Last updated: 3 October 2026
1. Introduction
This Privacy Policy explains how Vandera.app Ltd ("Vandera", "we", "us" or "our") collects, uses, stores and protects personal data when you use the Vandera mobile application (the "App"), our website and any related services (together, the "Service").
Vandera is a platform connecting self contained campervan and motorhome owners with independently operated overnight locations across the United Kingdom and Europe.
We are committed to protecting your personal data and being transparent about how we handle it.
This Privacy Policy explains:
• What personal data we collect
• Why we collect and use it
• How we store and protect it
• When we may share it with other organisations
• How long we keep it
• The rights you have in relation to your personal data
This Policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as the EU General Data Protection Regulation (EU GDPR), Regulation (EU) 2016/679, where applicable.
Vandera.app Ltd is the data controller responsible for the personal data we collect and use through the Service.
2. Who We Are
Vandera.app Ltd is the data controller responsible for your personal data collected through the Service.
Registered company name: Vandera.app Ltd
Company number: 16961305
Registered office: Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ
Email: hello@vandera.app
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.
3. Information We Collect
We collect the information needed to provide and operate Vandera and to support the community features of the Service.
3.1 Account Information
When you create a Vandera account, we collect information needed to create and manage your account.
This may include:
• Username
• Full name
• Email address
• Password
• Profile information you choose to provide
• Profile photograph, where you choose to add one
Your password is securely stored using appropriate password hashing and is not stored by us in plain text.
You must be at least 18 years old to create an account and use Vandera.
3.2 Vehicle Information
When you create a Vandera account, we ask for information about the vehicle or camping setup you use when travelling.
This may include:
• Vehicle type
• Vehicle height
• Vehicle length
• Vehicle registration number
We use this information to help provide relevant location information, including identifying locations that may be suitable for different vehicle types and dimensions and highlighting restrictions that may affect access.
For example, vehicle dimensions may be used to help identify potential height restrictions or other access limitations.
You are responsible for ensuring that the vehicle information you provide is accurate and kept up to date.
3.3 Location Data
With your permission, Vandera may access your device's location to provide location based features, including:
• Showing nearby locations
• Calculating distances
• Supporting map searches such as "search this area"
• Helping you find relevant locations while travelling
To show places near you, such as places to eat, fuel stations and attractions, the App sends your device's location coordinates to Google Maps Platform as part of a place search. See section 5 for more about Google.
You can control location permissions through your device settings at any time. You can also turn off automatic location sharing in the App under My Profile → Settings. When it is off, the App will not fetch your location automatically, but it will still use your location if you tap the button to centre the map on your position.
We may also process the coordinates and other details of locations submitted to the Vandera community map, including photographs and other information you choose to provide about those locations.
3.4 User Generated Content
You may choose to provide information and content through Vandera, including:
• Location submissions
• Photographs
• Written reviews
• Ratings
• Favourites
• Saved trips
• Reports about locations
• Other information you choose to submit through community features
Some of this information is intended to be visible to other users of the Service.
For example, submitted locations, reviews, ratings and photographs associated with community locations may be visible to other users.
Please consider carefully what personal information you include in content that you submit publicly or make available to other users.
3.5 Check In Data
Vandera may allow you to check in at a location.
A check in can indicate to other users that the location is currently occupied.
Active check in information may be visible to other users while the check in remains active.
Check in data automatically expires after 48 hours.
3.6 Usage and Technical Information
We collect limited technical and usage information needed to operate and improve the Service.
This may include information such as:
• Device type
• Operating system version
• Basic information about how features of the App are used
• Interactions with external links within the App, such as partner offers or social media links
Vandera does not currently use third party analytics or monitoring SDKs such as Google Analytics, Firebase, Mixpanel or Sentry.
The limited link interaction information described above is recorded directly in our own database and is not sent to a third party analytics provider.
We do not use this information to create behavioural profiles or track you across other services.
4. How We Use Your Information
We use personal data for the following purposes and, where applicable, on the following legal bases under UK GDPR and EU GDPR.
Providing and operating Vandera
We use your information to provide and operate the Service, including:
• Your account
• The map
• Location discovery
• Saved locations
• Saved trips
• Community features
Legal basis: performance of our contract with you.
Providing vehicle relevant information
We use vehicle information to help identify locations that may be appropriate for your vehicle and to highlight relevant access restrictions.
Legal basis: performance of our contract with you.
Community features
We use information you submit to provide community features such as:
• Reviews
• Ratings
• Location submissions
• Reports
• Check ins
Some of this information is visible to other users as part of the Service.
Legal basis: performance of our contract with you and, where appropriate, our legitimate interests in operating and maintaining the community platform.
Account communications
We use your email address to send essential account communications, including:
• Account verification
• Password reset emails
• Other necessary account related communications
These emails are sent using Resend, an email delivery provider, from our vandera.app domain. See section 5.
Where you have separately opted in to receive marketing or product communications, we may also use your contact details to send those communications.
Legal basis: performance of our contract for essential account communications and consent for marketing communications.
Moderation and platform integrity
We may use information you provide to moderate content, investigate reports and address inaccurate, inappropriate or potentially harmful content or locations.
Legal basis: legitimate interests in maintaining the integrity and proper operation of the Service.
Security and fraud prevention
We may process information where necessary to maintain the security of the Service, prevent misuse, investigate suspicious activity and protect users, our systems and our business.
Legal basis: legitimate interests.
Improving the Service
We may use limited usage information to understand how features are being used and to improve the Service.
Where possible, we use aggregated or pseudonymised information for this purpose.
Legal basis: legitimate interests.
