Privacy Policy
Effective Date: 22 February 2026 Last Updated: 22 February 2026
The Vanderbilt Portfolio (“the Publisher,” “we,” “us,” or “our”) operates vision2030.ai (“the Platform”). This Privacy Policy describes how we collect, use, store, and protect information when you access or use the Platform. We are committed to respecting your privacy and handling your data with the care and transparency that institutional users expect.
1. Information We Collect
Information you provide directly. When you subscribe to the Platform, create an account, submit a contact form, or correspond with us via email, you may provide personal information including your name, email address, professional title, organisation name, and payment information. We collect only the information necessary to provide the service you have requested.
Information collected automatically. When you access the Platform, our systems may automatically collect certain technical information, including:
- IP address (anonymised where technically feasible)
- Browser type and version
- Operating system
- Referring URL
- Pages visited and time spent on each page
- Date and time of access
This information is collected through server logs and, where applicable, through cookies and similar technologies as described in our Cookie Policy.
Information from third parties. If you subscribe through a third-party payment processor, we may receive transaction confirmation data (but not full payment card details) from the processor. We do not purchase personal data from data brokers or third-party aggregators.
2. How We Use Your Information
We use collected information for the following purposes:
- Service delivery. To provide access to Platform content, manage subscription accounts, and deliver premium content to authorised subscribers.
- Communication. To respond to your inquiries, send subscription-related notifications, and provide editorial updates you have opted to receive.
- Platform improvement. To analyse aggregate usage patterns and improve Platform content, structure, and performance. We do not conduct individual-level behavioural profiling.
- Security. To detect and prevent unauthorised access, abuse, or fraud.
- Legal compliance. To comply with applicable legal obligations, including tax reporting requirements for subscription transactions.
3. Legal Basis for Processing
Where applicable data protection law — including the General Data Protection Regulation (GDPR) for users in the European Economic Area and the United Kingdom — requires a legal basis for processing personal data, we rely on:
- Contractual necessity for processing required to deliver subscription services
- Legitimate interests for analytics, security, and Platform improvement, balanced against your privacy rights
- Consent for optional communications such as editorial newsletters, which you may withdraw at any time
- Legal obligation for processing required by applicable law
4. Data Sharing
We do not sell, rent, or trade your personal information. We share personal data only in the following limited circumstances:
- Service providers. We engage third-party service providers for payment processing, email delivery, hosting, and analytics. These providers are contractually bound to use your data only for the purposes we specify and to maintain appropriate security measures.
- Legal requirements. We may disclose information when required by law, regulation, legal process, or enforceable governmental request.
- Business transfers. In the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity, subject to the commitments made in this Privacy Policy.
We work with Google AdSense to display contextual (non-personalised) advertisements on the Platform. Google may collect and use data in accordance with its own privacy policy to serve advertisements. When consent is provided through our cookie consent mechanism, Google may use cookies to serve ads based on your browsing activity. You can opt out of personalised advertising at any time through our cookie consent banner or by visiting Google’s Ad Settings. We do not share personal subscriber data with advertisers for the purposes of targeted advertising beyond what is processed through Google AdSense.
5. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this Policy:
- Account data is retained for the duration of your subscription and for a reasonable period thereafter to enable reactivation and comply with legal obligations.
- Communication records are retained for up to three years for correspondence management and dispute resolution.
- Server logs are retained for up to twelve months for security and analytical purposes, after which they are deleted or permanently anonymised.
- Payment records are retained as required by applicable tax and financial reporting obligations.
You may request deletion of your personal data at any time, subject to our legal retention obligations, by contacting [email protected].
6. Data Security
We implement technical and organisational measures appropriate to the sensitivity of the data we process, including:
- Encryption of data in transit using TLS/SSL protocols
- Secure storage of subscriber credentials using industry-standard hashing
- Access controls limiting data access to authorised personnel
- Regular review of security practices and vendor security posture
No system is perfectly secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security and accept no liability for breaches resulting from sophisticated attacks beyond industry-standard defences.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access. The right to request a copy of the personal data we hold about you.
- Rectification. The right to request correction of inaccurate or incomplete personal data.
- Erasure. The right to request deletion of your personal data, subject to legal retention requirements.
- Restriction. The right to request that we restrict processing of your data in certain circumstances.
- Portability. The right to receive your personal data in a structured, machine-readable format.
- Objection. The right to object to processing based on legitimate interests.
- Withdrawal of consent. Where processing is based on consent, the right to withdraw consent at any time.
To exercise any of these rights, contact [email protected]. We will respond to verified requests within thirty days.
8. International Data Transfers
The Platform serves a global audience. Your data may be processed in jurisdictions outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms recognised under applicable data protection law.
9. Children’s Privacy
The Platform is designed for professional and institutional use and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.
10. Third-Party Links
The Platform contains links to third-party websites for reference purposes. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site you visit.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Material changes will be communicated through a notice on the Platform. The “Last Updated” date at the top of this Policy indicates when the most recent revision was published.
12. Contact
For questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, contact:
Email: [email protected]
You may also reach us through the general contact channels listed on the Contact page.
If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with your local data protection authority.
This Privacy Policy applies to all users of vision2030.ai. It should be read in conjunction with our Terms of Service and Cookie Policy.