VCCP US Privacy & Cookies Policy

VCCP US PRIVACY NOTICE 2026

Who Are We?

This website located at www.vccp-us.com (the “Website”), and our services (collectively, the “Services”) are provided by VCCP Holdings Limited (“VCCP”). The privacy of our clients and wider website users and the security of their personal information is very important to us and this privacy notice provides information about what we collect, how we use it and how long we keep it. This privacy notice also tells you about the rights and choices you have with respect to your personal information, how you can assert those rights, and how you can contact us to get answers to your questions. 

We may change our privacy notice from time to time. If we make changes to this privacy notice, we will post those changes on the homepage and other places deemed appropriate so that you are aware of what information we may collect. We reserve the right to modify this privacy notice at any time, so please review it frequently.

If you do not agree with the way your personal information will be used, please do not access the Website or use our Services.

For more information about how users with disabilities can access this privacy notice in an alternative format, please email gdpr@vccp.com or call: +1 332 237 7757.

Third Party Websites

For your convenience, our Services contains links to a number of other websites, both inside and outside the VCCP group of companies. This privacy notice does not apply to those sites; you will need to check those sites directly for information on their use of cookies, data collections and distribution policies.

What Personal Information Do We Collect?

We use the term “personal information” – also called “personal data” or “personally identifiable information” in the laws of some jurisdictions – to refer to information that reasonably identifies, relates to, describes, or can be associated with you. Data that has been deidentified or that otherwise cannot reasonably be related back to a specific person is not considered personal information.

Depending on how you interact with the Services, may collect from you: (i) personal Identifiers and contact information, such as your name and email address; (ii) device and online identifiers and related information, including internet protocol (IP) address, mobile ad identifiers, data collected from cookies and similar unique identifiers; and (iii) any other personal information that you voluntarily provide to us from time to time. 

How Do We Collect Your Personal Information?

VCCP collects personal information, such as your name or email address, when it is voluntarily submitted to us through the Website or via links provided by us.  

When you visit the Website, we or third parties we work with may automatically collect certain information using technologies such as cookies and other tracking technologies as described below.

How Do We Use Your Personal Information?

Use

Legal Basis For Processing

To send you information, updates or newsletters if you ask to receive them.

Consent – We will only ever do this if you expressly consent to receive these communications.  You can withdraw consent at any time.

To conduct reviews of our services from our clients

Consent – We will obtain your consent to use your data for the purposes required, you can withdraw your consent at any time.

Legitimate interest – we need to be able to hold your contact details to send the appropriate links to you and may require analysis of the survey results by a VCCP group company or its trusted partners to improve our services to clients.

Replying to questions you may ask us about VCCP.

Legitimate Interest – we need to be able to hold your contact details to adequately reply to you.  

To consider applications for employment

Legitimate interest – we need to be able to review your personal data to assess your suitability for a role and to be able to contact you throughout the process.  You can withdraw from the process and withdraw your consent at any time during the recruitment.

To withdraw your consent from any of the above, please email gdpr@vccp.com.

How Do We Share Your Personal Information? Service Providers. We may make use of third party providers in the provision of our Services. These third party providers may have access to personal information that is necessary to perform their functions, but they are only permitted to do so in connection with performing services for us. They are not authorized by us to use the information for their own benefit.

Legal Compliance and to Defend Our Rights. We may disclose personal information and other information as we believe necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to protect our operations or those of any of our affiliates; (e) to protect our rights, privacy, safety or property, and/or that of our affiliates, you, or others; and (f) to allow us to pursue available remedies or limit the damages that we may sustain.

Business Transfers. We may share your personal information and other information with third parties in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the assets of VCCP, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which the assets transferred may include information about the users of our Services.

How Long Do We Retain Your Personal Data?

Recruitment data will be retained in accordance with our Recruitment Privacy Notice.

All other personal data collected will only be kept as long as is strictly necessary for the purposes described and will be deleted in accordance with our internal retention policies unless we seek your consent to retain it longer, or as otherwise permitted or required by law.

