Vanta / Legal
Privacy Policy
Last updated: 30 September 2026
This policy explains what information Vanta may handle, why it is used, how long it may be kept, and the choices available to you.
Who this policy covers
This Privacy Policy explains how Vanta handles personal information when you browse the website, contact us, purchase or download a resource, receive support, or otherwise interact with our store. It should be read together with our Cookie Policy and Terms of Service.
Who is responsible for your data
Vanta acts as the controller for personal information collected directly through this website. Where a payment, commerce, hosting, email, support or authentication provider handles information for its own purposes, that provider may also act as an independent controller under its own privacy notice.
Information we may collect
Depending on how the live store is configured, we may collect identity and contact details, account identifiers, order and licence information, support messages, transaction references, device and browser information, IP address, security events, and records of your privacy preferences.
We do not need to store complete payment-card numbers or card security codes on this website when a third-party payment processor handles payment details.
Where information comes from
Information may come directly from you, from your browser or device, from payment and commerce providers, from authentication services you choose to use, and from support or anti-abuse systems connected to the store.
How we use information
We use personal information to process orders, deliver digital products, maintain licences, provide support, answer pre-purchase questions, secure the service, prevent fraud or abuse, diagnose faults, comply with accounting and legal duties, and improve the store and our resources.
Legal bases
Where UK or EEA data-protection law applies, our processing may rely on performance of a contract, compliance with a legal obligation, legitimate interests such as service security and fraud prevention, or consent where consent is required. The lawful basis depends on the specific processing activity.
Payments and commerce providers
Payments may be handled by specialist payment or commerce providers. Those providers may receive billing, transaction, fraud-prevention and device information needed to complete the purchase. Their handling of payment data is governed by their own terms and privacy notices.
International processing
Some service providers may process information outside your country. Where required, appropriate safeguards should be used for international transfers, which may include adequacy regulations, approved contractual clauses or another lawful transfer mechanism.
How long information is kept
We keep information only for as long as reasonably necessary for the purpose it was collected, including support, licensing, security, dispute resolution, tax and accounting requirements. Retention periods may differ depending on the record and legal obligations that apply.
Security
We use reasonable technical and organisational measures designed to protect information. No website or transmission method can guarantee absolute security, so customers should also protect their account credentials, licence keys and connected accounts.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to certain processing, receive a portable copy of information, or withdraw consent. You may also have the right to complain to your local data-protection authority.
Requests can be started through the Contact page. We may need to verify your identity before fulfilling a request.
Children
The store is intended for people who are legally able to purchase digital products or who have appropriate permission from a parent or guardian. We do not knowingly design the store to collect personal information from young children.
Third-party links and integrations
The site may link to third-party services such as payment providers, community platforms or documentation hosts. Vanta is not responsible for the privacy practices of third-party websites and services.
Changes to this policy
We may update this Privacy Policy when the store, legal requirements or connected services change. The date at the top of this page shows the latest revision. Material changes should be highlighted where appropriate.
Contact
For privacy questions or requests, use the Vanta Contact page and choose the support route that best matches your request.