Privacy Notice

Last updated: 13 August 2026

1. Who is responsible for your data

VANTIR Studio, TBC, is the controller responsible for the personal data described in this notice. That means we decide why and how your data is processed, and we are who you should contact with questions or requests. You can reach us at contact@vantir.studio.

2. The contact form

When you use the contact form on this site, we collect the name and email address you provide, and the message you write, if you choose to write one. The message field is optional — you can submit the form with only your name and email address.

We use this information to answer your enquiry, and for nothing else.

Legal basis: processing is necessary to take steps, at your request, before entering into a contract (Article 6(1)(b) GDPR).

Retention: we keep contact-form submissions for 24 months from your last contact with us, then delete them.

3. Server logs

Our hosting provider automatically records the IP address, browser user-agent, and time of every request made to this site — for every visitor, not only people who use the contact form. This happens as a normal, automatic part of operating a website; we do not choose to collect it separately.

Legal basis: our legitimate interest in keeping the site secure and operational (Article 6(1)(f) GDPR).

Retention: our hosting provider, Vercel, retains these logs for a period set by our hosting plan — published figures range from one hour up to three days, or up to 30 days on plans with extended log retention.

Separately, when you submit the contact form, our server temporarily remembers the IP address of recent submissions in memory, to enforce a short waiting period between messages and limit how many messages can be sent per hour. This is not written to a database, is not linked to your name or message, and does not persist beyond the running server process. Same legal basis as above.

4. Who else processes this data

We use a small number of outside companies to run this site and respond to your messages. They may only use your data to provide these services to us — not for their own purposes.

These are all United States companies. Vercel and Resend both state that they are certified under the EU-US Data Privacy Framework (and its UK extension); Google states the same for the services behind Google Workspace. Where the Framework doesn’t cover a transfer, each provider’s data processing terms rely on the European Commission’s Standard Contractual Clauses.

5. If we contacted your business by email

We contact businesses by email to offer our services — brand films and websites. If you’re reading this because you received an email from us, this section explains what we hold and how to stop it.

Categories of data we may hold about a business we’ve contacted:

• the business name
• the business’s email address
• the business’s postal or registered address
• information published on the business’s own website
• customer reviews that are publicly visible about the business

We get this information from three places, and only these three:

• the business’s own website
• public listings on Google Maps
• where noted in our records, the business’s public Instagram profile

We do not buy or use contact lists from any other source.

Wherever possible, we send these emails to a generic business address — info@, contact@, hello@, or similar — rather than to a named individual.

Legal basis: our legitimate interest in offering our services to businesses that may want them (Article 6(1)(f) GDPR). We’ve weighed this against the interests of the people who run or work at the business: we contact businesses, not private individuals; we use generic addresses wherever one exists; and we stop as soon as asked.

How to stop it: reply “remove” to any message from us, or write to contact@vantir.studio. We then delete the business’s details from our records. We keep the email address itself on a suppression list, so that we know not to contact it again — that address is the only thing we retain, and only for that purpose.

Retention: if there is no reply and no interest, we delete the record 12 months after our last contact attempt.

6. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected (rectification)
• have your data deleted (erasure)
• restrict how we use your data
• object to our processing
• receive your data in a portable format

If you object to being contacted for outreach, we honour that immediately and without asking why.

To exercise any of these rights, write to contact@vantir.studio. We respond within one month.

7. Complaints

If you believe we have mishandled your personal data, you can lodge a complaint with the Belgian Data Protection Authority:

• Rue de la Presse 35, 1000 Brussels
• contact@apd-gba.be
• +32 2 274 48 00

You may also complain to the data protection authority in your own country, if you prefer.

8. Cookies

This site does not set cookies and does not use local storage, session storage, analytics, advertising, or any other tracking technology. There is nothing here that needs your consent, so we don’t ask for it.

The two fonts used on this site are built into the site at deploy time and served from our own domain — your browser never contacts a third-party font service when you visit.

If this ever changes — for example, if we add analytics or an embedded third-party video player — we will update this section and add a consent mechanism before we do, not after.

9. Changes to this notice

We’ll update this notice whenever what we actually do with your data changes, and update the date at the top of this page.