Transfer Of Data

We may share your data with our other offices located outside the United Kingdom, (including the EEA, USA and Australia).  If we are required by applicable law, we will put in place standard contractual clauses (“SCCs”) such as the International Data Transfer Agreement (“IDTA”) or the UK Addendum to the EU SCCs or similar contractual requirements to safeguard your interests.  VCCP uses ‘Google Workplace’ incorporating Google Mail and Google Drive for its email and file storage.  As such, email data, folders and documents may be stored on servers outside the United Kingdom or EEA.  VCCP has put in place SCCs with Google to ensure adequate safeguards of data. 

We will not otherwise transfer any personally identifiable information you provide at this website to any other third party unless otherwise disclosed to you. We also reserve the right to disclose your personally identifiable information where necessary to protect our rights and/or to comply with a judicial proceeding, court order or legal process served on this website.

Non-personal information collection and use

In common with many commercial organisations, we monitor the use of this Website by collecting aggregate information. We may automatically collect non-personal information about you such as the type of internet browsers you use, the pages you visit or the website which directed you to our Website. You cannot be identified from this information, and it is used only to assist us in providing an effective service on our Website.

Use of cookies

Cookies are small files which are sent to your web browser and stored on your computer’s hard drive and our website uses them to distinguish you from other users of our website. Other tracking technologies such as pixels and beacons operate in a similar way. Some cookies are temporary, such as ‘session cookies’ which remain in your browser until you leave the website, others are ‘persistent cookies’ and remain on your device until you erase them, or they expire. You may set your web browser to notify you of cookie placement requests or to decline cookies completely. You can delete the files that contain cookies; those files are stored as part of your internet browser. If you disable cookies, certain functions of our website may not function properly or be available. 

We use the following cookies:

Strictly Necessary: 

These cookies are essential for our website to function properly. They ensure basic functionality and security features of the website. You can disable these types of cookies, but it may affect your ability to use our website.

Performance:

These cookies allow us to measure the visitors to our website and analyse the way they interact with our website. This can help us in measuring the performance of our website and make improvements to deliver a better browsing experience. This data is aggregated and anonymous.

Functionality Cookies:

We may also use functionality cookies to recognise returning website visitors and remember your settings and preferences to provide you with a tailored experience.  This data may be anonymous.

Security of your personal data

We have implemented technologies and policies with the objective of protecting your privacy from unauthorised access and improper use and will update these measures as appropriate as new technologies become available. However, no method of safeguarding information is completely secure, and we cannot guarantee that our safeguards will be effective or sufficient.

Opting Out of messages or services

We may send you marketing messages via email. If you receive a marketing message from us, you may unsubscribe from future messages in accordance with our standard unsubscribe process (such as by using the unsubscribe link included in an email), or by sending an unsubscribe request to us at gdpr@vccp.com. We will process your request within a reasonable time after receipt. 

YOUR PRIVACY RIGHTS

 UK, EEA and Switzerland Privacy Rights If you are a resident of the UK, EEA or Switzerland, you have a right to request access to personal data which is held about you. You also have the right to require any inaccuracies in your information to be corrected.

U.S. State Privacy Rights 

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, New Hampshire, Delaware, Iowa, Nebraska, New Jersey, Tennessee, Minnesota, Maryland, or another U.S. state that has similar privacy legislation (collectively, “Covered States”), you may have specific rights regarding your personal information under: the California Consumer Privacy Act (“CCPA”), Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, New Hampshire Data Privacy Act, Delaware Personal Data Privacy Act, Iowa Consumer Data Protection Act, Nebraska Data Privacy Act, New Jersey Data Protection Act, Tennessee Information Protection Act, Minnesota Consumer Data Privacy Act, Maryland Online Data Privacy Act, or similar laws in other U.S. states (collectively, “State Privacy Laws”). This section describes the rights that consumers of Covered States have and explains how to exercise those rights. To be clear, these rights are granted only to the extent that you are considered a consumer of Covered State and we are acting as a “controller” or “business” (as applicable) under State Privacy Laws with respect to your personal information.

The categories of personal data we process, our purposes for processing your personal data, the categories of personal data that we share with third parties, and the categories of third parties with whom we share it are set forth above in this privacy notice.

Information We Collect; How We Collect It; How We Use It. General information regarding our collection, use, and disclosure of personal information is set forth in the privacy notice above. 

