Privacy Policy

1. Who we are

Vantis GRC Services Ltd (“Vantis,” “we,” “us”) is a company registered in the Republic of Ireland. This policy explains what personal data we collect through vantisgrc.com, why, and what rights you have over it.

2. What we collect

Depending on how you interact with Vantis, we may collect:

• Your email address, if you subscribe to our newsletter
• Basic technical data (browser type, general location, pages visited) via standard website analytics
• Account details, if you register for our Marketplace, Academy, or client portal (e.g. name, email, password)
• Billing and transaction details, if you purchase a Marketplace product or enrol in an Academy course, processed via our payment provider
• Course progress and completion data, if you enrol in Academy training
• Information you provide when engaging us for Consulting services, including business contact details and information relevant to the scope of an engagement

Not all of these categories apply to every visitor. Most people interacting with Vantis today are simply subscribing to our newsletter, and this policy applies proportionately to what you actually share with us.

3. Why we collect it

• To send you the newsletter you’ve asked to receive, including free resources and updates on new releases
• To create and manage your account if you register for the Marketplace, Academy, or client portal
• To process payments and deliver purchased products or course access
• To track course progress and issue completion records where relevant
• To deliver, manage, and communicate about Consulting engagements
• To understand site usage so we can improve it
• To meet our own legal, tax, and accounting obligations

Our legal basis is your consent (for the newsletter, withdrawable at any time), the performance of a contract (for purchases, course enrolment, or a Consulting engagement), or our legitimate business interests (e.g. basic site analytics), depending on the interaction.

4. Who we share it with

We share personal data only with service providers who help us operate Vantis, including:

• Email service providers, to manage newsletter delivery
• Payment processors, to handle purchases and enrolments securely
• Course and learning-platform providers, to deliver and track Academy training
• Hosting and infrastructure providers, to run this website

Some of these providers may be based outside the EU/EEA (e.g. in the United States). Where this is the case, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected in line with GDPR.

We do not sell or rent your personal data to third parties for marketing purposes.

5. How long we keep it

We keep personal data only for as long as necessary for the purpose it was collected for. Newsletter data is kept for as long as you remain subscribed, and removed from our active mailing list if you unsubscribe. Account, purchase, course, and engagement records are kept for as long as needed to provide the relevant service, plus any additional period required to meet our legal, tax, or accounting obligations.

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time (e.g. by unsubscribing, via the link in every email)
• Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie)

To exercise any of these rights, contact us using the details below.

7. Cookies

This site may use basic cookies or similar technologies for site functionality and analytics. You can control cookies through your browser settings.

8. Changes to this policy

We may update this policy from time to time to reflect changes in our services or legal requirements. Material changes will be reflected here with an updated “last updated” date.

9. Contact

For any questions about this policy or your data, contact us at privacy@vantisgrc.com.