Privacy Policy

Last updated: 11 February 2026

1. Who we are

VectorLingo is a product of Thames Translation Group Ltd, a company registered in England and Wales (Company No. 09668305) with its registered office at 86-90 Paul Street, London, EC2A 4NE.

For any questions about how we handle your personal data, please contact us at: privacy@vectorlingo.com. For questions about our Terms of Service, contact legal@vectorlingo.com.

2. What data we collect

We collect the following categories of personal data:

  • Account information — name, email address, password (hashed), role within your organisation.
  • Business data — project details, client and vendor records, quotes, invoices, purchase orders, and related financial information that you enter into the platform.
  • Technical data — IP address, browser type and version, device information, and general location data derived from your IP address.
  • Usage data — how you interact with the platform, pages visited, features used, and timestamps.
  • Communication data — emails sent through the platform, notification preferences, and support correspondence.
  • Waitlist data — if you join our waitlist, we collect your email address and the page you signed up from.

3. Why we collect it

We only collect personal data when we have a lawful basis to do so under UK GDPR:

  • Performance of a contract (Article 6(1)(b)) — to provide and maintain the VectorLingo platform, process your account, and deliver the services you have subscribed to.
  • Legitimate interests (Article 6(1)(f)) — to improve our services, ensure platform security, prevent fraud, and monitor for technical issues. We balance these interests against your rights and only process data where the impact on you is minimal.
  • Consent (Article 6(1)(a)) — for marketing communications and waitlist signup. You can withdraw consent at any time (see section 4).
  • Legal obligation (Article 6(1)(c)) — to comply with tax, accounting, and regulatory requirements applicable to our business.

You are not required by law to provide personal data to us. However, if you do not provide certain information (such as your name and email), we will not be able to create your account or provide our services.

5. Who we share it with

We share personal data with a limited number of third-party service providers who help us operate the platform. These providers process data only on our instructions and are bound by contractual obligations to keep your data secure.

We use the following categories of service providers:

  • Cloud infrastructure provider — hosting, database, file storage, and authentication services (EU).
  • Edge hosting provider — application delivery and performance optimisation (US/Global).
  • Email delivery service — transactional and notification emails (US).
  • Error monitoring service — application error tracking and diagnostics (US).
  • Rate limiting service — security and abuse prevention (UK).
  • Payment processor — subscription billing and payment handling (US/EU).
  • Translation tool integrations — CAT tool connectivity when enabled by your organisation (EU).

A complete list of our sub-processors is available on request by emailing privacy@vectorlingo.com.

We do not sell your personal data to third parties. We do not share your data with advertisers.

6. International transfers

Some of our service providers operate outside the United Kingdom. Where we transfer personal data internationally, we ensure appropriate safeguards are in place:

  • UK adequacy decisions — where the UK government has determined that the destination country provides an adequate level of data protection (e.g. EU/EEA countries).
  • UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses with the UK Addendum — for transfers to countries without an adequacy decision, we enter into appropriate contractual arrangements approved by the Information Commissioner's Office.

We conduct transfer risk assessments where required to ensure that your data receives an equivalent level of protection regardless of where it is processed.

7. How long we keep it

We retain personal data only as long as necessary for the purposes set out in this policy:

  • Account and business data — for the duration of your subscription, plus 6 years to comply with UK tax and legal retention requirements.
  • Waitlist data — until our public launch or until you unsubscribe, whichever comes first.
  • Technical and usage logs — 90 days.
  • Error monitoring data — 90 days.

When data is no longer required, we securely delete or anonymise it.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data in certain circumstances.
  • Right to restrict processing — request that we limit how we use your data.
  • Right to data portability — receive your data in a structured, commonly used format.
  • Right to object — object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact us at privacy@vectorlingo.com. We will respond within one month of receiving your request.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Any automated processing we perform (such as calculating quotes or generating reports) is based entirely on data you have provided and is used to support, not replace, your business decisions.

10. When we act as a processor

When you use VectorLingo to manage information about your own clients, vendors, and other contacts, you are the data controller for that personal data and we are the data processor acting on your instructions.

This means you are responsible for ensuring you have a lawful basis to store your contacts' data on our platform, and for responding to any data subject requests from your contacts.

We will assist you in meeting your obligations as a controller. The terms of our data processing are set out in our Data Processing Agreement.

11. Cookies

We use a small number of strictly necessary cookies to operate the platform. We do not use advertising or tracking cookies. For full details, please see our Cookie Policy.

12. Changes to this policy

We may update this privacy policy from time to time. For material changes, we will notify you by email. For minor updates, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically.