information:

• Right of Access & Portability: Obtain confirmation of whether your data is processed and receive a structured machine-readable export.
• Right to Rectification & Erasure: Correct inaccurate records or request total deletion ("right to be forgotten").
• Right to Restrict or Object: Restrict processing or object to our reliance on legitimate interest grounds.
• CCPA Non-Discrimination: California residents will never experience degraded site functionality or altered service pricing for exercising privacy rights.

7. Data Protection Officer (DPO) Contact

To exercise your statutory rights or submit questions regarding this policy, contact our designated Data Protection Officer at: