Effective date: January 1, 2026
Last updated: January 1, 2026
This Privacy Policy explains how On International Holdings Limited, trading as Vertrac ("Vertrac," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information when you access or use Vertrac's websites, mobile applications, platform, and related services (collectively, the "Services").
Vertrac is a professional networking, career-tracking, trip-logging, messaging, subscription, and marketplace platform for outdoor professionals, outdoor businesses, and outdoor enthusiasts. The Services allow users to create profiles, record work experience and skills, upload certifications, connect and communicate with other users and businesses, participate in marketplace features, and record trips using device location information.
By using the Services, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will request it separately and you may withdraw it as described below.
1. Who We Are
The controller or responsible organization for personal information covered by this Privacy Policy is:
On International Holdings Limited (trading as Vertrac)
Unit 2A, 17/F, Glenealy Tower
No. 1 Glenealy, Central
Hong Kong
Email: admin@vertrac.com
2. Scope
This Privacy Policy applies to personal information processed through the Services and in our related communications and business operations. It does not apply to third-party websites, applications, products, or services that have their own privacy policies.
The Services are intended only for people aged 18 or older. They are not directed to children.
3. Information We Collect
Depending on the features you use and whether you use Vertrac as an individual or on behalf of a business, we may collect the following categories of information.
3.1 Account and contact information
This may include your name, email address, telephone number, postal address, username, password or authentication credentials, age or confirmation of eligibility, profile photograph, preferred language, and communication preferences.
3.2 Professional, career, and business information
This may include employment and guiding history, outdoor disciplines, work experience, skills, qualifications, availability, affiliations, company information, services offered, portfolio information, references, and other professional details.
3.3 Certifications and uploaded documents
You may upload certification names, issuers, levels, issue and expiry dates, copies of certificates, licences, training records, and supporting files. These documents may contain identifiers or other personal information. You should obscure unnecessary identification numbers, signatures, dates of birth, QR codes, barcodes, and similar details before uploading.
Vertrac hosts this user-submitted information. Unless a feature expressly states otherwise, Vertrac does not independently verify, certify, endorse, or guarantee any certification, qualification, experience, identity, or document.
3.4 Location and trip information
If you enable trip tracking, we may collect precise or approximate device location, GPS coordinates, route, speed, altitude, distance, timestamps, device motion information, trip status, trip notes, and related metadata. This may include background location while a trip is being recorded and information from completed or unfinished trips.
Location tracking is optional and requires device permission. Depending on your device settings, tracking may continue while the application is minimized or operating in the background. You may stop tracking through the application or revoke location permission through your device settings. Revoking permission may prevent location-dependent features from working.
3.5 Content and communications
We may collect profile content, photographs, videos, recordings, files, posts, listings, reviews, messages, reports, support requests, feedback, and other content you submit or exchange through the Services.
Messages are not public merely because they are sent through Vertrac. We may access or disclose communications where reasonably necessary to deliver them, investigate reports, protect safety or security, enforce our terms, or comply with law.
3.6 Marketplace and transaction information
When marketplace and paid features are introduced, we may collect purchase history, transaction amount, currency, subscription status, invoices, tax information, refunds, disputes, and limited payment-related details. Payments may be handled by third-party payment processors. We do not intend to store full payment-card numbers or card security codes when a payment processor can process them directly.
3.7 Device, usage, cookie, and analytics information
We may collect IP address, browser and device type, operating system, language, time zone, device identifiers, application version, pages or features used, referring pages, interactions, crash information, logs, and approximate location inferred from IP address.
We may use cookies, software development kits, local storage, pixels, and similar technologies that are necessary for authentication, security, preferences, performance, and analytics. Where required, we will request consent for non-essential technologies and provide a way to change your choices.
3.8 Information from other sources
We may receive information from other users, companies, authentication providers, payment processors, service providers, publicly available sources, and authorities. For example, a company may provide information about a professional relationship, or another user may report content or conduct.
4. How We Use Information
We may use personal information to:
- create, authenticate, maintain, and secure accounts;
- provide profiles, networking, messaging, trip logging, marketplace, subscription, and other requested features;
- display information that you choose to make public;
- process or facilitate payments and transactions;
- provide customer support and respond to privacy requests;
- personalize settings and improve usability;
- maintain, troubleshoot, analyze, test, and improve the Services;
- detect, investigate, and prevent fraud, abuse, security incidents, false credentials, unlawful activity, and violations of our terms;
- moderate content and respond to safety or conduct reports;
- communicate about transactions, service changes, security, and administrative matters;
- send marketing communications where permitted, subject to your right to unsubscribe;
- establish, exercise, or defend legal claims;
- comply with legal, regulatory, tax, accounting, and law-enforcement obligations; and
- protect the rights, property, safety, and integrity of users, Vertrac, and others.
Where applicable law requires a legal basis, we process information as necessary to perform our agreement with you, comply with legal obligations, pursue legitimate interests that are not overridden by your rights, protect vital interests, or act with your consent.
5. Public and Private Information
You control whether certain profile and certification details are displayed publicly through the visibility settings we provide. Information designated public may be viewed, copied, saved, indexed, shared, or republished by other people or external services. We cannot control information after another person has lawfully copied it outside the Services.
We intend to keep contact details, precise location, private messages, payment details, and original certification documents private by default unless a feature clearly informs you otherwise and you choose to share them. You should review your settings and content carefully before publishing information.
6. How We Disclose Information
We may disclose personal information in the following circumstances.
