Directory
Dispatch Brand Index Brand Spotlight Curation Guide Contact Privacy Policy Terms of Service
Legal Disclosure

Privacy Policy

Effective Date: January 1, 2026 • Last Revised: February 2026

1. Introduction and Data Controller Information

Vaultpickbeacon Publishing Ltd (referred to herein as "vaultpickbeacon", "we", "us", or "our"), operating the web portal vaultpickbeacon.garden, is committed to safeguarding the personal data of our global readership and subscribers. This Privacy Policy details our protocols regarding the collection, processing, storage, and transfer of personal information in full compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the UK Data Protection Act 2018, and relevant global consumer privacy frameworks including the California Consumer Privacy Act (CCPA/CPRA).

The designated Data Controller responsible for personal data collected across vaultpickbeacon.garden is:

Vaultpickbeacon Publishing Ltd
Company Registration No. 14920418
Registered Bureau: 42 Rue de Poitou, 75003 Paris, France
Data Protection Officer Contact: [email protected]

2. Data We Collect and Processing Principles

We strictly adhere to the principle of data minimization. We only collect personal information that is strictly required to provide our curated editorial content, directory updates, and communications services:

  • Directly Provided Information: When you subscribe to our editorial newsletter dispatch or submit an inquiry via our contact form, we collect your email address, full name, and any narrative details you provide.
  • Technical and Analytical Telemetry: When you navigate vaultpickbeacon.garden, our secure server logs automatically record standard non-identifying technical data including your IP address (anonymized at subnet level), browser user agent, operating system, referring URL, time stamps, and pages accessed.
  • Preferences & Consent Markers: We utilize local storage keys (such as cookie consent markers) strictly to prevent redundant popups across user visits.

3. Legal Bases for Processing Under GDPR

Under Article 6 of the GDPR, we process your personal data under the following lawful bases:

  • Consent (Art. 6(1)(a)): For sending our bi-weekly editorial dispatch newsletters where you have provided explicit opt-in confirmation. You may withdraw consent at any time via the unsubscribe link present in every email.
  • Legitimate Interests (Art. 6(1)(f)): For monitoring server performance, preventing malicious automated scraping attacks, ensuring platform security, and optimizing responsive layout rendering for diverse client hardware.
  • Legal Obligation (Art. 6(1)(c)): For maintaining legal accounting records and responding to lawful requests from regulatory authorities.

4. Third-Party Sub-Processors and Data Transfers

We do not sell, rent, monetize, or trade your personal data to commercial data brokers, advertising networks, or third-party marketing entities. Data is only processed through trusted infrastructure providers bound by strict Data Processing Agreements (DPAs) with standard contractual clauses (SCCs) guaranteeing GDPR-equivalent protection:

  • Cloud Hosting & Content Delivery: Secure edge CDN servers located within the European Economic Area (EEA) and compliant international datacenters.
  • Email Dispatch Systems: Encrypted transactional and broadcast delivery infrastructure ensuring zero cross-site behavioral tracking.

5. Data Retention Schedules

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered. Newsletter subscriber email records are maintained until an explicit unsubscribe request is registered, after which records are purged within thirty (30) business days. Server log telemetries are automatically deleted after an aggregated retention window of ninety (90) days.

6. Your Statutory Rights Under GDPR and CCPA

As an individual user, you hold comprehensive rights over your personal data under applicable data privacy legislation:

  • Right of Access (Art. 15 GDPR): Request a structured copy of all personal records we store associated with your identity.
  • Right to Rectification (Art. 16 GDPR): Request the correction of inaccurate or incomplete personal records.
  • Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request permanent deletion of your personal records from our databases.
  • Right to Restriction of Processing (Art. 18 GDPR): Request temporary suspension of data processing under certain statutory grounds.
  • Right to Data Portability (Art. 20 GDPR): Receive your information in a standard, machine-readable format.
  • Right to Object (Art. 21 GDPR): Object to processing based on our legitimate interests.
  • Non-Discrimination (CCPA): We will never deny services, charge differing rates, or degrade quality for users exercising their privacy rights.

To exercise any of these statutory rights, please submit a written request to our Data Protection Officer at [email protected]. We will verify your identity and respond within thirty (30) calendar days free of charge.

7. Policy Amendments

We reserve the right to revise this Privacy Policy periodically to reflect technical, operational, or legal developments. Any modifications will be posted directly to this URL with an updated effective date.