Privacy Policy

Privacy Policy

Last updated: 19.07.2026

This Privacy Policy explains how VHC Global, operated by FMA Design, collects, uses, stores, shares, and protects personal data when you visit our website, create an account, apply for a verification badge, use our dashboard, contact support, upload documents, or use any VHC Global service.

We take data protection seriously and process personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act, and other applicable data protection laws.

1. Data Controller

The data controller responsible for the processing of personal data is:

FMA Design
Schönweißstrasse 16
90661 Nürnberg
Germany

Website: https://vhc.global/
Email: info@vhc.global

For any privacy-related request, please contact us at info@vhc.global.

2. What VHC Global Does

VHC Global provides digital verification badges and public trust profiles for businesses, creators, agencies, and digital projects.

Our badge types include:

Verified Human-Created
For work, content, websites, or services created by real people or substantially reviewed by humans.

Verified AI-Generated
For work, content, websites, or services that are fully or primarily generated by artificial intelligence.

Verified AI Assisted
For work, content, websites, or services created by humans with responsible AI assistance.

To provide these services, we may process personal data submitted through registration forms, verification applications, support forms, payment processes, and account dashboards.

3. Personal Data We Collect

We may collect and process the following categories of personal data.

3.1 Account and Registration Data

When you register or create an account, we may collect:

name;
email address;
password or authentication data;
company or brand name;
account ID;
user role;
login date and account activity;
communication preferences.

3.2 Business and Verification Data

When you apply for a VHC Global badge, we may collect:

company or brand name;
website URL or domain;
business category;
country;
contact person;
contact email;
phone number, if provided;
business description;
description of how the work, content, or product is created;
badge type requested;
AI usage declaration;
public website information;
domain ownership or website connection information;
public business profile information;
verification notes;
review status;
approval or rejection decision;
badge history and expiration date.

3.3 Uploaded Documents

You may voluntarily upload documents for faster manual review, such as:

business registration documents;
proof of website ownership;
screenshots;
company-related files;
documents proving authorization to represent a business;
other supporting documents.

Please do not upload unnecessary sensitive data. If a document contains information that is not required for verification, you should redact it before uploading.

3.4 Payment and Billing Data

When you purchase or renew a badge, we may process:

selected badge type;
selected billing period;
invoice or order information;
billing name;
billing address, if required;
payment status;
transaction ID;
renewal status;
tax-related information, if required.

Payment details such as full credit card numbers are generally processed by external payment providers and are not stored directly by VHC Global unless explicitly stated.

3.5 Support and Communication Data

When you contact us, submit a support request, or send us an email, we may process:

name;
email address;
phone number, if provided;
address, if provided;
support message;
description of the issue;
attached files;
VHC ID;
company information;
communication history;
technical or order-related details.

3.6 Public Verification Profile Data

If your badge is approved, we may publish or display selected verification-related information on a public trust profile, such as:

company or brand name;
website URL;
badge type;
verification status;
verification date;
expiration date;
public badge ID or VHC ID;
short business description;
declared creation method;
public trust signals.

We do not publish private documents, internal review notes, payment details, passwords, or private support messages.

3.7 Technical Data

When you use our website or dashboard, we may automatically collect technical data such as:

IP address;
browser type and version;
device type;
operating system;
referrer URL;
pages visited;
time and date of access;
server log files;
cookie identifiers;
security logs;
error logs;
login attempts;
session information.

Technical data may be necessary for website functionality, security, fraud prevention, troubleshooting, analytics, and legal compliance.

4. Purposes of Processing

We process personal data for the following purposes:

to operate the VHC Global website;
to create and manage user accounts;
to receive and review verification applications;
to verify business identity, website ownership, public trust signals, and badge eligibility;
to assess whether a requested badge type is appropriate;
to create, display, manage, suspend, renew, or remove badges;
to create and maintain public verification profiles;
to process payments, invoices, renewals, and billing documents;
to provide customer support;
to respond to questions, complaints, and requests;
to prevent fraud, misuse, fake badges, unauthorized access, and abuse;
to maintain website security and service integrity;
to comply with legal, accounting, tax, and regulatory obligations;
to improve our services, forms, dashboard, verification process, and user experience;
to send important service-related messages, such as account, verification, badge expiration, or renewal notices.