Legal obligations
We may process personal data where necessary to comply with applicable laws, regulations, legal processes or lawful requests from public authorities.
Legal basis: compliance with a legal obligation.
5. Who We Share Your Information With
We do not sell your personal data.
We may share information with the following categories of recipients where necessary to provide the Service, comply with the law or protect our legitimate interests.
Supabase
We use Supabase as part of our backend infrastructure.
Supabase provides services including:
• Database infrastructure
• User authentication
• File storage
• Storage of submitted photographs and profile photographs
Our Vandera Supabase project is hosted in Frankfurt, Germany (eu-central-1).
Resend
We use Resend to deliver essential account emails, such as account verification and password reset emails.
To do this, Resend processes your email address and the content of those emails.
Our Resend sending region is Ireland (eu-west-1).
We use Google Maps Platform services for features including:
• Map display
• Place search
• Satellite imagery
• Showing places near you
When you use features that show places near you, your device's coordinates are sent to Google as part of the search request. Google may also receive technical information such as your IP address when the App loads maps.
The information processed by Google may be subject to Google's own privacy practices and terms.
Other Vandera users
Certain information you provide is intended to be visible to other users of the Service.
This may include:
• Your username or display name
• Submitted locations
• Photographs
• Reviews
• Ratings
• Active check ins
You should avoid including unnecessary personal information in content that you submit to the community.
Professional advisers, regulators and law enforcement
We may disclose personal data where reasonably necessary to:
• Obtain professional advice
• Comply with legal or regulatory obligations
• Respond to lawful requests from public authorities
• Establish, exercise or defend legal rights
• Protect the safety of users or the public
Business transfers
If Vandera is involved in a merger, acquisition, restructuring or sale of assets, personal data may be transferred as part of that transaction.
Where required, appropriate protections will be applied to personal data transferred in connection with such a transaction.
6. International Data Transfers
Your personal data is primarily stored and processed within the European Union through our Supabase project, which is hosted in Frankfurt, Germany (eu-central-1).
Germany is within the European Economic Area.
Account emails are sent through Resend from its Ireland (eu-west-1) region, which is also within the European Economic Area.
Google may process information it receives through Google Maps Platform, including location search requests, outside the United Kingdom and European Economic Area.
Where we use service providers that process personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place where required by applicable data protection law.
These safeguards may include:
• An applicable adequacy decision
• The UK International Data Transfer Agreement or UK Addendum
• EU Standard Contractual Clauses
• Another legally recognised transfer mechanism
We will only make international transfers where permitted under applicable data protection law.
7. Data Retention
We retain personal data for as long as your account remains active and for a reasonable period afterwards where necessary to:
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Protect the security and integrity of the Service
• Prevent fraud or abuse
If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required or permitted to retain certain information for legal, security or fraud prevention purposes.
Some content you submit may be retained in anonymised form where other users have relied upon it, such as community reviews or location information, in order to maintain the integrity of the community record.
Check in data automatically expires after 48 hours as part of the normal operation of the Service.
8. Your Rights
Under UK GDPR and, where applicable, EU GDPR, you may have the following rights in relation to your personal data:
• Access — the right to request a copy of the personal data we hold about you.
• Rectification — the right to ask us to correct inaccurate or incomplete information.
• Erasure — the right to request deletion of your personal data, subject to applicable legal exceptions.
• Restriction — the right to ask us to restrict processing in certain circumstances.
• Data portability — the right to receive certain personal data in a structured, commonly used and machine readable format.
• Objection — the right to object to certain processing based on our legitimate interests, including direct marketing.
• Withdrawal of consent — where processing is based on your consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.
You can exercise some rights directly through the App.
For example, you can go to My Profile → Settings → Delete account to request deletion of your account and associated data, or update your profile and vehicle information.
For other requests, or if you need assistance, contact us at: hello@vandera.app
You also have the right to lodge a complaint with a supervisory authority.
In the United Kingdom, the relevant supervisory authority is the Information Commissioner's Office (ICO).
If you are located in the EEA, you may also contact the data protection authority in the country where you live or where you believe your rights have been infringed.
9. Children's Privacy
Vandera is intended for users aged 18 and over.
You must be at least 18 years old to create an account and use the Service.
We do not knowingly collect personal data from individuals under the age of 18 for the purpose of providing an account or access to the Service.
If we become aware that an individual under 18 has created an account or provided personal data in connection with the Service, we will take appropriate steps to review the account and delete the information where we are not required to retain it.
10. Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
These measures include appropriate controls around:
• Password security
• Database access
• Row level security
• File uploads
• Access to stored information
• Account authentication
File uploads may also be subject to size and format restrictions designed to reduce security risks.
However, no method of electronic transmission or storage is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security.
11. Cookies and Similar Technologies
Vandera does not currently use third party analytics or tracking SDKs within the App.
We do not currently use services such as Google Analytics, Firebase, Mixpanel or Sentry to create behavioural profiles or track your activity across other services.
The App may record limited information about interactions with external links, such as partner offers or social media links. This information is recorded directly in our own Supabase database and is used to understand which links are being accessed and to help us improve the Service.
This information is not shared with third party analytics providers and is not used for device or behavioural profiling.
The App may also use technologies that are necessary to maintain your account, remember preferences, provide security and operate core features of the Service.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to:
• Our services
• How we process personal data
• Legal or regulatory requirements
• Our technical systems or service providers
Where changes are material, we will take reasonable steps to notify you through the App, by email or by another appropriate method.
The "Last updated" date at the beginning of this Policy shows when the Policy was most recently updated.
13. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:
Vandera.app Ltd
Bartle House
9 Oxford Court
Manchester
England
M2 3WQ
Email: hello@vandera.app