Privacy Policy
How we protect your information
Vonga makes NFC-enabled apparel that unlocks experiences with a simple tap. No app required. This Privacy Policy explains what we collect, how we use it, and the choices you have.
Effective Date: October 2, 2025
What We Collect (and Don't Collect)
When you browse our site
Like most websites, we automatically collect standard web logs when you visit our site. This includes your IP address, browser type, device information, and the pages you view. We use this information to understand how visitors use our site and to improve performance and security.
We also use basic analytics and cookies necessary for site functionality. For any non-essential cookies, such as those used for marketing or enhanced analytics, we will request your consent before placing them on your device. You can manage your cookie preferences at any time through our cookie banner.
When you shop at Shop Vonga
When you place an order through our retail shop, we collect the information necessary to process and fulfill your purchase. This includes your name, email address, shipping address, and billing information. We use secure third-party payment processors to handle all payment transactions, and we only store a tokenized reference to your payment method, never your actual credit card number or sensitive financial data.
We also maintain records of your order history, including the items purchased, order totals, and fulfillment status. This information helps us provide customer support, process returns and exchanges, and comply with our legal obligations for tax and accounting purposes.
When you tap a Vonga garment
Vonga's NFC technology is designed with privacy at its core. When you tap your phone to a Vonga garment, we do not access, collect, or store any personal content from your device. Your photos, contacts, messages, and other device data remain completely private.
Instead, we only record the tap event itself, which is tied to the garment's unique digital twin identifier. This allows us to verify eligibility for rewards, content, or experiences associated with that specific garment. In some cases, we may also record time-based or location-based eligibility, such as confirming that a tap occurred during a specific event window or within a designated geofenced area. This information is used solely to determine whether you qualify for the associated benefit.
Importantly, we do not log your precise device identifiers, track your location history beyond the specific eligibility check, or create profiles of your movements. Each tap is treated as an isolated event associated with the garment, not with tracking your personal behavior.
When you use Club Vonga or Enterprise dashboards
For organizations using our Club Vonga or Enterprise platforms, we collect administrative contact information for the individuals responsible for managing your account. This typically includes names, email addresses, and phone numbers for your organization's administrators and coordinators.
We also store your platform configuration settings, including the rewards you've created, eligibility rules you've defined, and any custom branding or content you've uploaded. Additionally, we provide aggregated engagement metrics and analytics to help you understand how your community or participants are interacting with your Vonga-enabled apparel and activations. These metrics are presented in aggregate form and do not identify individual end users unless you've configured your platform to collect such information.
Vonga does not sell personal information and will never share data with third parties for marketing without your prior consent.
Why We Use Data
Provide Services
We use the information we collect to deliver the core services you expect from Vonga. This includes fulfilling your retail orders, verifying tap eligibility for rewards and experiences, managing loyalty programs and gamification features, and preventing fraudulent activity that could compromise your account or our platform.
Improve & Secure
Your data helps us make Vonga better and more secure. We analyze usage patterns in aggregate to identify bugs, optimize performance, and enhance service reliability. This technical data helps us debug issues, improve the user experience, and ensure our platform remains secure and stable for all users.
Communicate
We use your contact information to send you transactional communications, such as order confirmations, shipping updates, and service notifications. For marketing communications, including promotional offers, new product announcements, and newsletter content, we will only contact you if you have provided opt-in consent. You can withdraw this consent and unsubscribe from marketing emails at any time through the links provided in each message.
Legal Compliance
We retain certain data to comply with legal obligations, including tax and accounting requirements, security incident reporting, and responding to legal disputes or lawful requests from government authorities.
For EU/UK residents: Our legal bases for processing personal data include performance of a contract (when providing services you've requested), legitimate interests (for service improvement and security), consent (for marketing and optional features), and legal obligation (for compliance requirements).
Your Rights & Choices
Global
Cookie Preferences: You can manage your cookie preferences at any time through the cookie banner that appears on our site. This allows you to control which types of cookies are placed on your device, including whether to accept or reject non-essential cookies used for marketing and analytics purposes.
Marketing Communications: If you've subscribed to our marketing emails, you can opt out at any time by clicking the unsubscribe link in the footer of any marketing message we send you. This will remove you from our marketing lists while still allowing us to send you important transactional emails related to your orders or account.
United States (CCPA/CPRA & other state laws)
If you are a resident of California, Virginia, Colorado, Connecticut, or Utah, you have specific rights under state privacy laws. These rights include the ability to request access to the personal information we hold about you, request corrections to inaccurate data, and request deletion of your personal information subject to certain exceptions.
You also have the right to opt out of the sale or sharing of your personal information for targeted advertising purposes, and to request a portable copy of your data in a machine-readable format. To exercise any of these rights, please contact us using the form at the bottom of this page or by emailing privacy@vonga.io.
We want to be clear: Vonga does not sell your personal data to third parties. If we ever engage in "sharing" as that term is defined under the California Privacy Rights Act (CPRA), we will provide a clear "Do Not Sell or Share My Personal Information" link on our website where you can easily opt out.
EU/UK (GDPR)
If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) provides you with comprehensive rights regarding your personal data. You have the right to access your personal information and receive a copy of the data we hold about you. You may also request that we rectify any inaccurate information, erase your data (also known as the "right to be forgotten"), or restrict how we process your information in certain circumstances.
Additionally, you have the right to object to our processing of your personal data for legitimate interests or direct marketing purposes, and the right to request data portability, which allows you to obtain and reuse your personal data across different services. If our processing is based on your consent, you may withdraw that consent at any time, though this will not affect the lawfulness of processing that occurred before your withdrawal.
If you believe we have not adequately addressed your privacy concerns, you have the right to file a complaint with your local data protection authority. To exercise any of these rights, please contact us using the form at the bottom of this page or by emailing privacy@vonga.io.
Additional Policies
Children's Privacy
Vonga's website and services are not directed to children under the age of 13 in the United States or under the age of 16 in the European Union. We do not knowingly collect personal information from children in these age groups without appropriate parental consent.
If we become aware that we have inadvertently collected personal information from a child without proper consent, we will take immediate steps to delete that information from our systems. For any child-directed services or programs we may offer in the future, we will comply with the Children's Online Privacy Protection Act (COPPA) and obtain verified parental consent before collecting any personal information from children.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. For retail order data, we keep records for the duration required by tax, accounting, and consumer protection laws, which typically ranges from three to seven years depending on jurisdiction.
For tap eligibility logs and event-related data, we retain records only for the duration of the activation or event period, plus a reasonable audit period afterward to address any disputes or support requests. Once data is no longer needed for these purposes, we either delete it entirely or de-identify it so that it can no longer be associated with you as an individual.
International Data Transfers
Vonga operates globally, and as a result, your personal information may be transferred to and processed in countries other than your country of residence. When we transfer personal data internationally, particularly from the European Economic Area, United Kingdom, or Switzerland to other jurisdictions, we implement appropriate safeguards to protect your information. These safeguards may include Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms to ensure your data receives an adequate level of protection regardless of where it is processed.
Security
We take the security of your personal information seriously and implement a comprehensive set of administrative, technical, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include industry-standard encryption for data in transit and at rest, strict access controls that limit who within our organization can access personal information, regular security monitoring and testing, and ongoing employee training on data protection practices.
While no system can guarantee 100% security, we continually review and update our security practices to address emerging threats and maintain the highest standards of data protection. If we become aware of any security breach that affects your personal information, we will notify you and any applicable regulatory authorities in accordance with applicable law.
How We Share Information
We share your personal information only in limited circumstances and only with parties who are contractually obligated to protect your data. We work with trusted service providers who help us operate our business, including payment processors, hosting providers, email service providers, analytics platforms, and logistics partners. These service providers are bound by contracts that restrict their use of your information to only the purposes we've specified and prohibit them from using your data for their own independent purposes.
We may also disclose personal information when required by law, such as in response to a valid subpoena, court order, or other legal process. We may also share information when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud or security issues, or to respond to government requests.
We will never share your personal information with third parties for their independent marketing purposes without your explicit consent. Your data is yours, and we treat it with the respect it deserves.
Your Control at Tap
Every time you tap a Vonga garment, you remain in control of your data and privacy. When the tap experience loads, you have the choice to proceed with claiming the garment, signing up for rewards, or linking the tap to an existing account. You are never required to provide personal information simply to tap, and you can choose to interact anonymously if you prefer.
If you decline to provide personal information or create an account, we record only an anonymous tap event for basic eligibility tracking. You can also revoke your consent for reward programs, data collection, or marketing communications at any time through your account settings or by contacting us directly. Your control over your data doesn't end when you first tap.
Cookies & Similar Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide essential functionality. Essential cookies are strictly necessary for the site to work properly, such as those that enable secure login, maintain your shopping cart, or remember your cookie preferences. These essential cookies do not require your consent as they are necessary for the basic operation of our site.
We also use optional cookies for analytics and marketing purposes, but only with your consent. Analytics cookies help us understand how visitors interact with our site so we can improve its design and functionality. Marketing cookies may be used to deliver personalized advertisements and track the effectiveness of our campaigns. In accordance with EU/UK cookie laws and other applicable regulations, we will request your consent before placing these non-essential cookies on your device. You can manage your cookie preferences at any time through the cookie banner or your browser settings.
Enterprise & Club Vonga Data Relationships
For organizations using our Club Vonga or Enterprise platforms, it's important to understand the data relationship. In these scenarios, your organization acts as the "data controller" (under GDPR terminology) or "business" (under CCPA terminology) for the personal information of your end users, members, or participants. This means your organization determines what data is collected and how it is used within the Vonga platform.
Vonga acts as a "data processor" or "service provider" in this relationship, processing personal information only according to your organization's documented instructions and the terms of our agreement. We provide tools and assistance to help you respond to data subject rights requests from your end users and support your compliance with applicable privacy laws. If you have questions about your obligations as a controller or business, please consult with your legal counsel.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Effective Date" at the top of this policy to reflect when the revisions were made. For material changes that significantly affect your rights or how we use your information, we will provide prominent notice on our website or, where appropriate, contact you directly via email. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
Contact Us
Questions about privacy? Send us a message and we'll get back to you.