Privacy Policy

1. Who we are

This notice covers the VRL Core offer website at special-offer.vrlcore.com, its checkout, optional upgrade and onboarding pages. The business below is responsible for the personal information used for these purposes (the data controller).

Contact us using these details for privacy questions or to exercise your rights. This notice does not replace a separate privacy notice for a website operated by one of our customers.

2. Information we collect

• Details you provide: your name, business name, email address, telephone number, billing address or country, account details, support messages and appointment information.
• Order information: the product or plan purchased, amount, currency, payment status, transaction and customer identifiers, and billing records. Payment providers process your card information; our tracking events do not include full card numbers or security codes.
• Website and advertising information: page visits, referring links and campaign parameters, and browser/device information such as IP address, user agent, and advertising click or browser identifiers when collected. Cookies and local storage are explained below.
• Information from providers: payment confirmations, checkout/contact records and appointment information supplied by our payment, website and customer-management providers.

We need the information marked as required at checkout to process your order and provide the service. Without it, we may be unable to fulfil your request. Optional advertising permission is separate from purchasing.

3. Why we use it

We use personal information only where we have a lawful basis. The basis depends on the purpose and your relationship with us:

Orders, access, billing and customer support

To take steps you request before a contract and perform our contract with you. Where you represent a business customer, our legitimate interest is to manage that business relationship and deliver its service.

Security and service administration

Our legitimate interests in protecting accounts, preventing fraud, resolving faults and operating a reliable service, balanced against your rights.

Accounts and legal requirements

Compliance with applicable tax, accounting and other legal obligations.

Advertising tracking and measurement

Consent where required, including for advertising cookies and similar storage/access technologies. This helps us understand ad performance and connect purchases with advertising interactions.

Promotional messages

Consent where required, or legitimate interests where the law permits business marketing or an existing-customer exception and its conditions are met. You can object or unsubscribe at any time.

Our advertising tools may help select audiences or personalise advertising. We do not use this funnel to make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who receives information

We share information relevant to each purpose with providers that help run the funnel and service:

• HighLevel / LeadConnector: hosting, checkout, customer records, appointment booking and communications.
• Stripe and applicable payment providers: payment processing, fraud prevention, billing and refunds.
• Hosting, workflow and communications providers: to operate our systems, process confirmed payment notifications, provide access and respond to you.
• Meta: advertising measurement, matching and optimisation through Meta Pixel and Conversions API, as explained below.
• Professional advisers and public authorities: where needed for accounting, legal advice, compliance or lawful requests.

Providers may process information for us or act as independent controllers for their own purposes. You can read HighLevel’s privacy policy, Stripe’s privacy policy and Meta’s privacy policy.

5. Meta advertising and purchase events

We use Meta Pixel for website activity and Conversions API for confirmed purchase events. Purchase events can include the event time, page URL, amount, currency, product/order identifiers and matching information.

For the initial purchase, matching information currently includes email address, telephone number, a customer identifier, first name, surname and country. These matching values are hashed before our server sends them to Meta. Hashing changes their format; it does not make them anonymous or prevent Meta from matching them to information it holds.

Our website and checkout providers may also collect browser identifiers such as _fbp and _fbc, IP address and user agent. These fields are not currently included in our custom server Purchase event. Meta Pixel may collect browser/device and activity information separately when it runs.

Meta uses information under its terms and privacy policy to match activity, measure ads and support advertising delivery. You can review your preferences in Meta Ad Preferences and contact us about our use of your information.

6. Cookies, local storage and your choices

Checkout, security and account functions may use storage necessary to deliver the service you request. Advertising cookies and similar technologies serve a separate purpose and require your prior permission where applicable law requires it.

• _fbp and _fbc are Meta browser and ad-click identifiers used when available for advertising measurement. Actual expiry depends on the provider and browser.
• vrl_click_context_v2 stores campaign and click information with a 30-day expiry check. An expired entry may remain stored until cleared, but our code does not reuse it after expiry.
• fb_external_id stores a generated visitor identifier in local storage. Our current code sets no automatic expiry; it remains until cleared by you, the browser or the site.

Reading this notice, continuing to browse or accepting the Terms of Service is not advertising consent. You can refuse optional advertising tracking without losing the ability to purchase, and withdraw permission by contacting us or using any consent controls provided on the site.

Your browser can also block or clear cookies and local storage. This may affect saved preferences or checkout functions. Browser settings and Meta Ad Preferences do not replace any consent choice required on this website.

7. International processing

Some providers operate in other countries, including the United States, so your information may be processed outside the UK or your country of residence. Where applicable law requires safeguards, transfers must use an applicable adequacy decision or appropriate contractual safeguards and any additional measures required. Contact us for details of the providers, locations and safeguards applicable to your information, or how to obtain a copy.

8. How long we keep information

We keep order and billing records for the period needed to meet tax/accounting duties, handle refunds, disputes and legal claims. We keep account, onboarding and support information while needed to provide and administer your service, then delete or anonymise it when it is no longer needed, subject to legal requirements.

We assess retention by the purpose, sensitivity and amount of information, our legal duties and any unresolved request or dispute. Cookie/local-storage criteria are described above; providers may retain information under their own policies. We may retain a minimal suppression record to respect a request not to receive marketing.

9. Your privacy rights

Depending on the law and the basis for processing, you may ask to access, correct or erase your information, restrict its use, receive a portable copy, or object to processing. You have the right to object to direct marketing. Where we rely on consent, you can withdraw it at any time; this does not affect earlier lawful processing.

Contact us using the details above. We may need to verify your identity. Rights are subject to applicable legal conditions; we normally respond within one month and will explain any permitted extension or reason we cannot fulfil a request.

You can complain to the UK Information Commissioner’s Office (ICO) at any time, or to your local data-protection authority where applicable. We would also welcome the chance to address your concern directly.

10. Security and updates

We use measures designed to protect information and limit access to people and providers that need it. No internet service can guarantee complete security.

We may update this notice to reflect changes in our practices or legal requirements. The date above identifies the current version; we will provide additional notice of significant changes where required.