Privacy Policy

Who we are

Vantic (“we”, “us”) operates byvantic.com.

As a small business operator we are not currently an APP entity under the Privacy Act 1988 (Cth). We hold ourselves to the Australian Privacy Principles anyway, because the standard we sell is the standard we keep, and because the alternative is asking you to trust a threshold rather than a practice.

What we collect

When you submit the enquiry form we collect your name, email address, an optional company name, and the message you write.

There is also one hidden field, left empty and never shown to you. Automated submissions tend to fill it in and people never do, which is how we keep the form open without it becoming a spam target. If it arrives with anything in it, the enquiry is discarded and nothing is sent or stored.

We do not collect payment details, government identifiers, or sensitive information through this site.

Why we collect it

To read your enquiry and reply to it. Your details are used to answer you and, if we go on to work together, to run that engagement. We do not sell personal information, and we do not add you to a marketing list because you sent an enquiry.

Analytics

We use Google Analytics to understand which pages are read and what brought people to them. It sets two cookies, named in full on the cookie page, and sends that measurement data to Google. The tag refuses advertising storage, ad personalisation and ad user data.

Vercel Analytics and Vercel Speed Insights sit alongside it for page views and load performance. Both are aggregate and cookieless.

We use Microsoft Clarity as well, and because it works differently from the others it gets its own section below rather than a line here.

We do not use any of it to build a profile of you, and we do not sell any of it.

Session replay

Microsoft Clarity shows us how pages are actually used — where people stop, what they click that isn’t clickable, where a layout fights them. It is the difference between knowing a page was read and knowing it didn’t work.

It is not a video, and there is no camera, microphone or screen capture involved. Clarity records the page’s own HTML and every change to it, together with your clicks, taps, scrolls, pointer movement and window size, and reassembles that into a step-by-step reconstruction of the visit. What it replays is our page, redrawn.

What you type is masked in your browser before anything is sent, and the enquiry form is additionally marked as masked in the markup, so the name, email, company and message you write there are not in the recording. Passwords and fields marked as secrets are dropped entirely. Everything else on the screen is our own published copy, which you can already read without us.

Microsoft receives your IP address as part of this and uses it to place the visit by country and city. We are not going to tell you it is anonymised, because Microsoft does not say that anywhere we can point to.

Recordings are kept for 30 days, after which Microsoft retains a small sample for up to nine months; click, heatmap and aggregate data is kept for nine months. One honest limitation: Microsoft gives us no way to delete one visitor’s recordings — the only deletion available is the whole project at once. If that matters to you, the section below on turning it off is the real remedy.

Who else handles your information

Vercel Inc. hosts this site and processes the request logs that come with serving it.

Resend handles delivery of the enquiry email and the confirmation we send back to you.

Google LLC receives the analytics measurement described above.

Microsoft Corporation, One Microsoft Way, Redmond, Washington, receives what Clarity captures.

The first three act on our instructions. Microsoft does not, and we would rather say so than let the list imply otherwise: its terms state that Microsoft and the site operator are independent controllers, that Microsoft is expressly not our processor, and that it may use what it collects for its own purposes under its privacy statement — including building user profiles for advertising. Microsoft states it does not sell the data. We cannot sign a processing agreement with them, because they do not offer one. Their statement is at privacy.microsoft.com/privacystatement, and it governs their half of this.

Processing occurs outside Australia — Clarity data goes to data centres in the United States, and the others operate across regions Microsoft, Google, Vercel and Resend each choose. The Australian Privacy Principles permit that provided we take reasonable steps to keep your information protected, and the reasonable step available for Clarity is telling you plainly what it is and giving you a working way to switch it off.

How long we keep it

We keep enquiries in our mailbox while the conversation is live, and afterwards only while we have a business or legal reason to. Ask us to delete yours and we will, unless a law requires otherwise.

Access, correction and complaints

You can ask what we hold about you, ask us to correct it, or ask us to delete it. Email hello@vantic.com.au and a person will answer.

If you believe we have mishandled your information, tell us first and we will investigate. You will get a considered answer, not a form response.

Because we are not currently an APP entity, the Office of the Australian Information Commissioner will generally decline a complaint about us — we would rather tell you that than point you at a door that will not open. If we ever become an APP entity, that route opens and this page will say so.

Security

Enquiries travel over TLS, and the mailbox they land in is protected by multi-factor authentication. No transmission over the internet is perfectly secure, and we will not claim otherwise.