Privacy policy

Last updated: 18 October 2026

This policy explains how Vendotech UK Limited collects and uses personal information when you contact us, buy or use one of our machines, or visit our website. We keep it as short and plain as we can.

1. Who we are

Vendotech UK Limited designs, manufactures and services milk and milkshake vending machines. We are the "controller" of your personal information, which means we decide how it is used.

  • Company number: 09303555, registered in England and Wales
  • Registered office: 96 Monnow Court, Thornhill, Cwmbran, NP44 5SE
  • Trading address and workshop: Unit 22, Albany Trading Estate, Newport, NP20 5NQ
  • Email: office@vendotech.com
  • Phone: 0117 911 2760

2. What information we collect

When you enquire. Your name, farm or business name, email address, phone number, postcode, the products you're interested in, and anything you tell us in your message or on the phone.

For our news emails. Your name and email address, and a record of whether you chose not to hear from us.

When you buy from us. Contact details, delivery and installation address, order details, invoices and payment records, and any finance arrangements you choose.

From your machine. Our machines connect to a remote system so that you and we can manage them. This gives us information such as the money taken, the number of sales of each product, stock levels, product and price settings, and fault and error logs. It is mainly about the machine and your business, but it may relate to you personally if you trade as a sole trader or partnership.

When we service your machine. Records of calls, visits, repairs and warranty claims.

When you visit our website. Basic technical information that our website host records automatically, such as your IP address, browser type and the pages you view.

Many of our customers are businesses. Where a farm is run by a sole trader or partnership, or you give us the details of people who work with you, that information is personal data and this policy applies to it.

3. Card payments at our machines

Card and contactless payments made at our machines are handled entirely by a separate, independent payment provider, under that provider's own agreement with the business that runs the machine. Vendotech UK Limited is not a party to that agreement.

We never receive, see, process or store card numbers or any other payment card details. The payment provider is responsible for that information, under its own privacy policy and the card industry's security standards. Questions about a card payment should go to the business running the machine or its payment provider.

4. If you buy milk from one of our machines

We don't collect the names or contact details of people who buy from our machines. The farm or business running the machine is responsible for its own sales and customers.

To support and repair machines, we can see machine data such as what was sold, when, and for how much. We do not use this to identify individual shoppers.

5. Your machine's sales figures

We treat your sales figures and takings as confidential. We use them to support and improve your machine and our service.

We will not share them, or publish anything that identifies you or your farm, without your permission. We may use combined or anonymised figures, for example to describe typical results in our marketing.

6. How we use it, and why we're allowed to

How we use personal information and the lawful basis for each use
What we doLawful basis
Reply to enquiries and prepare quotesSteps you've asked us to take before a contract, and our legitimate interest in responding to customers
Build, deliver, install and set up your machinePerforming our contract with you
Monitor, support, service and repair your machine, including remotelyPerforming our contract, and our legitimate interest in keeping machines working well
Keep accounts and tax recordsLegal obligation
Email customers, and people who have asked us for a quote, occasional news about our own similar products and servicesLegitimate interest. You can opt out on our quote form, by replying to any email, or with the unsubscribe link in every email
Email anyone else who asks to hear from usYour consent, which you can withdraw at any time
Use anonymised sales figures to describe typical resultsLegitimate interest
Keep our website secure and workingLegitimate interest

Every marketing email we send includes an unsubscribe link. We will never sell your information.

7. Who we share it with

Only where needed, and only with:

  • IT, email and website hosting providers
  • the email service we use to send news and offers
  • the provider of the remote management system used by our machines
  • finance providers, if you choose to buy on finance
  • banks, for payments you make to us
  • couriers and hauliers who deliver machines
  • our accountants and professional advisers
  • authorities, regulators or courts, where the law requires it

These organisations may only use your information to provide their service to us. If our business is ever sold or restructured, your information may pass to the new owner, who must use it in line with this policy.

8. Transfers outside the UK

Some of our service providers may store information outside the UK. When they do, we make sure it is protected, for example by using countries the UK recognises as having adequate protection, or approved contract terms.

9. How long we keep it

  • Enquiries that don't lead to an order: up to 2 years
  • Customer, order and invoice records: 6 years after the end of the financial year they relate to, as required for tax
  • Machine and service records: for as long as we support the machine, then up to 6 years
  • Marketing list: until you unsubscribe. We then keep only your email address on a do-not-contact list, so we don't email you again by mistake

10. Keeping it secure

We use appropriate technical and organisational measures to protect your information, and limit access to the people who need it. If a data breach affects your rights, we will tell you and, where required, the Information Commissioner's Office.

11. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the information we hold about you
  • ask us to correct anything that is wrong
  • ask us to delete your information
  • ask us to limit how we use it, or object to how we use it
  • ask us to send your information to another organisation
  • opt out of marketing, or withdraw your consent, at any time

Some rights only apply in certain situations. To use any of them, email office@vendotech.com. We'll reply within one month.

12. Cookies and other websites

Our website only uses cookies that are needed for it to work. If we add analytics or other optional cookies in future, we'll ask for your consent first and update this policy.

Our website loads its fonts from Google Fonts. To do this, your browser connects to Google, which receives your IP address. Google says it does not use this to build profiles of visitors. You can read more in Google's privacy policy.

Enquiries sent through our website form are emailed to us via our website hosting provider, which also keeps a backup copy on its secure servers.

Our website may link to other websites. We aren't responsible for how they handle your information, so please read their privacy policies.

Our products and website are intended for businesses, not children.

13. Complaints

If you're unhappy with how we've handled your information, please contact us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

14. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.