Privacy policy

Summary

Controller: ABE International (Andorra).
Representative in the United Kingdom: Prighter Ltd, 20 Mortlake High Street, London SW14 8JN, United Kingdom.
Purposes: delivering the website securely, answering your enquiries, providing the services you buy and, only if you agree, measuring how the website is used and how well our campaigns work.
Lawful bases: legitimate interests, contract, legal obligations and your consent.
Recipients: our service providers and, if you accept the relevant cookies, Google, Meta, LinkedIn and Microsoft. We do not sell your data.
Your rights: access, rectification, erasure, objection, restriction, portability and withdrawal of consent.
Complaints: to us, to the Information Commission (ICO) or to the Andorran data protection authority (APDA).

Controller and representative

The controller is ABE International, whose details are shown in the box above. For any privacy question, write to privacy@vigialabs.ai.

ABE International is established in Andorra, outside the United Kingdom. The UK GDPR applies to our processing linked to offering our services to people in the United Kingdom and to monitoring their behaviour on this website (article 3(2)), so we have appointed a representative in the United Kingdom under article 27, whom you can also contact: Prighter Ltd, 20 Mortlake High Street, London SW14 8JN, United Kingdom.

As an Andorran company, we also process your data in accordance with Andorra’s Llei 29/2021 on the protection of personal data.

What we use, why and on what basis

• Browsing. When you visit the website, your browser sends technical data such as your IP address, browser and the page requested. We use it to deliver the website, protect it from abuse and fix problems. Basis: our legitimate interests in running a secure website (article 6(1)(f) UK GDPR).
• Analytics. If you accept analytics cookies, Google Analytics 4 and Microsoft Clarity record how the website is used: pages visited, where the visit came from, device, approximate location, clicks, scrolling and session recordings in which text fields are masked. Basis: your consent (article 6(1)(a)).
• Advertising and campaign measurement. If you accept advertising cookies, Google Ads, Meta and LinkedIn record whether you arrived from one of our adverts and whether you then asked for information or subscribed, and may show you VigiaLabs adverts on their platforms. Basis: your consent.
• Enquiries. If you write to us, we use your name, contact details and message to reply and, if you ask, to prepare a proposal. Basis: steps you ask us to take before entering into a contract, or our legitimate interests in answering the enquiries we receive.
• Customers. When you subscribe, we use the details of your account, your users and your subscription to provide the service, deal with billing and complaints and meet our legal obligations. Basis: contract and legal obligations (article 6(1)(b) and (c)).
• Businesses we monitor. To provide our service, we capture and examine what businesses publish on their websites and in their adverts, which may include personal data of sole traders, of their contact persons and of people who appear on those pages. We keep it as evidence, examine it and report on it to our customers and to the businesses concerned. Basis: our customers’ legitimate interests and ours in detecting and stopping infringements and in establishing, exercising or defending legal claims (article 6(1)(f)). You can object at any time.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. This website is not aimed at children under 13.

How long we keep data

Technical browsing logs are kept for the period set by our hosting provider for security purposes. Analytics and advertising data are kept for the periods of each tool shown in the cookie policy; in Google Analytics we have limited the retention of event data to 14 months. Enquiries are kept while we deal with them and then for up to five years. Customer data is kept for the duration of the contract and then for five years, or longer where tax law requires it. Information captured by our monitoring service is kept for five years from its capture, and longer only while a legal claim requires it.

Who we share data with

We share data with these providers, who act as our processors unless stated otherwise:

• Cloudflare, Inc. (United States): hosting, delivery and security of the website.
• Amazon Web Services EMEA SARL (Luxembourg): hosting of our platform in Frankfurt (Germany).
• Clerk, Inc. (United States): sign-in and management of user accounts.
• UpCloud Ltd (Finland): servers that capture monitored websites, in Madrid and London.
• OpenAI (United States): language model that proposes texts from information already extracted; a person always reviews them.
• Google (Google Workspace): our email.
• Google Ireland Limited (Ireland) and Google LLC (United States): Google Tag Manager, Google Analytics and Google Ads, only if you accept analytics or advertising cookies. For Google Ads, Google LLC acts as an independent controller under its controller terms.
• Microsoft Ireland Operations Limited (Ireland): Microsoft Clarity, only if you accept analytics cookies. Microsoft is an independent controller of this data and, only if you also accept advertising cookies, may use it for Microsoft Advertising.
• Meta Platforms, Inc. (United States): Meta Pixel, only if you accept advertising cookies. We are joint controllers with Meta for collecting and transmitting the data, under Meta’s Business Tools Terms.
• LinkedIn Corporation (United States): LinkedIn Insight Tag, only if you accept advertising cookies. LinkedIn is the controller of the data it receives through its tag.
• Paddle.com Market Limited (United Kingdom): reseller of our plans. It handles payment, invoicing and sales tax as an independent controller, under its own privacy policy.
• Prighter Ltd (United Kingdom) and Prighter EU Rep GmbH (Austria): our representatives, who receive data protection requests, including through their online form, and pass them on to us.

What each platform later does with that data is its own responsibility. We will also disclose data to authorities and courts where the law requires it.

International transfers

Andorra is covered by UK adequacy regulations (Data Protection Act 2018, Schedule 21, paragraph 5), so data sent from the United Kingdom to ABE International keeps an equivalent level of protection.

Our platform is hosted in the European Economic Area, which UK adequacy regulations also cover. Some providers process data in the United States. Transfers to Google LLC, Microsoft Corporation, LinkedIn Corporation, Cloudflare, Inc., Clerk, Inc. and OpenAI rely on the UK-US data bridge where the recipient is certified under it and, in any case, on the international data transfer addendum to the standard contractual clauses included in their terms. Transfers to Meta Platforms, Inc. rely on the UK data transfer addendum in Meta’s terms. You can ask us for a copy of these safeguards at privacy@vigialabs.ai.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time through the request form of our representative, Prighter, by writing to privacy@vigialabs.ai or by post to the address shown above. We will reply within one month, which may be extended by two further months where requests are complex or numerous.

Where we rely on your consent, you can withdraw it at any time; this does not affect processing carried out before. For cookies, simply change your choice:

Cookie preferences

You can complain to us about how we use your personal data through the same form or by writing to privacy@vigialabs.ai. We will acknowledge your complaint within 30 days and respond without undue delay (Data Protection Act 2018, section 164A). You can also complain to the Information Commission (ICO) at any time, or to the Agència Andorrana de Protecció de Dades.

Changes to this policy

We will update this policy when our processing or the law changes, and show the date of the last update at the top of the page. If a change affects processing based on your consent, we will ask for it again.