1. Introduction
Vantage Access ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
This policy complies with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide to Us
We collect information that you voluntarily provide to us when you:
- Fill out our contact form
- Request a free accessibility scan
- Sign up for our services
- Communicate with us via email
This information may include:
- Name
- Email address
- Company name
- Website URL
- Phone number (if provided)
- Any other information you choose to provide
2.2 Automatically Collected Information
When you visit our website, we may automatically collect certain information about your device, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide our services: Process your requests for accessibility scans and audits
- To communicate with you: Respond to inquiries, send service updates, and provide customer support
- To improve our website: Understand how visitors use our site and improve user experience
- To comply with legal obligations: Maintain records as required by law
- With your consent: Send marketing communications (you can opt out at any time)
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your data for specific purposes
- Contract: Processing is necessary to fulfill our contract with you
- Legal obligation: Processing is necessary to comply with legal requirements
- Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights
5. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service providers: With trusted third-party contractors who assist us in delivering our services (e.g., IAAP-certified accessibility testers). These parties are bound by confidentiality agreements.
- Legal requirements: When required by law, court order, or government authority
- Business transfers: In connection with a merger, acquisition, or sale of assets
- With your consent: When you explicitly authorize us to share your information
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- Contact form submissions: Retained for 2 years unless you request deletion
- Client project data: Retained for 5 years for legal and business purposes
- Marketing communications: Retained until you unsubscribe
7. Your Rights Under GDPR
If you are a resident of the European Economic Area (EEA), you have the following data protection rights:
- Right to access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data
- Right to restrict processing: Request that we limit how we use your data
- Right to data portability: Request transfer of your data to another service
- Right to object: Object to our processing of your personal data
- Right to withdraw consent: Withdraw consent at any time where we relied on consent
To exercise any of these rights, please contact us at: [email protected]
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
9. International Data Transfers
Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
10. Cookies
Our website currently does not use cookies. If we implement cookies in the future, we will update this policy and obtain your consent where required.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
12. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
15. Supervisory Authority
If you are located in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.