Privacy
This page explains what happens with personal data when you visit hellovanta.com, book a call or write to us. Short version: the site itself collects as little as a site can. We set no cookies of our own and run no analytics or advertising scripts.
Who is responsible
VANTA LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Email: hello@hellovanta.com. For visitors in the EU, the UK and Switzerland, VANTA LLC is the controller in the sense of the GDPR and comparable laws.
Visiting the site
The site is hosted on Vercel. When you load a page, the hosting provider processes the technical data a browser sends with every request: IP address, time, the page requested, browser and operating system, referrer. Vercel uses this to deliver the pages and keeps short-lived server logs for security and operations. The legal basis is our legitimate interest in running a secure, reachable website (Art. 6(1)(f) GDPR).
Fonts are served from our own domain through the framework's font loader, so no request goes to Google Fonts. Videos and images are served from our own domain too.
Booking a call
Calls are booked through Calendly. When you pick a slot, Calendly collects your name, email address, the chosen time and anything you type into the form, and shares it with us so we can hold the call. Calendly is a separate provider with its own privacy notice, which applies to the booking page. We process the booking data to prepare and hold the call and to follow up on it (Art. 6(1)(b) GDPR, steps before a contract).
Writing to us
If you email us, we process your email address, your name if you give it, and the content of your message to answer you. Email is handled by our mail provider. We keep correspondence as long as the conversation or the resulting project requires it, and as long as the law obliges us to keep business records.
Clients and projects
For a project we process the contact details of the people we work with, the brief, references and the material you send us. This is needed to deliver the work (Art. 6(1)(b) GDPR). If a brief contains images or voices of real people, you confirm you have the rights and consents needed for us to use them.
Where data goes
VANTA LLC is based in the United States, and so are some of the providers we use (hosting, booking, email). For data from the EU, UK or Switzerland, transfers rest on the providers' standard contractual clauses or an adequacy decision where one applies. Write to us if you want details on a specific provider.
How long we keep it
Server logs: days, not months, under the hosting provider's retention. Booking and enquiry data: until the enquiry is dealt with, or for the life of the client relationship plus the statutory retention period for business records. Project material: for the project and the agreed usage period, then deleted on request.
Your rights
- access to the personal data we hold about you
- correction of inaccurate data
- deletion, where we have no overriding reason to keep it
- restriction of processing, and objection to processing based on legitimate interest
- data portability for data you gave us
- a complaint with a supervisory authority, for example the one in your EU member state
To use any of these, email hello@hellovanta.com.
Changes
If we add a tool that changes what this page says (analytics, a newsletter, a contact form), we update this page first.
Last updated: 21 October 2026