← Back to home

Vascan — Privacy Policy

Effective Date: January 2026 · Last Updated: March 1, 2026

Vascan Technology Limited ("Vascan", "we", "us", or "our") values your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the Vascan platform and services, including:

  • Vascan Shop
  • Vascan for Business
  • Vascan for Cre8ives
  • our website(s), forms, landing pages, communications, and related services (collectively, the "Platform")

By using Vascan, creating an account, or interacting with our services, you acknowledge that your personal data will be handled as described in this Privacy Policy.

You can also review our Terms of Service and Cookie Policy.

Who We Are

Data Controller: Vascan Technology Limited

General Support Email: info@vascan.io

Registered Address: 14, God in Action Avenue, Olodi Apapa, Lagos.

For the purposes of applicable data protection laws, Vascan is generally the data controller of the personal data described in this Privacy Policy, except where we clearly act as a processor/service provider on behalf of a business user.

Scope of This Privacy Policy

This Privacy Policy applies to personal data we collect when you:

  • visit Vascan websites or landing pages,
  • create or use a Vascan account,
  • list, view, buy, sell, or inquire about artworks (Vascan Shop),
  • create/manage a business profile, events, or programmes (Vascan for Business),
  • create/manage a creative portfolio/profile (Vascan for Cre8ives),
  • join waitlists, newsletters, webinars, or events,
  • contact support, make complaints, or communicate with us,
  • interact with our emails, ads, or social channels linked to Vascan.

This policy does not apply to third-party websites, services, or platforms that may be linked from Vascan (for example, Instagram, payment processors, logistics providers, or external websites). Those are governed by their own privacy policies.

The Personal Data We Collect

We may collect different categories of personal data depending on how you use Vascan.

Information You Provide Directly

A. Account and Identity Information

When you sign up for Vascan for Cre8ives, Vascan for Business, or other account-based services, we may collect:

  • full name
  • email address
  • phone number (where requested)
  • username
  • password (stored securely in hashed/encrypted form through our authentication systems)
  • country/city/location
  • account type (e.g., creative, business, admin)

B. Profile and Portfolio / Business Information

If you create a profile on Cre8ives or Business, we may collect:

  • profile photo / brand logo
  • bio/about information
  • discipline/profession/category
  • social media links / website links
  • portfolio content (works, projects, collections)
  • event/programme information
  • images, descriptions, metadata (e.g., title, year, medium, dimensions, amount/price if relevant)
  • contact/enquiry preferences

C. Shop and Transaction Information

When using Vascan Shop (or where commerce/checkout features exist), we may collect:

  • order details
  • billing details
  • delivery/shipping address
  • transaction records
  • item details
  • customer support or dispute information related to transactions

Note: Payment card details are typically processed by third-party payment providers. Vascan may receive transaction confirmations, payment status, and limited billing metadata, but usually does not store full card details (subject to integration design).

D. Communications and Support Information

When you contact us, submit feedback, or respond to our outreach, we may collect:

  • your messages/emails
  • support request details
  • attachments/screenshots you send
  • complaint/refund/IP notice details
  • survey/webinar/event responses

E. Marketing / Waitlist / Newsletter Information

When you join a waitlist, subscribe to a newsletter, or register for an event/webinar, we may collect:

  • name
  • email address
  • organisation or creative discipline (optional)
  • interests/preferences (where requested)
  • engagement data (e.g., email opens/clicks, where legally permitted)

Information Collected Automatically

When you visit or use Vascan, we may automatically collect technical and usage data such as:

  • IP address
  • browser type and version
  • device type and operating system
  • referral source (how you arrived at the site)
  • pages viewed and actions taken
  • timestamps and session activity
  • clicks, scroll interactions, and navigation behaviour
  • crash logs and performance diagnostics
  • approximate location (derived from IP, where applicable)
  • cookie identifiers / similar tracking identifiers

This data helps us understand how the Platform is used, improve performance, diagnose issues, and secure the service.

Information from Third Parties

We may receive information from third parties such as:

  • payment processors (payment status, billing confirmation)
  • analytics providers
  • customer support tools
  • email delivery/CRM tools
  • social login providers (if enabled)
  • fraud/security tools
  • marketing/advertising partners (where applicable)

We may also receive publicly available information where relevant to support profile verification, business listings, or fraud prevention.

