Skip to content

Policy Center

Vantus legal policies

Client-facing terms, privacy, accessibility, data processing, copyright, security reporting, and vendor disclosures for Vantus Systems public services.

Privacy Policy

We collect only the information needed to operate, secure, sell, and deliver Vantus Systems services. We do not sell personal data, sensitive personal data, or biometric personal data.

EffectiveJune 5, 2026

This Privacy Policy explains how Vantus Systems, Inc. ("Vantus," "we," "us," or "our") collects, uses, shares, protects, and retains information through the public website, contact and audit forms, client onboarding, support workflows, and related services that link to this policy.

This policy is designed to reflect our actual public-site data flows and to support federal and Florida privacy, security, breach, child-safety, and consumer-protection obligations. It is not a substitute for a signed customer agreement, data processing agreement, business associate agreement, or security addendum when a specific engagement requires one.

Our privacy commitments

  • We do not sell personal information.
  • We do not sell sensitive personal data.
  • We do not sell biometric personal data.
  • We do not use Meta Pixel, Google Analytics, ad retargeting, or cross-site advertising cookies.
  • We use essential cookies for site operation, security, authentication, and preferences.
  • We use privacy-preserving analytics only for aggregate public-site measurement.
  • We do not knowingly collect information from children under 13.
  • We do not operate the public website as an online service, game, social media platform, or feature predominantly accessed by children.

Information we collect

Category
Examples
Purpose
Retention
Identity and contact data
Name, email address, company, role, phone number if supplied, and message content.
Responding to inquiries, scoping services, client communication, support, and account administration.
For the relationship period, then only as needed for legal, tax, security, or dispute records.
Project and business data
Website, infrastructure, workflow, security, audit, and operational details you submit.
Evaluating fit, preparing recommendations, delivering services, and maintaining project history.
For active delivery and a reasonable post-delivery records period unless an agreement requires more or less.
Billing and commercial data
Billing contacts, invoice records, payment status, tax details, and payment processor references.
Payment processing, accounting, fraud prevention, tax compliance, and contract administration.
Generally retained for legal, accounting, tax, and audit obligations.
Account, authentication, and security data
Account identifiers, session data, login events, IP address, device/browser metadata, audit logs, and support history.
Authentication, access control, abuse prevention, incident response, and platform integrity.
Security logs are retained only as long as reasonably needed for security, operations, compliance, and investigation.
Cookie and analytics data
Essential session cookies, security tokens, preference data, and privacy-preserving site analytics.
Operating the site, protecting sessions, measuring aggregate usage, and improving public content.
Session and security cookies expire based on their function; analytics are minimized and not used for ad profiling.

How we use information

We use personal information to:

  • respond to contact, audit, support, legal, privacy, and security requests;
  • evaluate, scope, price, deliver, and support Vantus engagements;
  • operate accounts, portals, subscriptions, invoices, support channels, and administrative systems;
  • authenticate users, prevent fraud, detect abuse, maintain audit logs, and investigate security events;
  • comply with legal obligations, subpoenas, discovery requests, court orders, government requests, tax obligations, and dispute-resolution duties;
  • measure aggregate public-site performance without building ad profiles or cross-site behavioral profiles.

Cookies, analytics, and opt-out signals

We use cookies only where they are needed for essential operation, security, authentication, preferences, or legally permitted measurement. Our public-site analytics are designed to avoid advertising profiles and cross-site tracking. See the Cookie Policy for details.

We do not currently sell or share personal information for targeted advertising. If a law requires recognition of a universal opt-out mechanism such as Global Privacy Control, we will treat that signal as a valid opt-out for the browser or device sending it. Florida law does not currently require Global Privacy Control recognition, but we design consent flows to avoid dark patterns and to make privacy choices clear.

Sensitive, biometric, health, and geolocation data

We do not intentionally collect sensitive personal data, biometric data, precise geolocation data, or health information through the public website unless you voluntarily provide it in connection with a support, security, legal, or project request. Do not submit protected health information, personal health record data, or other regulated data unless a written agreement authorizes that handling.

If a specific engagement requires handling protected health information, personal health record information, or health-app data, Vantus will use the applicable written agreement, business associate agreement, data processing agreement, authorization, vendor controls, and breach-notification workflow required for that engagement. We do not deploy advertising pixels on authenticated health or patient-information pages.

Children and minors

The Vantus public website and services are intended for business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information, contact us and we will delete it unless retention is legally required.

For Florida residents under 18, we treat known minor data as sensitive. We do not profile minors, sell minor data, share minor data for advertising or marketing, or collect precise geolocation from minors unless strictly necessary for a requested service and supported by lawful authorization. Any age-estimation data collected solely for compliance must be used only for that purpose and deleted promptly after the age check.

Sharing and subprocessors

We share information only with service providers, subprocessors, professional advisors, payment processors, security providers, infrastructure providers, and authorities when needed for the purposes described in this policy or required by law. Our subprocessor list is maintained at /legal/subprocessors.

We require vendors that maintain, store, or process personal information for us to use reasonable security controls and to notify us promptly of security incidents. Where Florida breach law applies, vendor contracts are expected to support the 10-day third-party agent notice window and Vantus response obligations.

Security and breach response

We use reasonable technical and organizational safeguards, including encryption in transit, access controls, role-based permissions, audit logging, secret-management practices, and incident-response workflows. No system is perfectly secure, but security events are handled as operational incidents, not marketing issues.

If a breach of Florida personal information occurs, we will evaluate and provide notices required by the Florida Information Protection Act, including notice to affected individuals and, when thresholds are met, notice to the Florida Department of Legal Affairs and consumer reporting agencies. If a breach involves regulated health information or personal health records, we will evaluate FTC, HHS, individual, media, and customer notice obligations under the applicable rules.

Your privacy rights

Depending on your location, relationship with us, and the law that applies, you may have the right to:

  • Request access to personal information we maintain about you.
  • Request correction of inaccurate information.
  • Request deletion when retention is no longer legally or operationally required.
  • Request portability of information where required by law.
  • Opt out of sales of personal data, targeted advertising, profiling, or sensitive data processing where those rights apply.
  • Appeal a denied privacy request where an appeal process is required by law.

Submit privacy requests to privacy@vantus.systems. We may need to verify your identity and your authority to act for another person. Where the Florida Digital Bill of Rights applies to a request, we will respond within the statutory response period, provide an appeal path for denied requests, and respond to appeals within the applicable deadline.

Data disposal and retention

We retain information only for the purposes described above and for legal, tax, accounting, security, dispute, warranty, and operational requirements. When personal information is no longer needed, we delete, erase, anonymize, or otherwise modify it so it is no longer readable or reasonably linkable, unless retention is legally required.

Legal requests and public records

We may disclose information to comply with subpoenas, court orders, discovery obligations, law-enforcement requests, regulatory inquiries, legal claims, and requests needed to protect rights, safety, security, property, or service integrity. Information you submit to a public agency, public docket, or public legal process may become publicly available under the rules that govern that process.

Policy updates

We update this policy when our services, data flows, vendors, legal obligations, or privacy practices materially change. The effective date above reflects the latest public-site policy update.

Contact

Privacy requests: privacy@vantus.systems
Security reports: security@vantus.systems
General contact: /contact