Privacy Policy
Last updated 7 October 2026
1. Who is responsible
The controller of personal data processed through vantle.studio (the “Website”) is Vantle, the name under which an individual operates the Website (“Vantle”, “we”). Vantle can be reached at hello@vantle.studio.
All requests and questions concerning this Privacy Policy can be sent to hello@vantle.studio. We have not appointed a data protection officer, as no obligation to do so applies to us.
2. What we process, why, and for how long
We process personal data only in the situations set out below. We do not carry out any other processing through the Website.
| Activity | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Enquiry form and correspondence | Name, email address, company or website (optional), services selected, budget range, timeline, the content of your message, and anything you add in later emails | To read and answer your enquiry and, where you ask for one, to prepare a proposal. Article 6(1)(b) GDPR: steps taken at your request before entering into a contract. | Until the enquiry is closed. If no engagement follows, deleted within 12 months of the last message. |
| Abuse prevention on the form | IP address and technical signals from your browser, processed by Cloudflare Turnstile when the form is loaded and submitted | To tell human visitors from automated submissions and to keep the form and mailbox free of spam. Article 6(1)(f) GDPR: our legitimate interest in the security of the Website. | Not stored by us. Cloudflare handles the data as our processor for this purpose. |
| Hosting and server logs | IP address, date and time of the request, requested address, response status, browser and device type | To deliver the Website, keep it secure and investigate faults. Article 6(1)(f) GDPR: our legitimate interest in operating the Website. | Kept by the hosting provider for a short period determined by its settings. |
| Web fonts | IP address and browser details, transmitted to Google when the page loads | To display the Website in its intended typefaces. Article 6(1)(f) GDPR: our legitimate interest in presenting the Website. | Held by Google under its own policy. We receive no data from this request. |
Providing your details through the form is voluntary. Without a name, an email address and a message we cannot answer you.
We do not use cookies on the Website, and we do not use analytics, advertising or profiling tools. We do not take decisions about you by automated means.
3. Who receives the data
We use the following providers to run the Website and to handle enquiries. Each acts on our behalf under its data processing terms, except Google, which provides fonts under its own terms.
Recipients:
- Vercel Inc., United States: hosting of the Website and its server logs.
- Cloudflare, Inc., United States: DNS and the Turnstile verification on the enquiry form.
- Resend, Inc., United States: delivery of form submissions to our mailbox.
- The provider of our email service, which stores the correspondence in the mailbox hello@vantle.studio.
- Google Ireland Limited and Google LLC: web fonts.
We do not sell personal data and we do not pass it on for advertising. We disclose it to authorities only where a legal obligation requires us to.
4. Transfers outside the European Economic Area
Several of the providers above are established in the United States. Where a provider is certified under the EU–US Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision for that framework. Otherwise it relies on the standard contractual clauses adopted by the Commission under Article 46 GDPR. You may request information about the safeguards in place by writing to us.
5. Your rights
Under the GDPR you have the right to:
- obtain confirmation of whether we process your personal data and a copy of it (Article 15);
- have inaccurate data corrected and incomplete data completed (Article 16);
- have your data erased where the conditions of Article 17 are met;
- have processing restricted where the conditions of Article 18 are met;
- receive the data you provided to us in a structured, commonly used and machine-readable format, where processing is based on a contract and carried out by automated means (Article 20);
- object, on grounds relating to your particular situation, to processing based on our legitimate interests (Article 21).
You can exercise these rights by writing to hello@vantle.studio. We may ask you to confirm your identity first. We answer within one month of receiving the request. Where a request is complex or we receive many, we may extend this period by up to two further months and will tell you so within the first month.
If you believe that we have processed your data unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH), 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, Pf. 9; naih.hu. You may instead complain to the supervisory authority of the Member State where you live or work. You also have the right to bring a claim before a court. In Hungary the claim may be brought before the regional court (törvényszék) competent for your place of residence or stay.
6. Security
The Website is served over an encrypted connection. Access to the mailbox and to the hosting and email accounts is restricted to the operator and protected by authentication. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent authority and, where required, the persons concerned.
7. Children
The Website is addressed to businesses and is not directed at persons under 16. We do not knowingly collect their data. If you believe a child has sent us personal data, write to us and we will delete it.
8. Changes to this Policy
We may amend this Privacy Policy when our processing or the applicable law changes. The current version is always published at vantle.studio/privacy, with the date of the latest revision at the top of the page.