Privacy Policy

The data controller responsible for the personal data collected through this landing page and our Sites is:

For the purposes of the GDPR, Discover Vend Limited is the data controller responsible for the personal data described in this policy, unless stated otherwise.

The technical processing of form submissions, including CRM storage and follow-up communication, is carried out by:

Where a business customer deploys Tool Vend or Discover Vend hardware and software, we may also process data on that customer's behalf as a data processor (for example, tool check-out logs or vending transaction data tied to their staff). In that context, our customer is the data controller and we process data under their instructions.

Data you provide directly

• Contact and demo request forms on our Sites (full name, company name, email address, phone number, number of sites, and any message you include)
• Email correspondence with our team
• Information provided during a sales call, demo, or platform trial

Data collected automatically

• Technical information such as IP address, browser type, device type, and operating system
• Usage data such as pages visited, referring URL, and time spent on the Sites

We do not sell personal data. We share data only with the following categories of recipients, where necessary:

• Service providers such as Air Lift (CRM), hosting providers, and email delivery services
• Distribution and reseller partners who may follow up on enquiries originating in their territory
• Professional advisers such as legal, accounting, or compliance advisers
• Authorities, where required by law, regulation, or valid legal process

Any third party processing personal data on our behalf is bound by a data processing agreement consistent with GDPR requirements.

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure an adequate level of protection, such as the European Commission's Standard Contractual Clauses, or transfers to jurisdictions recognised as providing adequate protection.

• Demo requests and enquiries that do not convert into a customer relationship are retained for a reasonable follow-up period and then deleted or anonymised
• Customer account and platform data is retained for the duration of the commercial relationship and afterward as required for legal, accounting, or contractual purposes
• Data may be kept longer where required by law or to resolve disputes

Our Sites use cookies and similar technologies to operate correctly, remember preferences, and understand how visitors use our Sites, including cookies set by third-party providers where our forms are embedded. Where non-essential cookies are used, we will request your consent in line with applicable law. You can control or disable cookies through your browser settings, though some features may not function properly as a result.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls, encryption in transit, and restricting data access to personnel who need it to perform their role. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to maintain safeguards appropriate to the risk.

If you are located in the EEA or UK, you have the following rights over your personal data, subject to certain exceptions:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data in certain circumstances
• Restriction — request that we limit how we use your data
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest or for direct marketing
• Withdraw consent — where processing is based on consent, at any time

To exercise any of these rights, contact us using the details in section 13.

Our Sites and services are directed at businesses and professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be reflected on this page.

If you have questions about this Privacy Policy or how we handle your personal data, contact us at:

If you believe your rights have been infringed, you may lodge a complaint with the Irish Data Protection Commission (DPC):

Filing a complaint with the DPC is free of charge and does not require legal representation.