Who we are
Vantway is a trade name of HB Creative Inc., a Connecticut corporation. When this policy says "Vantway," "we," "us," or "our," we mean HB Creative Inc. operating under the Vantway brand. Our principal place of business is in the United States, and we can be reached at hello@vantway.com.
We are the data controller for personal information collected through vantway.com and through our direct interactions with you. If we process personal data on behalf of a client (for example, during an engagement where the client provides the data), that client is the controller and we act as a processor under their instructions.
Information we collect
We try to collect as little as possible. The categories below describe everything we may receive about you.
Information you provide directly
- Contact form submissions. Name, work email, company name, the services you're interested in, and the message you write to us.
- Email correspondence. If you email us, we receive your email address, your name (if shown), and the content of your message.
- Engagement data. If you become a client, we collect billing contact details, signed agreements, and any information you share in the course of the engagement (for example, business documentation, process descriptions, or data we are asked to analyze).
Information we collect automatically
- Technical and usage data. When you visit vantway.com, we may receive your IP address, approximate location derived from it, browser type, device type, referring URL, the pages you view, and the time of your visit.
- Cookies and similar technologies. See Cookie Preferences for the full list and your controls.
Information we do not collect
- We do not sell, rent, or trade personal information.
- We do not run advertising pixels or third-party advertising trackers on vantway.com at this time.
- We do not knowingly collect information from anyone under 16.
How we use information
We use the information we collect for the following purposes:
- To respond to your inquiry and follow up about a potential engagement.
- To deliver the consulting, automation, or advisory services you have hired us for.
- To send you transactional emails (proposals, contracts, invoices, project communications).
- To operate, secure, and improve vantway.com and our services.
- To analyze aggregated usage trends so we can write more useful content.
- To comply with legal obligations, enforce our agreements, and protect against fraud or misuse.
We rely on the following legal bases under applicable privacy laws (such as GDPR): your consent, performance of a contract with you, our legitimate interests in running and improving our business, and compliance with legal obligations.
Subprocessors
The following third parties process personal information on our behalf as part of operating vantway.com and supporting client engagements. We review each one for security, privacy, and trustworthiness before adopting it.
- Vercel — website hosting and analytics. United States.
- Resend — transactional email delivery for contact form submissions. United States.
- Stripe — payment processing for engagement invoices. United States.
- Google Workspace — internal email, documents, and calendar for our team. United States.
We may add or change subprocessors as our operations evolve. If you are a client with a signed data processing agreement, we will notify you of material changes in advance as required by that agreement.
Data security
We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction:
- Traffic to and from vantway.com is encrypted in transit using TLS 1.2 or higher.
- Data at rest in our subprocessors' systems is encrypted using industry-standard ciphers (AES-256 or stronger).
- Access to client and customer data is restricted to team members who need it for their work, behind unique credentials and multi-factor authentication.
- We review our security posture periodically and after any incident.
No system is perfectly secure. If you believe your account or information has been compromised, contact us immediately at hello@vantway.com. Our coordinated disclosure policy is described in our Trust Center.
Data retention
We keep personal information only as long as we need it for the purposes described in this policy, or as required by law:
- Inquiry contacts. Retained for up to 24 months after our last meaningful exchange, then deleted unless you ask us to delete sooner.
- Client engagement records. Retained for the duration of the engagement and for up to seven years afterward, to satisfy accounting, tax, and contractual obligations.
- Email correspondence. Retained per our mailbox provider's retention defaults unless the content is part of an engagement record.
- Website analytics. Retained in aggregated form; raw event logs are rotated within 14 months.
Your rights and choices
Depending on where you live, you may have some or all of the following rights with respect to your personal information:
- Access. Request a copy of the information we hold about you.
- Correction. Ask us to correct information that is inaccurate or incomplete.
- Deletion. Ask us to delete your information, subject to legal retention requirements.
- Restriction or objection. Ask us to limit or stop certain processing.
- Portability. Ask for a structured, commonly-used copy of the information you provided to us.
- Withdraw consent. Where we rely on consent, you can withdraw it at any time without affecting prior processing.
- Lodge a complaint. Contact your local data protection authority if you believe we have mishandled your information.
To exercise any of these rights, email hello@vantway.com. We will respond within 30 days. We will not discriminate against you for exercising a privacy right.
Children's privacy
Vantway's services are for businesses. We do not direct vantway.com at children under 16 and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
International users
Vantway operates from the United States. If you access our site or work with us from outside the United States, you understand that information you provide will be transferred to and processed in the United States, which may have data protection laws that differ from those in your country. Where required, we use appropriate safeguards for cross-border data transfers in accordance with applicable law.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, if the changes are material, we will provide a more prominent notice (such as an email to engaged clients or a banner on the site). Your continued use of vantway.com after the effective date constitutes acceptance of the updated policy.
Contact us
Questions about this policy or our privacy practices? We're happy to talk.
Reach the right person
For privacy questions, data subject requests, or to report a concern, email us. We aim to respond within two business days and to fully resolve within thirty.