6.1 At your direction or as part of the Services
We disclose information when you make it public, send it to another user, transact with another party, apply to an opportunity, join a company account, use a social or authentication connection, or otherwise direct us to disclose it.
6.2 Service providers
We may use providers for cloud hosting, databases, storage, authentication, communications, customer support, analytics, mapping, security, payments, fraud prevention, and professional services. They may process information only to provide services to us or as otherwise permitted by their agreements and applicable law.
Specific providers have not all been selected as of the last-updated date. We will update our disclosures when provider relationships materially affect the information in this Privacy Policy.
6.3 Business customers and marketplace participants
If you interact with a company, guide, customer, or marketplace participant, we may disclose information necessary for that interaction or transaction. The receiving party may independently determine how it handles information it receives and may be subject to its own privacy obligations.
6.4 Legal, safety, and enforcement disclosures
We may disclose information if we reasonably believe disclosure is necessary to comply with law or legal process; respond to lawful requests; prevent or investigate fraud, abuse, safety threats, or unlawful conduct; enforce agreements; or protect the rights, property, and safety of Vertrac, users, or others.
6.5 Corporate transactions
Information may be disclosed in connection with a financing, audit, reorganization, merger, acquisition, sale of assets, insolvency, or similar corporate transaction, subject to appropriate confidentiality and legal safeguards.
7. No Sale of Personal Information and No Advertising at Launch
Vertrac does not sell personal information for money. As of the last-updated date, Vertrac does not use personal information for targeted or cross-context behavioural advertising and does not display third-party advertising through the Services.
Disclosing information to vendors that process it on our behalf is not a sale. If our advertising or data-use practices materially change, we will update this Privacy Policy and provide any notice, consent mechanism, or opt-out required by applicable law before applying the new practice.
8. International Transfers
Vertrac is based in Hong Kong and is intended for an international user base. Your information may be processed in Hong Kong and in other countries where we, our providers, or other users operate. Those countries may have privacy laws different from those where you live.
Where required, we will use contractual, organizational, or other legally recognized safeguards for international transfers. By making information public or communicating with users in other countries, you understand that the information you choose to share may be received in those countries.
9. Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining security and business records, resolving disputes, and meeting legal obligations.
In general:
- account, profile, certification, content, completed trip, and unfinished trip information may be retained while your account remains active;
- you may delete individual trip records and certain other content using available controls;
- transaction, tax, accounting, fraud-prevention, and legal records may be retained for the period required or permitted by law, which may extend beyond account closure;
- security and technical logs are retained for a limited period appropriate to their purpose;
- information involved in a report, dispute, investigation, or legal matter may be retained until the matter and applicable retention periods end; and
- after account deletion, information may remain temporarily in restricted backups before being overwritten in the ordinary backup cycle.
We aim to remove account information from active systems within 30 days after a valid deletion request, subject to lawful exceptions. Residual copies may remain in backups for up to 90 additional days. We may retain de-identified or aggregated information that cannot reasonably identify you.
10. Your Choices and Rights
Depending on your location and applicable law, you may have the right to:
- know whether and how we process your personal information;
- access or receive a copy of it;
- correct inaccurate or incomplete information;
- delete information or your account;
- withdraw consent;
- object to or restrict certain processing;
- receive portable information in an appropriate format;
- opt out of certain sales, sharing, or targeted advertising if those practices are introduced;
- limit certain uses of sensitive personal information where applicable;
- appeal a decision concerning a privacy request; and
- complain to an applicable privacy regulator.
You may exercise available controls through your account or contact admin@vertrac.com. We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law. We will not unlawfully discriminate against you for exercising a privacy right.
Some requests are subject to legal exceptions. For example, we may retain information needed to complete transactions, protect security, comply with law, or establish or defend legal claims. We will explain a refusal where required.
You may unsubscribe from promotional emails through the link in the message or by contacting us. You will continue to receive necessary service, transaction, safety, and account communications.
11. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized or accidental access, disclosure, alteration, loss, or destruction. Measures may include access controls, secure transmission, encryption where appropriate, authentication protections, monitoring, backups, vendor controls, and incident-response procedures.
No system or transmission is completely secure. You are responsible for protecting your credentials, using a strong and unique password, maintaining control of your devices, and promptly notifying us of suspected unauthorized access.
12. Location, Safety, and Emergency Limitations
Vertrac's GPS and trip features are record-keeping tools. They are not emergency, rescue, dispatch, medical, weather, safety-monitoring, or guaranteed navigation services. Location information may be delayed, inaccurate, incomplete, or unavailable because of device settings, terrain, signal, battery, network, software, or other conditions.
Do not rely on Vertrac as your sole navigation or emergency tool. In an emergency, contact the appropriate local emergency service using a reliable method.
13. Children
The Services are not intended for anyone under 18, and we do not knowingly permit people under 18 to create accounts. If you believe a person under 18 has provided personal information, contact us. We may request information reasonably necessary to investigate and delete the account and information where appropriate.
14. Third-Party Services
The Services may contain links to or integrations with third-party services. Their privacy practices are governed by their own notices, not this Privacy Policy. Review those notices before providing information to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy as the Services, providers, or legal requirements change. We will post the revised version and update the "Last updated" date. If a change materially affects your rights or how we use personal information, we will provide additional notice and request consent where required. The updated policy remains effective until replaced; it does not automatically expire at the end of a calendar year.
16. Contact Us
For privacy questions, requests, or complaints, contact:
On International Holdings Limited (trading as Vertrac)
Unit 2A, 17/F, Glenealy Tower
No. 1 Glenealy, Central
Hong Kong
Email: admin@vertrac.com