This Privacy Policy describes how Vantir Labs, Inc. collects, uses, and protects your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations of the National Privacy Commission (NPC) of the Philippines. Please read it carefully.
1. Overview
Vantir Labs, Inc. ("Vantir Labs," "we," "us," or "our") is committed to protecting your personal information in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, use our products or services, or communicate with us. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
Vantir Labs, Inc. is a product studio that builds software applications and API products, and delivers professional services (including consulting, design, development, and API integration). For purposes of the DPA, Vantir Labs acts as a Personal Information Controller (PIC) with respect to the personal data you provide to us directly.
If you have questions or concerns about this Privacy Policy or our data practices, you may contact our Data Protection Officer (DPO) at:
Email: privacy@vantirlabs.com
Address: Philippines
We will respond to all privacy-related inquiries within fifteen (15) working days.
3. Personal Data We Collect
We collect personal data that you provide voluntarily and data generated through your use of our services. This may include:
Identity and Contact Information
— Full name, email address, job title, and company name (provided via contact forms, waitlists, or account registration).
Communications Data
— Messages, inquiries, and feedback you send to us through our website or email.
Usage and Technical Data
— IP address, browser type and version, operating system, pages visited, time spent on pages, referring URLs, and other diagnostic data collected through cookies and similar technologies.
Subscription and Newsletter Data
— Email address provided when subscribing to our newsletter or product updates.
We do not intentionally collect sensitive personal information (as defined under Section 3(l) of the DPA) such as government-issued ID numbers, health information, or financial account details through our website.
4. Legal Basis for Processing
We process your personal data only when we have a lawful basis to do so under the DPA. The applicable bases are:
Consent — Where you have given clear, freely given, specific, informed, and unambiguous consent to the processing of your personal data (e.g., subscribing to our newsletter).
Contractual Necessity — Where processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (e.g., setting up a service account).
Legitimate Interests — Where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms (e.g., improving our website and services, security monitoring).
Legal Obligation — Where processing is necessary to comply with a legal obligation imposed on us under Philippine law.
You may withdraw consent at any time by contacting us at privacy@vantirlabs.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
5. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
— To respond to your inquiries, requests, and feedback.
— To provide, maintain, and improve our products and services.
— To send you product updates, newsletters, and marketing communications (only where you have consented).
— To manage waitlists and notify you when products become available.
— To analyze usage patterns and optimize the performance of our website and services.
— To detect, investigate, and prevent fraudulent, unauthorized, or illegal activities.
— To comply with applicable laws, regulations, and legal processes.
— To enforce our Terms of Service and other agreements.
We process your personal data only for the specific purposes stated at the time of collection and for compatible purposes consistent with those stated.
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties. We may share your personal data in the following limited circumstances:
Service Providers — We engage trusted third-party service providers (Personal Information Processors, or PIPs) who process personal data on our behalf, such as cloud hosting providers, email delivery services, and analytics platforms. These providers are bound by data processing agreements consistent with the DPA and may only process your data pursuant to our instructions.
Legal Requirements — We may disclose your personal data if required by law, court order, or government authority, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers — In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
We require all third parties to maintain appropriate security measures and to treat your personal data in accordance with applicable law.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law and regulation.
The general retention periods we apply are:
— Contact and inquiry data: up to two (2) years from the date of last contact.
— Newsletter subscriber data: until you unsubscribe or request deletion.
— Technical and usage data: up to one (1) year on a rolling basis.
— Data required for legal or regulatory compliance: as mandated by applicable law.
After the applicable retention period, your personal data will be securely deleted or anonymized in a manner that renders it non-identifiable.
8. Your Rights as a Data Subject
Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data:
Right to Be Informed — You have the right to be informed of how your personal data is collected, used, and processed prior to its collection.
Right to Access — You have the right to request reasonable access to your personal data held by us, including the sources, purposes, and recipients of such data.
Right to Rectification — You have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure or Blocking — You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, consent has been withdrawn, or processing is unlawful.
Right to Object — You have the right to object to the processing of your personal data, including processing for direct marketing purposes.
Right to Data Portability — You have the right to obtain and reuse your personal data across different services, where technically feasible.
Right to File a Complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that your rights under the DPA have been violated. The NPC may be contacted at info@privacy.gov.ph or through www.privacy.gov.ph.
Right to Damages — You have the right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
To exercise any of these rights, please submit a written request to privacy@vantirlabs.com. We will respond within fifteen (15) working days of receiving your request.
9. Data Security
We implement reasonable and appropriate organizational, physical, and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit (TLS/HTTPS), access controls, and regular security assessments.
In the event of a personal data breach that is likely to result in serious harm to you, we will notify the NPC and, where required, affected data subjects within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.
While we take all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. We encourage you to use strong, unique passwords and to notify us immediately if you suspect any unauthorized use of your data.
10. Cookies and Similar Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand how our services are used. Cookies are small text files placed on your device.
We use the following types of cookies:
Essential Cookies — Necessary for the website to function correctly. These cannot be disabled.
Analytics Cookies — Help us understand how visitors interact with our website (e.g., pages visited, time on site). Data collected is aggregated and anonymized.
Preference Cookies — Remember your settings and preferences (e.g., theme selection).
You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Where required by law, we will obtain your consent before placing non-essential cookies.
11. Third-Party Links
Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit. We are not responsible for the privacy practices or content of third-party websites.
12. Children's Privacy
Our services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected personal data from a minor, please contact us immediately at privacy@vantirlabs.com and we will take prompt steps to delete such data.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on our website.
We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acknowledgment of the updated policy.