How We Use Your Personal Data

We use personal data for the following purposes:

To Provide and Operate Vascan Services

  • create and manage accounts
  • authenticate users and maintain login sessions
  • host and display profiles, portfolios, listings, projects, and programmes
  • enable sharing features and visibility settings
  • support inquiries, communication, and customer support
  • process transactions, billing, and subscription access (where applicable)

To Improve the Platform

  • analyse usage and product performance
  • identify bugs and technical issues
  • improve UX/UI, navigation, and feature design
  • test new features and optimise workflows
  • understand what content and tools are most useful

To Communicate with You

  • send account and service-related emails (e.g., verification, password reset, updates)
  • provide onboarding information
  • respond to support messages and complaints
  • send product notices (including changes to policies or terms)

For Marketing and Community Engagement

Where permitted by law (and subject to your preferences), we may use your data to:

  • send newsletters, waitlist updates, social media campaigns, webinar announcements, and product launches
  • share relevant product news across Vascan Shop, Business, and Cre8ives
  • measure campaign effectiveness (e.g., email open/click rates)

You can opt out of marketing communications at any time.

For Security, Integrity, and Fraud Prevention

  • monitor suspicious activity
  • detect unauthorised access or abuse
  • enforce platform rules and Terms of Service
  • protect users and Vascan from fraud, spam, and security incidents

For Legal and Compliance Purposes

  • comply with legal obligations
  • respond to lawful requests from authorities
  • investigate complaints (including IP complaints and refund disputes)
  • establish, exercise, or defend legal claims

Legal Bases for Processing (Where Applicable)

Depending on the law that applies to your personal data, we process data on one or more of the following legal bases:

Contractual Necessity

We process data where necessary to provide the Platform/services you requested (e.g., account creation, profile hosting, subscription access, transactions).

Legitimate Interests

We process data where necessary for our legitimate interests, provided those interests do not override your rights and freedoms. Examples include:

  • improving the Platform
  • platform analytics
  • fraud prevention and security
  • customer support
  • product development and testing
  • internal reporting and operations

Consent

We rely on your consent where required, for example: certain marketing communications; certain cookies/tracking technologies (where required by law); optional fields or features requiring explicit consent.

You may withdraw consent at any time, but this does not affect processing already carried out lawfully before withdrawal.

Legal Obligation

We process data where necessary to comply with applicable laws, regulatory requirements, lawful requests, or enforcement obligations.

Product-Specific Privacy Notes

Vascan for Cre8ives (Portfolio Profiles)

If you use Cre8ives:

  • your profile content and portfolio materials may be public, private, or shared by link depending on your selected settings and product features;
  • public content may be viewed by other users and may be indexed by search engines;
  • content shared by link may be accessible to anyone with the link (subject to your settings and platform controls);
  • you are responsible for choosing appropriate visibility settings for your work and profile.

Vascan for Business (Organisational Profiles)

If you use Vascan for Business:

  • organisation profiles, programmes, and events may include staff/representative contact details and business information;
  • team access (if available) may involve multiple users under one organisation account;
  • the primary account holder/admin is responsible for managing permissions and ensuring appropriate publication of information.

Vascan Shop (Discovery and Commerce)

If you use Vascan Shop:

  • transaction-related data may be used to process payments, manage orders, resolve disputes, and provide support;
  • shipping/delivery details may be shared with relevant fulfilment/logistics providers where needed;
  • listing information may be visible publicly to support artwork discovery and purchasing decisions.

Public Content and Search Indexing

Because Vascan supports professional presentation and discovery, some user content may be made publicly visible.

Publicly visible content may include:

  • names/usernames
  • profile images
  • bios
  • portfolio works/projects/collections
  • business names and events
  • artwork listings and metadata

If your profile/listings are public: search engines (e.g., Google) may index them; third parties may view, copy, or reference publicly visible information.

Vascan cannot fully control third-party indexing or re-sharing of information already made public. You can reduce visibility by changing your privacy settings (where available).

How We Share Personal Data

We do not sell personal data to advertisers.

We may share personal data in the following circumstances:

Service Providers (Processors)

We may share data with trusted vendors that help us operate the Platform, such as providers for:

  • web/app hosting and infrastructure
  • databases and cloud storage
  • analytics and product monitoring
  • email delivery and CRM
  • customer support tools
  • payment processing
  • fraud detection and security
  • file/media storage
  • communications and notifications

These providers are expected to process data only on our instructions and with appropriate safeguards.

