Privacy Policy

What happens with personal data when you visit this website, hold a VipUp account, or order from an online shop that uses VipUp.

Draft, not a legal text. This version has not yet been legally reviewed and is not in force.

Controller

VipUp GmbH, Jungfernstieg 44, 20354 Hamburg, Germany, Email: hello@vip-up.com

This website

This website is pre-built static HTML. It sets no cookies, runs no analytics, shows no advertising and loads nothing from third parties. All fonts are served directly from our own host.

When you open a page, the web server processes technical request data (IP address, timestamp, requested path, browser) to deliver the page and protect against abuse (Art. 6(1)(f) GDPR). Our hosting provider and server log retention period will be specified here before public launch.

“Log in” and “Start free” take you to the account interface at app.vip-up.com, where the following section applies.

When you email us

If you send us an email, we process your message solely to reply to your enquiry (Art. 6(1)(b) or (f) GDPR) and delete it afterwards unless statutory retention obligations apply.

Your VipUp account

1. What we store for your account

Your sign-in email address, company name, shop URL, chosen language and form of address, accepted Terms version and timestamp, settings, and credit ledger entries. Your shop URL is stored as a reference only and is not fetched automatically.

2. Passwordless sign-in

To sign you in, we send an email link valid for 10 minutes and a single use. If a link for a new address is opened without completing registration, the temporary record is deleted after 24 hours. Your session uses a single cookie strictly required for authentication.

3. Research checks

The shop is the controller for buyer checks; VipUp processes them on the shop’s behalf under the Data Processing Agreement. Results are deleted after the configured retention period, and after 90 days at the latest.

4. What we do not do

No advertising, no tracking, no third-party embeds on our pages. Research results are never shared across shops.

5. Your rights

Access, rectification and erasure: you can delete your account at any time in settings, and update your company name, shop URL, language and form of address there.

When a shop checks your order

The shop where you placed your order is the controller for buyer checks. VipUp acts on the shop’s instructions and only uses public details that you share yourself. You can object at any time: How to opt out.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Write to us at hello@vip-up.com.

You also have the right to lodge a complaint with our supervisory authority: The Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.