5. Legal Bases for Processing

Under GDPR, we process personal data only where a valid legal basis applies. GDPR recognises several legal bases, including contract performance, legal obligation, legitimate interests, and consent.

Depending on the situation, we rely on the following legal bases:

5.1 Contract Performance

We process personal data when it is necessary to provide our services, including account creation, badge application, verification review, dashboard access, badge activation, public profile creation, billing, and support.

5.2 Legal Obligation

We may process and store certain data to comply with legal obligations, including accounting, tax, business recordkeeping, fraud prevention, and legal compliance obligations.

5.3 Legitimate Interests

We may process data based on our legitimate interests, including:

protecting our website and badge system;
preventing fraud and fake verification claims;
maintaining service security;
documenting verification decisions;
responding to support requests;
improving our services;
protecting our legal rights;
ensuring that badges are not misused.

We balance these interests against your rights and freedoms.

5.4 Consent

Where required, we ask for your consent, for example for certain cookies, analytics, marketing communications, or optional processing activities. Consent can be withdrawn at any time with future effect. For consent to be valid under GDPR, it must be freely given, specific, informed and unambiguous.

6. Public Verification Profiles

A key part of VHC Global is the public verification profile connected to a badge.

If you apply for and receive a badge, you understand that certain verification-related information may be publicly displayed so visitors can confirm that the badge is active and connected to the correct website.

The purpose of a public profile is transparency. It allows visitors to see whether a badge is valid, expired, suspended, or connected to a verified domain.

You must not submit personal data of other people for public display unless you have the right to do so.

7. Badge Code, Website Embeds and Verification Checks

If you use a VHC badge code or embed script on your website, technical requests may be made to VHC Global servers to display or verify the badge status.

This may involve processing technical information such as:

domain URL;
badge ID;
request timestamp;
IP address or server log data;
browser or device data;
badge display status.

This processing helps us prevent misuse, fake badges, unauthorized badge copies, expired badges, or incorrect badge display.

8. Uploaded Documents and Manual Review

Documents uploaded for verification are used only for review, fraud prevention, account support, and legal documentation where necessary.

Access to uploaded documents is restricted to authorized persons who need the information for verification, support, compliance, security, or legal purposes.

We may reject or delete unnecessary documents, especially if they contain excessive personal data or information unrelated to the verification request.

9. Payment Providers and Billing

Payments may be processed by third-party payment providers. These providers may process your payment data under their own terms and privacy policies.

We may receive payment status, transaction ID, selected plan, invoice details, and billing confirmation from payment providers, but we normally do not store full payment card details.

We may keep billing and invoice records for the period required by tax and accounting laws.

10. Cookies and Similar Technologies

Our website may use cookies, local storage, pixels, server logs, or similar technologies.

Cookies may be used for:

essential website functions;
login sessions;
security;
form functionality;
language or preference settings;
analytics;
performance measurement;
fraud prevention;
marketing, where applicable.

Essential cookies may be used without consent where they are strictly necessary for the website or service.

Non-essential cookies, such as analytics or marketing cookies, should only be used where legally permitted and, where required, after user consent.

A separate Cookie Policy or cookie banner may provide more detailed information about the cookies used on the website.

11. Analytics and Tracking

We may use analytics tools to understand how visitors use our website and to improve our services.

Depending on the tools used, analytics may process technical data such as IP address, browser data, device data, page visits, referrer URLs, and interactions.

If analytics tools are not strictly necessary, we will use them only where legally permitted and, where required, based on your consent.

12. Email Communication

We may send service-related emails, including:

account registration messages;
verification updates;
badge approval or rejection messages;
badge expiration reminders;
renewal reminders;
billing messages;
security notices;
support replies.

These service emails are necessary for the operation of our services.

Marketing emails, if used, will be sent only where legally permitted and may include an unsubscribe option.

13. Data Sharing and Recipients

We may share personal data with the following categories of recipients where necessary:

hosting providers;
IT service providers;
email service providers;
payment processors;
security and fraud prevention providers;
analytics providers, if used;
customer support tools, if used;
accounting and tax advisors;
legal advisors;
public authorities, where legally required;
contractors or service providers supporting VHC Global operations.

