01
Who we are
Vornant Ltd is a software company registered in England and Wales. For the personal information covered by this notice, Vornant Ltd is generally the data controller. This means we determine why and how that information is used.
- Company
- Vornant Ltd
- Company number
- 17384130
- Registered office
- 4th Floor, 14 Museum Place,
Cardiff, CF10 3BH - Privacy contact
- privacy@vornant.com
In some client engagements, Vornant may process personal information on behalf of a client rather than determining the purposes for which that information is used. In those circumstances, the client may be the controller and Vornant may act as its processor under the applicable contractual terms.
02
Information we collect
The information we process depends on how you interact with Vornant.
Information you provide to us
When you contact us or communicate with Vornant in connection with a potential or existing business relationship, we may receive information such as:
- Your name
- Your email address and other business contact details
- Your organisation and role
- The content of enquiries, correspondence and project communications
- Information required to prepare proposals, agreements, invoices or other business records
- Other information you choose to provide in connection with an enquiry or engagement
Information generated when you use our website
When you access the Vornant website, technical information may be processed automatically by the systems used to deliver, secure and operate the website. This may include:
- IP address
- Browser and device information
- Requested pages and resources
- Date and time information
- Network and request information
- Security and diagnostic logs
We do not ask you to provide sensitive credentials such as passwords, API keys, MFA seeds or private signing material through ordinary website or email enquiries.
03
How we use your information
Vornant may use personal information where necessary to:
- Respond to enquiries and communicate with you
- Assess potential projects, requirements and business relationships
- Prepare and manage proposals, contracts and client engagements
- Deliver agreed services and provide project support
- Administer billing, payments and business records
- Operate, maintain, secure and troubleshoot our website and technical services
- Prevent or investigate misuse, security incidents and fraudulent activity
- Meet legal, regulatory and accounting obligations
- Establish, exercise or defend legal rights where necessary
04
Lawful bases for using personal information
Data protection law requires us to have a lawful basis for each purpose for which we use personal information. Depending on the circumstances, Vornant may rely on:
Contract
Where processing is necessary to perform a contract with you or to take steps at your request before entering into one.
Legitimate interests
Where processing is necessary for legitimate business interests, such as responding to business enquiries, maintaining client relationships, operating our systems, securing our services and managing the business, provided those interests are not overridden by your rights and interests.
Legal obligation
Where we need to process information to meet legal, regulatory, tax, accounting or other applicable obligations.
Consent
Where we specifically ask for your consent for a particular use of your information. Where processing depends on consent, you may withdraw it at any time.
06
International transfers
Some service providers used by Vornant may process or make personal information accessible from locations outside the UK.
Where this amounts to a restricted international transfer under UK data protection law, we use an applicable transfer mechanism or safeguard. Depending on the destination and provider, this may include UK adequacy regulations or appropriate contractual safeguards.
You can contact us if you would like more information about the safeguards relevant to your personal information.
07
How long we keep information
We keep personal information only for as long as it is reasonably required for the purpose for which it was collected and for any related legal, accounting, security or dispute-management requirements.
The appropriate period depends on the type of information and the context in which it is held. When deciding how long to retain information, we may consider:
- The nature and sensitivity of the information
- Whether an enquiry develops into a business relationship
- The duration of a client or supplier relationship
- Contractual and support obligations
- Legal, tax and accounting requirements
- Security and operational requirements
- The need to establish, exercise or defend legal claims
Information that is no longer required will be deleted, anonymised or otherwise handled in accordance with the applicable retention process.
08
Your data protection rights
Depending on the circumstances and the lawful basis being used, data protection law may give you rights in relation to your personal information.
- Access: ask for a copy of personal information we hold about you
- Rectification: ask us to correct inaccurate or incomplete information
- Erasure: ask us to delete personal information in circumstances where the right applies
- Restriction: ask us to restrict how personal information is used in certain circumstances
- Data portability: receive certain information in a portable format where the right applies
- Withdraw consent: withdraw consent at any time where consent is the basis for processing
Your right to object
You may have the right to object to processing based on legitimate interests. If you object, we will consider your circumstances and whether there are compelling legitimate grounds for the processing to continue.
These rights are not absolute and may not apply in every circumstance. To make a request, contact privacy@vornant.com.
10
Keeping information secure
Vornant uses technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
The measures used depend on the nature of the information and the systems involved and may include access controls, authentication, encryption, secure communications, system updates, backups, logging and controlled handling of credentials.
No method of electronic storage or transmission can eliminate every security risk, so security controls are reviewed in the context of the systems and information they protect.
11
Questions and complaints
If you have a question about this notice, want to exercise a data protection right or are concerned about how Vornant has handled your personal information, contact:
If you believe we have not resolved a data protection concern, you also have the right to complain to the Information Commissioner's Office, the UK data protection regulator.
Information Commissioner's Office12
Changes to this notice
We may update this privacy notice where our services, website, processing activities or legal obligations change.
The date at the top of this page identifies the most recent version. Material changes will be reflected in the published notice when they take effect.