Last updated: draft of 10 October 2026
Vendorsline is an order portal for sales rep agencies. It is a product of Blaris ApS, a company
registered in Denmark (CVR DK41627328) ("we", "us"). This policy explains
what personal data we handle, why, and what you can do about it. Questions:
[email protected].
Two different situations
- You visit this website or contact us. We decide how that data is used and are responsible for it.
- You are a dealer, vendor or other contact in a customer's Vendorsline account. The agency that entered your details is responsible for them; we store and process them on that agency's instructions. Ask the agency first; we will help them answer. A data processing agreement is available to every customer on request.
What we collect
- Contact form: your name, email address, company and message. It reaches us as an email.
- Account data: the name, email address and role of each user in a customer's account. Passwords are stored only as a salted hash. If you sign in with Google, we receive your name and email address from Google.
- Business data our customers enter: orders, dealers and their business contact details and addresses, vendors, products and prices. Login keys for a vendor's online store are stored encrypted.
- Security data: IP address, browser and device information and sign-in attempts. We use these to verify new devices and to block abusive traffic.
- Billing data: subscriptions are paid through Stripe. We receive your business name, billing address, tax ID and payment status. We never see or store full card numbers.
- Cookies: the app sets a session cookie that keeps you signed in. This website stores your analytics choice in your browser and, where allowed, sets analytics cookies (see Analytics below).
How we use it
- To provide the service a customer has subscribed to, including sending order documents by email on their behalf (performance of a contract).
- To answer enquiries, keep the service secure and prevent abuse, and understand how the website is used (our legitimate interests).
- To measure website use with analytics cookies in the EU/EEA, the UK and Switzerland only if you accept (consent).
- To meet bookkeeping and tax obligations (legal obligation).
Emails we send to businesses
When we write to a business about Vendorsline, a link in that email may carry a tag that tells us
which company opened the page. We use it to decide whom to follow up with. It is not combined with
other tracking, and every such email says how to stop further emails.
Who we share it with
We do not sell personal data. We use these providers to run the service:
- Hetzner: hosting of the app and its database in the United States.
- Twilio SendGrid: delivery of emails from the app.
- Stripe: subscription payments.
- Google: Analytics on this website; Google sign-in if you choose it. The app's sign-up page also loads Google Tag Manager to count completed sign-ups.
- Microsoft 365: our mailbox, where contact-form messages arrive.
- Cloudflare: network delivery and protection for our websites.
Some of these providers process data outside the EU/EEA, including in the United States.
Where they do, they rely on the safeguards they publish for such transfers, such as the EU-US Data Privacy Framework or standard contractual clauses.
How long we keep it
- Enquiries: kept for up to 24 months.
- Account and business data: for as long as the customer's subscription runs, then deleted or handed back within 30 days.
- Security logs: kept for up to 12 months.
- Billing records: as long as bookkeeping law requires.
- Analytics data: 14 months.
Data ownership
The business data a customer puts into Vendorsline (orders, dealers, products and pricing)
belongs to that customer. Dealer lists, inventory and reports export to Excel from the app, and a
customer can ask us for a full export at any time.
Analytics
This website uses Google Analytics 4, provided by Google Ireland Ltd., to understand how
visitors use it. Google Analytics collects pseudonymous usage data (such as pages viewed,
approximate location and device type); IP addresses are not stored, and we do not use
Google's advertising features. Visitors from the EU/EEA, the UK and Switzerland are asked
for consent first, and analytics cookies are only set if you accept (GDPR Art. 6(1)(a)).
Analytics data is retained for 14 months. You can change or withdraw your choice at any time
in Cookie settings.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or
object to its use, or to receive it in a portable form. Email
[email protected]. If you are in the EU/EEA you can
also complain to your data protection authority; in Denmark that is Datatilsynet.
Security
How we protect the data is described on the security page.
Changes
If we change this policy in a way that matters, we will say so on this page and tell account holders by email.