In the past 12 months, we have collected categories of personal information described in the section of the privacy notice above titled What Personal Information Do We Collect? and we have collected this information from the sources described in the section titled How Do We Collect Personal Information? Depending on your level of interaction with us, we may not have collected your personal information from all of the categories listed in the privacy notice above. We collect and use your personal information for the business or commercial purposes described in the section titled How Do We Use Your Personal Information? and retain it pursuant to the section titled How Long Do We Retain Your Personal Data?

We disclose the following categories of personal information for business or commercial purposes to the categories of recipients listed below:

  • Identifiers and contact information – We may disclose this information to service providers who perform business services for us; and third parties, such as advertising networks, analytics and social media networks.
  • Device information and unique identifiers – We may disclose this information to service providers who perform business services for us; and third parties, such as advertising networks, analytics and social media networks.

We do not collect any sensitive personal information from you within the scope of State Privacy Laws.

Rights to Your Information. In addition to the rights set forth in our privacy notice, State Privacy Laws may, depending on your state of residence, provide you with the following rights:

  • Right to know. You may have the right to know whether we process your personal data and to access such personal data. You may also have the right to request that we disclose certain information to you about our collection, use, or disclosure of your personal information. If you are a resident of Delaware, you also have the right to obtain a list of the categories of third parties to which we have disclosed personal information of Delaware consumers.
  • Right to data portability. You may have the right to obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means.
  • Right to delete. You may have the right to delete personal data that you have provided by or that we have obtained about you. Please note that we may deny such request if the requested deletion falls under an exception as set forth in the State Privacy Laws. Additionally, for residents of Colorado, Connecticut, and Texas, if you request deletion of your personal information and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal information remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal information for any purpose except for those allowed under State Privacy Laws. Some State Privacy Laws, like those of Iowa and Utah, limit this right to only the data you have provided us.
  • Right to correct. Unless you reside in Iowa or Utah, you have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes for which we process it.
  • Right to opt out. You have the right to opt out of the processing of your personal data for purposes of: (i) targeted advertising; (ii) the sale of personal data; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you, unless you reside in Iowa or Utah. As of the latest date of the privacy notice:
    • We DO NOT process personal data and share it with third parties for the purposes of targeted advertising;
    • We DO NOT “sell” personal data under State Privacy Laws;
    • We DO NOT engage in profiling decision based on your personal data that produce legal or similarly significant effects concerning you.
  • Right to nondiscrimination. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights. Unless permitted by the State Privacy Laws, we will not:
    • Deny you goods or services;
    • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
    • Provide you a different level or quality of goods or services; or
    • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

How to Exercise Your Rights; Verifying Your Identity. To exercise any of your privacy rights, or if you have any questions about your privacy rights, you may contact us by emailing us at gdpr@vccp.com.

After submitting a request, we will take steps to verify your identity in order for us to properly respond and confirm that it is not a fraudulent request. In order to verify your identity, we will ask, at a minimum, that you provide your name and email address so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request.

Only you, or for California, Colorado, Connecticut, Delaware, Nebraska, Montana, New Hampshire, New Jersey, Oregon, and Texas consumers making an opt-out request, an agent legally authorized to act on your behalf, may make a verifiable request related to your personal information. If you are making a request as the authorized agent of a consumer in one of the aforementioned states, we will ask you also submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf. 

Response Time; Your Right to Appeal. We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, State Privacy Laws allow us up to 90 days to respond. We will contact you within 45 days from when you contacted us to inform you of the need for additional time and the reason for such extension. We may charge you a reasonable fee to cover administrative costs if your requests are manifestly unfounded, excessive, or repetitive.

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so and provide instructions for how to appeal the decision. Depending on your state of residence you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 60 days (45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint. 

Children’s Privacy

Our Services are intended for users ages 18 and over, and VCCP does not knowingly collect personal information from children under the age of 18.  If you are under 18 and want to ask us a question or use the site in a way that means you have to provide any personal information, please ask your parent or guardian to contact us or provide the information instead.

 For more information:

If you have any questions about VCCP’s privacy notice or any personal data we may hold, please email ITHelpdesk@vccp.com and gdpr@vccp.com. If you have a complaint about your personal data rights and reside in the UK, EEA or Switzerland, you can contact your local data protection authority.