Website information

Privacy

This notice explains how VANTIS collects, uses, stores and protects personal information through the VANTIS website.

Data controller

VANTIS is the Veteran Analysis & Intelligence System and is operated by VANTIS INTELLIGENCE LIMITED, a company registered in England and Wales under company number 17456669. VANTIS INTELLIGENCE LIMITED is the data controller for personal information collected through this website.

Privacy and data protection enquiries can be sent to vantisdataintelligence@gmail.com.

Information collected when you register

When you create a VANTIS account, we collect your first name, surname, organisation, role or job title, organisation type, primary area of interest, email address and account credentials. The registration form also asks for information about your reason for using VANTIS. You may provide other optional information where the form identifies it as optional.

Required registration information is necessary to create, secure and administer a VANTIS account and to understand the context in which access is requested. If required information is not provided, we cannot create the account.

We use registration information to create and administer your account, verify your email address, protect the registration process, understand the professional context in which VANTIS may be used and manage access to the service.

The lawful basis for this processing is our legitimate interests in operating, securing and administering VANTIS and controlling access to the service. Where processing is necessary to take steps at your request before providing access to VANTIS, that may also be relevant to the processing of your registration information.

Account authentication and security

VANTIS uses Supabase to provide account authentication and related data services, including registration, email verification, sign-in, password recovery and account administration. Registration information and authentication data are processed through Supabase for these purposes.

VANTIS uses technical security controls to prevent abuse and protect accounts. These include rate limiting, secure session technologies and, for some functions, a cryptographic hash derived from network information such as an IP address. Hashes used for rate limiting are security identifiers rather than being used for advertising or behavioural profiling.

Cloudflare Turnstile

VANTIS uses Cloudflare Turnstile on registration and authenticated feedback submissions to help distinguish legitimate users from automated or abusive activity. Cloudflare may process technical information including your IP address, browser or device information and the Turnstile challenge response for security and fraud-prevention purposes.

The lawful basis for VANTIS using this information is our legitimate interests in protecting the website, its forms and users from automated abuse, fraud and malicious activity.

Website analytics

VANTIS uses Vercel Web Analytics to understand how the website is used and to improve the service. Analytics may provide aggregated information such as page views, visitor numbers, pages visited, referral sources, country or approximate location, browser, operating system and device information.

Vercel Web Analytics is designed to operate without analytics cookies. It uses privacy-focused first-party measurement and does not allow VANTIS to track visitors across unrelated websites. VANTIS uses analytics information to measure use of the service, understand which parts of the website are useful and identify where the website can be improved. It is not used by VANTIS for advertising or behavioural profiling.

The lawful basis for this processing is our legitimate interests in measuring, maintaining and improving VANTIS while using a privacy-focused analytics service that does not rely on analytics cookies.

VANTIS email updates

During registration you can choose whether to receive VANTIS updates by email. This is optional and is not required to create an account.

Where you consent, VANTIS records your email address together with information about that consent, including when it was given, the wording presented to you and the source of the consent. The lawful basis for sending these updates is consent. You can withdraw your consent or unsubscribe at any time.

Feedback

Signed-in users can submit feedback about VANTIS, including errors, questions and suggestions. We may collect the feedback category, subject, message, account identifier, email address and technical or security information needed to process and protect the submission.

Feedback is used to investigate reported issues, respond where appropriate, improve VANTIS and protect the feedback service from abuse. The lawful basis is our legitimate interests in operating, improving and securing VANTIS and communicating with registered users about their submissions.

Technical information

Website hosting, delivery and security infrastructure may process technical information required to operate and protect the service, including IP addresses, request information, browser or device information, timestamps and security logs. VANTIS does not use this information for advertising or behavioural profiling.

Research and analytical data

VANTIS brings together national statistics, local authority data and information obtained through Freedom of Information requests. This website notice concerns personal information processed through the website itself. It does not imply that underlying VANTIS research datasets contain identifiable personal information.

Service providers and recipients

VANTIS uses third-party service providers to operate and secure the website. These currently include Supabase for authentication and related data services, Cloudflare for Turnstile security checks, Vercel for website hosting, delivery, server-side application infrastructure and website analytics, and Resend for transactional email associated with website functions where used.

These providers may process personal information only as required to provide their services, meet legal obligations and maintain the security and reliability of their platforms.

International transfers

Some service providers used by VANTIS operate internationally and may process personal information outside the United Kingdom. Where UK personal information is transferred internationally, VANTIS relies on safeguards available under UK data protection law, such as UK adequacy regulations or appropriate contractual safeguards where required.

Retention

Account and profile information will normally be retained while your VANTIS account remains active and for a reasonable period afterwards where required for account administration, security, legal or audit purposes. Accounts that are rejected, closed or no longer required will be deleted or anonymised when there is no continuing lawful reason to retain the information.

Security and rate-limiting records are retained only for as long as reasonably necessary to protect the service and investigate abuse. Records relating to email-update consent may be retained for as long as needed to demonstrate consent or withdrawal and to ensure that unsubscribe preferences are respected.

Website analytics information is retained according to the settings and retention arrangements of the analytics service and is used by VANTIS in aggregated form to understand website usage and trends.

Feedback submissions will be retained only for as long as reasonably necessary to investigate, respond to and learn from the submission, or where a longer period is required for security, legal or audit purposes.

Automated decision-making

VANTIS does not currently use personal information collected through the website to make solely automated decisions that produce legal effects or similarly significant effects on users. Security controls may automatically identify or block suspected automated or abusive requests, but these controls are used to protect the service rather than to make decisions of that kind about individuals.

Your data protection rights

Depending on the circumstances and lawful basis, UK data protection law can provide rights including access, correction, erasure, restriction, objection and data portability. Where processing relies on consent, you can withdraw that consent at any time without affecting processing carried out before withdrawal.

Requests relating to personal information held by VANTIS can be sent to vantisdataintelligence@gmail.com.

Complaints

You have the right to raise a concern with the Information Commissioner's Office, the UK supervisory authority for data protection. Information about making a complaint is available at ico.org.uk/make-a-complaint.

Changes to this notice

This notice was last updated on 16 September 2026 and will be reviewed whenever website functionality, suppliers or personal-data processing changes materially.