Other Users / Public Display

Where your content is intended for public display or sharing (e.g., profile pages, listings, public portfolios), it may be visible to:

  • visitors to the Platform
  • other users
  • search engines (if indexed)
  • people with a shared/private link (where link-sharing is enabled)

Legal, Regulatory, and Protection Purposes

We may disclose personal data if required to:

  • comply with law or legal process
  • respond to lawful requests by public authorities
  • enforce our Terms of Service
  • investigate fraud, abuse, or security incidents
  • protect the rights, property, or safety of Vascan, our users, or others

Business Transfers

If Vascan is involved in a merger, acquisition, financing, restructuring, or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.

International Data Transfers

Vascan serves users in Nigeria, across Africa, and potentially globally. Some of our service providers may process data in countries outside your country of residence.

Where personal data is transferred internationally, we will take reasonable steps to ensure appropriate safeguards are in place, which may include: contractual protections, vendor due diligence, security controls, and other lawful transfer mechanisms required by applicable law.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide the Platform and account access,
  • maintain records of transactions and subscriptions,
  • resolve disputes and complaints,
  • enforce our Terms,
  • comply with legal, accounting, tax, and regulatory obligations,
  • improve platform safety and security.

Retention periods may vary depending on the type of data and the purpose of processing.

Examples: Account/profile data: retained while your account is active and for a reasonable period after closure (subject to legal/operational needs). Transaction records: retained for accounting, tax, and dispute resolution purposes. Support communications: retained as needed to handle issues, training, and quality control. Marketing records: retained until you unsubscribe/withdraw consent or as required by law.

Where possible, we may delete, anonymise, or de-identify data that is no longer required.

Your Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal data, including the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your personal data (subject to legal/operational exceptions)
  • Object to certain processing
  • Restrict processing in certain circumstances
  • Withdraw consent (where processing is based on consent)
  • Request portability of certain data (where applicable)
  • Opt out of marketing communications

How to exercise your rights

You can contact us at info@vascan.io with your request.

To protect your account and data, we may ask you to verify your identity before acting on a request.

Limits / Exceptions: Some rights may be limited where: we are legally required to retain data; the request would affect the rights of others; the data is needed for fraud prevention, security, or legal claims; or another lawful exception applies.

Marketing Communications and Preferences

If you subscribe to newsletters, waitlists, or updates, we may send you: product announcements, launch updates, webinar/event invitations, educational content, community updates.

You can opt out at any time by: clicking the unsubscribe link in emails (where available), or contacting us at info@vascan.io.

Even if you opt out of marketing, we may still send service-related messages (e.g., password reset, billing notices, account/security alerts).

Cookies and Similar Technologies

Vascan uses cookies and similar technologies to: keep users logged in, remember preferences, understand usage and performance, improve the Platform, support security and fraud prevention, and (where applicable) measure marketing performance.

Please see our Cookie Policy for more detail, including cookie types, purposes, and how to manage your preferences.

Data Security

We use reasonable administrative, technical, and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

These measures may include:

  • secure authentication controls
  • encryption in transit (and where applicable at rest)
  • access controls and least-privilege practices
  • monitoring and logging
  • backups and recovery procedures
  • vendor security reviews (where practical)

However, no system is completely secure. You are also responsible for: using a strong password, protecting your login credentials, and notifying us if you suspect account compromise.

Children and Young Users

Vascan is designed for professional and commercial use in the art ecosystem and is not intended for unsupervised use by young children.

If we learn that we have collected personal data in a way that violates applicable law regarding minors/children, we will take steps to delete or restrict that data as required.

If you believe a child has provided personal data improperly, contact us at info@vascan.io.

Sensitive Personal Data

Please do not submit sensitive personal data (for example, health data, biometric data, government ID numbers, or other highly sensitive information) unless specifically requested and necessary for a legitimate operational/legal purpose. If you submit sensitive data to us without necessity, you do so at your own discretion and subject to applicable law.

Third-Party Platforms and Embedded Content

Vascan may link to or embed content/features from third-party services (e.g., social platforms, maps, videos, payment gateways). Your interaction with those services is governed by their own terms and privacy policies. We are not responsible for third-party privacy practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect: changes in our services, legal/regulatory updates, operational practices, or improvements in data handling.

When we make changes: we will update the Last Updated date; if changes are material, we may provide additional notice (e.g., website banner, email, or account notification).

Your continued use of Vascan after the effective date of an updated Privacy Policy means you acknowledge the updated policy.

Complaints and Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Support Contact: info@vascan.io
Company: Vascan Technology Limited
Address: 14, God in Action Avenue, Olodi Apapa, Lagos.

If applicable under your local law, you may also have the right to lodge a complaint with a relevant data protection authority/regulator.