Privacy Policy

Vantada ("Vantada," "we," "us," or "our") builds and operates websites for small businesses. Vantada is a brand of Monumental Web Design, based in Draper, UT, USA. This policy explains what information we collect, how we use it, who we share it with, and the rights you have over it. It covers our marketing site at vantada.com, our customer dashboard at manage.vantada.com, and the websites we build and host for our customers.

1. Who this policy applies to

This policy applies to three groups of people:

• Visitors to vantada.com — people browsing our marketing site.
• Customers — businesses that sign up for a Vantada plan and use our dashboard.
• End visitors — people who visit a website we built and host for a customer. For these visitors, the customer (our client) is the data controller; we act as a service provider.

2. Information we collect

2.1 Information you give us directly

• Account information: name, email address, business name, phone number, billing address.
• Payment information: processed by Stripe. We do not store full card numbers on our servers — we receive a token and the last four digits.
• Onboarding content: business details, services, photos, logos, and any other content you send us to build your site.
• Communications: emails, support messages, and anything you tell us on a call.

2.2 Information collected automatically

• Usage data: pages viewed, links clicked, referring URL, session timestamps.
• Device and log data: IP address, browser type and version, operating system, approximate location (city/region) derived from IP.
• Cookies and similar technologies: first-party cookies for login sessions and preferences; Google Analytics 4 for aggregate traffic measurement.

2.3 Information from third parties

If you sign up through a referral, we may receive limited information from the referring partner (name, email, plan interest). If you connect a Google Business Profile or Google Search Console to your site, we receive the data those services expose through their APIs.

3. How we use information

• To build, host, and maintain your website.
• To operate and improve our dashboard and services.
• To process payments and send invoices.
• To respond to support requests and deliver design edits.
• To send service notices (billing, outages, policy updates) and, with your consent, occasional product updates.
• To measure and understand how our site and product are used so we can improve them.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To comply with legal obligations.

We do not sell your personal information. We do not use your content to train AI models.

4. Legal bases (for visitors in the UK/EU)

If you are in the UK or EU, we process personal data under one or more of these bases:

• Contract: to deliver the service you signed up for.
• Legitimate interests: to operate, secure, and improve our business — balanced against your rights.
• Consent: for non-essential cookies and marketing emails, where required.
• Legal obligation: to meet tax, accounting, and other legal requirements.

5. Who we share information with

We share information with service providers that help us run the business, strictly under contract and only as needed. The categories include:

• Payment processors
• Hosting, database, and infrastructure providers
• Email delivery and marketing platforms
• Analytics and search measurement tools
• Scheduling and communication tools
• Workspace and productivity tools

Our current providers include Stripe, Vercel, Supabase, MailerLite, Google, and Cal.com. This list may change as we add or switch vendors; we'll keep it reasonably current here.

We may also share information when required by law, to enforce our terms, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (in which case you will be notified).

6. International transfers

Our service providers may process data outside your country, including in the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect that data.

7. How long we keep information

We keep personal information only as long as we need it to provide the service or meet a legal obligation:

• Account and site content: for the life of your account, plus up to 90 days after cancellation so you have time to export.
• Billing records: at least 7 years, to meet tax and accounting requirements.
• Analytics data: up to 26 months in Google Analytics, aggregated thereafter.
• Support emails: up to 3 years after the last contact.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information (subject to legal retention requirements).
• Export your information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time for consent-based processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email privacy@vantada.com. We respond within 30 days.

9. California residents

Under the CCPA/CPRA, California residents have the rights listed above, plus the right to know what categories of personal information we collect, the right to opt out of "sale" or "sharing" (we do neither), and the right to non-discrimination for exercising these rights. To make a request, email privacy@vantada.com.

10. Cookies and tracking

We use a small number of first-party cookies to keep you logged in and remember preferences, and Google Analytics 4 with IP anonymization for aggregate measurement. We do not use third-party advertising trackers on vantada.com. Our customers may choose to add their own analytics or pixels to their own websites — those are controlled by the customer and subject to the customer's privacy policy.

11. Children

Vantada is for businesses. Our services are not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us information, email privacy@vantada.com and we will delete it.

12. Security

We use industry-standard technical and organizational measures to protect personal information: encryption in transit (TLS), encryption at rest on managed services, access controls, logging, and regular reviews. No system is perfectly secure, but we work hard to reduce risk and respond quickly to incidents.

13. End visitors of customer websites

When you visit a website we built for one of our customers, that customer is the data controller. We host the site and process visitor data on the customer's behalf. Questions about how a specific site uses your data should go to that business directly — their contact details are on the site. We will support our customers in responding to any valid request.

14. Changes to this policy

We may update this policy from time to time. If we make a material change, we'll email active customers and update the "Last updated" date above. Continued use of the service after an update means you accept the revised policy.

15. Contact us

Questions or requests? Email privacy@vantada.com.
General contact: hello@vantada.com.

Vantada, a brand of Monumental Web Design
Draper, UT, USA