Privacypolicy.

Who we are

This website is operated by Vanta Show Ltd, a company registered in England and Wales (company number 16819735), with its registered office at Unit A1 Vickers Drive North, Brooklands Industrial Park, Weybridge, KT13 0YU.

Vanta Show Ltd is the data controller for personal information collected through this website. If you have a question about this policy, or want to exercise any of the rights described below, contact us at contact@vanta.technology.

What this policy covers

This policy covers vanta.technology. It does not cover any third-party site you reach by following a link from here — those sites have their own policies, and we are not responsible for them.

What we collect

We collect very little. Specifically:

When you use the enquiry form

Our contact page has a form. When you submit it we collect your name and email address, and — if you choose to give them — your company or show, your dates, the type of work you need, and whatever you write in the message.

That submission is stored on our own server and is also emailed to us so that we see it promptly. We use it to answer your enquiry, and if we go on to work together, as part of the record of that work. We do not add you to any mailing list and we do not use it for marketing.

The form includes a hidden field that automated spam tools tend to fill in. If it is completed, the submission is discarded. It collects nothing about you.

Form submissions are kept for 12 months and then deleted, unless they have become part of a project record — see "How long we keep it" below.

When you email or call us

If you contact us directly instead, we hold what you tell us — typically your name, contact details, and whatever you tell us about your project — for as long as we need it to answer you and to keep a record of work we have discussed or carried out.

Cookies

This site sets two cookies, both strictly necessary for it to work:

• statamic-session — keeps track of your session while you browse
• XSRF-TOKEN — protects against cross-site request forgery

Neither is used for advertising, tracking, or profiling. Because both are strictly necessary, we do not ask for consent to set them, as permitted under the Privacy and Electronic Communications Regulations.

We use no analytics. There is no Google Analytics, no tag manager, no advertising pixel, and no third-party tracking on this site.

Server logs

Our web server records each request, including your IP address, the page requested, the time, and your browser's user agent. We use this to keep the site running securely and to diagnose faults. These logs are kept for 30 days and are not used to build any profile of you.

Third-party services

Two third parties receive data when you load pages on this site:

• Vimeo hosts the background videos embedded on some pages. We request these with Do Not Track enabled, but loading a video means your browser contacts Vimeo, which will see your IP address. Vimeo's own privacy policy applies to that.
• Google Fonts serves the typefaces used on the site. Loading them means your browser contacts Google, which will see your IP address.

We do not control what these companies do with that information.

Our lawful basis

We rely on:

• Legitimate interests — to operate and secure the website, and to respond to enquiries you send us. We consider this reasonable and low-impact; you can object at any time using the contact details above.
• Contract — where we hold your details because we are quoting for, or delivering, work for you.

Who we share it with

We do not sell your personal information, and we do not share it for marketing.

We share information only with suppliers who help us run the business — for example our hosting provider and our email provider — and only so far as they need it to provide that service. We may also disclose information where the law requires it.

How long we keep it

Enquiry correspondence is kept for as long as it is useful to the relationship, and then deleted. Records relating to work we have carried out are kept for six years, in line with our accounting and legal obligations.

Your rights

Under UK data protection law you have the right to:

• ask what personal information we hold about you, and get a copy of it
• have inaccurate information corrected
• ask us to delete information, where there is no good reason for us to keep it
• object to, or ask us to restrict, how we use it
• ask us to transfer it to another organisation
• withdraw consent, where we relied on consent

To exercise any of these, email contact@vanta.technology. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk — 0303 123 1113

Changes to this policy

If we change this policy we will update the date at the top of this page. Significant changes will be made obvious on the site.