Privacy Policy
How LibraryVault collects, uses, stores, and protects your information.
LibraryVault is committed to protecting your privacy and handling your information transparently, securely, and responsibly — in line with the UK GDPR, the Data Protection Act 2018, and modern enterprise privacy practice.
Last updated: 10 May 2026
Introduction
LibraryVault provides enterprise-grade governance frameworks, audit-ready templates, and operational maturity packs to MSPs, enterprises, and cloud-first IT organisations worldwide.
We take privacy seriously. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over your data. It applies to our website, customer portal, and all related services.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable international privacy laws relevant to our customers.
Information We Collect
We collect only the information needed to deliver our governance products, manage your account, support you, and meet our legal obligations.
How We Use Your Information
Your information is used for clearly defined operational, legal, and customer experience purposes — never for purposes you would not reasonably expect.
Payment Processing
All payments are processed by Stripe, a PCI-DSS Level 1 certified payment provider trusted by enterprises globally.
- LibraryVault does not store raw card data on its servers.
- Card details are entered directly into Stripe's secure, tokenised payment fields.
- We retain only transaction identifiers, billing details, and receipts for accounting and fraud prevention.
- Apple Pay and Google Pay are supported via Stripe and inherit the same security guarantees.
Stripe processes payment information under its own privacy policy, available at stripe.com/privacy.
Customer Accounts & Downloads
Your customer portal is the secure home for everything you've purchased from LibraryVault.
- A personal dashboard showing orders, downloads, invoices, and support tickets.
- Order tracking with re-download access at any time, including future updates.
- Downloads delivered through time-limited signed URLs — links cannot be hotlinked or shared externally.
- Self-service account management, including profile, password, and email preferences.
- Authenticated access protected by industry-standard session management and password hashing.
Marketing Communications
Marketing emails are entirely optional and granular — you stay in control.
- Product updates, feature releases, and changelog notifications for packs you own.
- New pack and bundle announcements aligned to your interests.
- Optional cart reminder emails if you leave items in your basket.
- One-click unsubscribe in every marketing email and granular controls in your portal.
Manage preferences any time at Portal · Email Preferences.
International Data Transfers
Our cloud infrastructure may process data in regions outside the United Kingdom and European Economic Area.
Where personal data is transferred internationally, we rely on recognised safeguards including the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, and equivalent mechanisms approved under UK GDPR.
We select reputable enterprise providers with mature security and compliance programmes (e.g. ISO 27001, SOC 2, GDPR-aligned) to ensure your data remains protected wherever it is processed.
Data Retention
We retain your information only as long as necessary for the purposes set out in this policy or required by law.
| Data type | Retention period |
|---|---|
| Customer accounts | For as long as your account is active, plus 12 months. |
| Invoices & financial records | Minimum 6 years (UK statutory retention). |
| Support history | Up to 3 years after the last interaction. |
| Download & access logs | Up to 24 months for security and audit purposes. |
| Marketing data | Until you unsubscribe or withdraw consent. |
Data Security
LibraryVault applies enterprise-grade operational security principles across our platform, infrastructure, and internal processes.
While no system can be guaranteed 100% secure, we take reasonable and proportionate technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction.
Your Rights (GDPR)
Under the UK GDPR you have a number of rights over your personal data. We make it straightforward to exercise them.
Email privacy@libraryvault.io with your request. We will respond within one calendar month, in line with UK GDPR requirements.
Children's Privacy
LibraryVault products and services are designed for businesses, IT teams, and governance professionals.
Our website, customer portal, and governance frameworks are not intended for children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact privacy@libraryvault.io and we will promptly delete it.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, or legal obligations.
The latest version date is shown at the top of this page. For significant changes that materially affect how we handle your data, we will notify you via email or a clear notice in the customer portal before the changes take effect.
Current version effective: 10 May 2026.
Contact Information
If you have any questions about this Privacy Policy or how we handle your information, our team is here to help.
Frequently asked questions
Privacy you can verify, security you can trust.
Have a privacy, compliance, or procurement question? Our team responds quickly with the documentation enterprise buyers expect.
More from LibraryVault
LibraryVault is a trading name of [COMPANY NAME] Ltd, registered in England and Wales. Registered office: [Registered office address, United Kingdom]. All rights reserved.