We do not sell personal data.

Service providers may only process data according to our instructions where they act as processors.

14. International Data Transfers

Where possible, we process data within the European Union or European Economic Area.

If personal data is transferred outside the EU or EEA, we will use appropriate safeguards where required, such as adequacy decisions, Standard Contractual Clauses, or other legal mechanisms under GDPR.

The European Commission explains that individuals should be informed where personal data is transferred outside the EU and what safeguards apply.

15. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Typical retention periods may include:

account data: as long as the account exists;
verification application data: for the duration of the badge relationship and for a reasonable period afterward;
public badge data: as long as the badge is active or as needed to show expired or revoked status;
support messages: as long as necessary to resolve the request and document communication;
billing and invoice data: as required by tax and accounting laws;
server logs: for a limited period for security, troubleshooting, and fraud prevention;
uploaded documents: only as long as necessary for review, compliance, dispute prevention, or legal obligations.

We may retain data longer if necessary to establish, exercise, or defend legal claims, prevent fraud, comply with legal obligations, or protect VHC Global systems.

16. Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

access controls;
password protection;
encrypted transmission where available;
restricted access to verification documents;
server security measures;
backups;
logging and monitoring;
fraud prevention checks;
internal review procedures.

No online service can guarantee absolute security. You are responsible for keeping your login credentials confidential and informing us if you suspect unauthorized account access.

17. Your Rights

Under GDPR, you may have the following rights:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to data portability;
right to object to processing;
right to withdraw consent;
right to lodge a complaint with a supervisory authority.

These rights may be subject to legal limitations, for example where retention is required for tax, legal, security, fraud prevention, or dispute documentation reasons.

To exercise your rights, contact us at info@vhc.global.

18. Right to Object

Where we process personal data based on legitimate interests, you may object to that processing at any time on grounds relating to your particular situation.

If you object, we will stop processing the data unless we have compelling legitimate grounds for the processing or the processing is necessary for legal claims.

19. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You can withdraw consent by using the available settings, cookie banner options, unsubscribe links, or by contacting us at info@vhc.global.

20. Children’s Data

VHC Global services are intended for businesses, professionals, creators, agencies, and website operators.

Our services are not intended for children. We do not knowingly collect personal data from children.

If you believe that a child has provided personal data to us, please contact us so we can review and delete the data where appropriate.

21. Automated Decision-Making

VHC Global may use technical checks to support verification, fraud prevention, badge status monitoring, and website review.

However, badge approval, rejection, suspension, or removal may involve manual review.

We do not intend to make decisions that produce legal effects solely by automated processing without human involvement, unless permitted by law.

22. Accuracy of Submitted Data

You are responsible for ensuring that all personal data and business information you submit is accurate, complete, current, and lawful.

If your contact details, business information, website, domain, AI usage, or badge-related declaration changes, you should update your information or contact us.

Incorrect or outdated information may result in delayed review, badge suspension, badge removal, or account restrictions.

23. Third-Party Websites

Our website, dashboard, emails, public profiles, or badges may contain links to third-party websites.

We are not responsible for the privacy practices, content, security, or data processing of third-party websites.

You should review the privacy policies of third-party services before using them.

24. Social Media and External Platforms

If you contact us through social media or external platforms, the platform provider may also process your personal data under its own privacy policy.

We are not responsible for data processing carried out independently by third-party platforms.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be published on our website with a revised “Last updated” date.

If changes are material, we may provide additional notice where legally required.

26. Contact for Privacy Requests

For questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact:

VHC Global
c/o FMA Design
Schönweißstrasse 16
90661 Nürnberg
Germany

Email: info@vhc.global

27. Supervisory Authority

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data is processed unlawfully.

As FMA Design is located in Bavaria, Germany, the competent authority may be the relevant Bavarian data protection supervisory authority, depending on the exact nature of the processing and legal classification.

VHC Global processes personal data to operate accounts, verify websites and businesses, manage badges, create public verification profiles, process payments, provide support, and protect the badge system from misuse.

We may publish limited badge-related information on public verification profiles so visitors can confirm badge validity.

We do not sell personal data.

You can contact info@vhc.global to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.