01Scope

This Privacy Policy applies to personal data we process when you visit our website, place an order through our online shop, request a quote, become a dealer or distributor, interact with our customer support, or use a vending machine, smart locker or controller supplied by us at a host location.

It does not cover third-party websites or services we link to, or the independent data practices of host businesses where our machines are installed.

02Information we collect

Information you give us

• Contact and account details — name, company, role, email, phone and address.
• Enquiry and order details — products of interest, quantities, delivery address and order history.
• Payment details — processed by our payment partners; we do not store full card numbers.
• Dealer and recruitment information — business details, documents and, for job applicants, CV and references.
• Communications — messages you send us by email, WhatsApp, web form or phone.

Information we collect automatically

• Device and usage data — IP address, browser type, pages viewed and referring links.
• Cookies and similar technologies (see Section 10).

03Data from connected machines

Our IoT-enabled machines generate operational data such as stock levels, vend events, transaction status, machine health and uptime. Most of this is product and device telemetry rather than personal data. Where a transaction involves UPI, RFID or WhatsApp ordering, we may process a limited transaction reference or contact identifier solely to complete the purchase, confirm dispensing and handle refunds. We do not use machine telemetry to identify individual end-users for marketing.

04How we use your information

• To respond to enquiries, prepare quotes and provide products and support.
• To process orders, payments, deliveries and refunds.
• To operate, maintain and improve our machines, dashboards and OTA updates.
• To manage dealer relationships and evaluate job applications.
• To send service updates and, where permitted, marketing you can opt out of.
• To detect and prevent fraud and to meet legal and tax obligations.

05Our basis for processing

We process personal data on the basis of your consent, to perform a contract with you, to comply with legal obligations, and for our legitimate business interests in operating and improving our products. Where the law requires consent — for example for certain marketing — we obtain it and you may withdraw it at any time.

06How we share information

We share personal data only as needed with: payment processors and logistics partners to fulfil orders; cloud, hosting and analytics providers that support our website and dashboards; professional advisers; and authorities where required by law. We require these parties to protect data and use it only for the purposes we specify. We do not sell your personal data.

07Data retention

We keep personal data only as long as needed for the purposes above, including to meet legal, accounting and warranty requirements, after which we delete or anonymise it.

08Security

We use technical and organisational measures — including access controls, encryption in transit, secured machine communications and regular updates — to protect personal data. No system is completely secure, so we cannot guarantee absolute security, but we work to reduce risk and respond promptly to incidents.

09Your rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, and withdrawal of consent. You may also object to or restrict certain processing and ask us about how your data is handled. To exercise any right, contact us using the details in Section 13. We may need to verify your identity before acting.

10Cookies

We use essential cookies to run the website and shop, and, with your consent, analytics and advertising cookies to understand traffic and measure campaigns. You can control cookies through your browser settings or our cookie banner. Disabling some cookies may affect how parts of the site work.

11Children

Our website and shop are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12Changes to this policy

We may update this policy from time to time. We will post the revised version here with a new “Last updated” date, and for material changes we will take reasonable steps to notify you.

13Contact us

Questions or requests about this policy or your data can be sent to:

NCCode Vend Systems LLP (VendMama)
Coimbatore, Tamil Nadu, India
Email: privacy@vendmama.com
Web: www.vendmama.com