Privacy Policy
This policy explains what personal data we collect through https://vorpp.com, why we collect it, who we share it with, and what rights you have.
The controller of your personal data is Vorpp FZCO, Dubai, United Arab Emirates, trading as Vorpp Capital. You can reach us about anything in this policy at info@vorpp.com.
We take the position that everyone should get the same standard of protection, so we apply the requirements of the UAE Personal Data Protection Law and, for visitors in Europe and the United Kingdom, the GDPR and UK GDPR, to all of our users.
1. What we collect
Information you give us
| What | When |
|---|---|
| Email address | Registering an account, requesting the eBook, joining the TradeOS waitlist, subscribing to the newsletter |
| Name | Optionally when registering; when applying to join the team |
| Password | Registering an account — stored only as a cryptographic hash, never in readable form |
| Country | When applying to join the team |
| Anything you write to us | Emails, applications, support messages |
Information collected automatically
| What | Purpose |
|---|---|
| Pages viewed, referring site, approximate country, device and browser type | Understanding which content is useful and how the Site performs |
| Course progress and material accessed, if you have an account | Showing you where you left off |
| Security and abuse signals, including IP address where necessary | Protecting the Site and accounts from attack |
Our website analytics are privacy-focused: they are aggregated, they do not build a profile of you, they do not follow you across other websites, and they do not require advertising cookies.
We do not collect payment card details. Membership is free and we operate no payment processing. If that changes, this policy will be updated before any payment is taken, and card details would in any case go directly to a regulated payment provider and never to us.
We do not knowingly collect data from anyone under 18.
2. Why we use it, and on what legal basis
| Purpose | Basis |
|---|---|
| Creating and running your account, and giving you access to member material | Performance of a contract with you |
| Sending the confirmation email required to activate your account | Performance of a contract with you |
| Delivering the eBook or other material you asked for | Performance of a contract with you |
| Sending our newsletter and notifications about new content | Your consent, which you can withdraw at any time |
| Telling waitlist members when TradeOS Pro launches | Your consent |
| Keeping the Site secure, preventing abuse and fraud | Our legitimate interest in protecting the Service |
| Understanding which content works, and improving it | Our legitimate interest in running and improving the Service |
| Meeting legal obligations | Compliance with law |
You are never required to receive marketing. Every newsletter carries a one-click unsubscribe link, and unsubscribing does not affect your account or your access to anything.
3. Who we share it with
We do not sell your personal data. We do not rent it, trade it, or hand it to advertisers. We have never done so and have no intention of doing so.
We use a small number of service providers to run the Site. They process data only on our instructions, only for the purpose we engage them for, and they are bound by contract to protect it:
| Provider | What it does | Where |
|---|---|---|
| Cloudflare | Hosting, content delivery, DNS, protection against attack | Global |
| Supabase | Account database and authentication | EU |
| Kit | Newsletter and email list | USA |
| Brevo | Sending account and confirmation emails | EU |
| Bunny.net | Course video delivery | EU / global |
We may also disclose personal data where we are legally required to, where necessary to establish, exercise or defend legal claims, or to protect the rights and safety of our users or the public.
If our business is ever sold or reorganised, your data may transfer as part of it, subject to the protections in this policy.
4. International transfers
We are based in the United Arab Emirates and some of our providers are located elsewhere, including the European Union and the United States. This means your personal data may be transferred outside your country of residence.
Where data is transferred out of the EEA or the UK, we rely on appropriate safeguards — Standard Contractual Clauses or an adequacy decision — so that your data continues to receive an equivalent level of protection.
5. How long we keep it
| Data | Retention |
|---|---|
| Account data | While your account is open, then deleted within 90 days of closure |
| Newsletter subscription | Until you unsubscribe, then removed from active lists; a suppression record is kept so we do not email you again by mistake |
| Waitlist entries | Until the product launches or you ask to be removed |
| Correspondence | Up to 3 years, so we can deal with follow-up questions |
| Aggregated analytics | Retained indefinitely in aggregated form, which does not identify you |
6. Security
We take the protection of your data seriously, and the Site is built so that there is as little to steal as possible.
- All traffic is encrypted in transit with HTTPS/TLS.
- Passwords are stored only as salted cryptographic hashes; nobody at Vorpp can see or recover your password.
- Account data is held by a specialist provider with encryption at rest, isolated per-user access rules and audited infrastructure.
- The public website is served as static files with no database behind it, which removes the most common categories of website attack entirely.
- Administrative access is protected by two-factor authentication and limited to those who need it.
- The Site sits behind Cloudflare, which filters malicious traffic and denial-of-service attacks before they reach it.
No system can be guaranteed completely secure, and we cannot promise absolute security. If a breach occurs that is likely to affect your rights, we will notify the relevant authority and, where required, you, without undue delay.
7. Your rights
Whatever your country of residence, you may ask us to:
- Access — give you a copy of the personal data we hold about you
- Correct — fix anything inaccurate or incomplete
- Delete — erase your data, subject to any legal obligation to keep it
- Restrict or object — pause or stop a particular use, including any processing based on legitimate interest
- Port — send you, or another provider, a machine-readable copy of the data you gave us
- Withdraw consent — at any time, for anything based on consent, without affecting what was lawful before
Write to info@vorpp.com. We will respond within 30 days. We do not charge for this and we will not treat you any differently for asking.
If you are in the EEA or the UK and you are unhappy with our response, you have the right to complain to your national data protection authority. We would rather you came to us first so we can put it right.
8. Changes
We may update this policy. The current version is always on this page with the date it last changed. Where a change materially affects how we use your data, we will notify registered members by email before it takes effect.
9. Contact
Vorpp FZCO Dubai, United Arab Emirates info@vorpp.com