01 Scope & responsibility
“Vantage”, “we”, and “our” refer to Vantage Digital Labs Limited, a company incorporated in the British Virgin Islands (BVI), company number 2197849, operating under the Vantage Digital brand. Our registered address is MC Chambers, Wickhams Cay 1, Road Town, Tortola, British Virgin Islands.
This policy covers information handled through our public website, business enquiries, and client relationships, including authorised trading services. Vantage Digital Labs Limited is responsible for the processing described here. Privacy requests and legal notices can be sent to [email protected].
Specific onboarding, trading, counterparty due diligence, or processing carried out on a client’s instructions may require supplementary notices or data-processing terms. Those documents explain the relevant roles and additional processing. Third-party websites and platforms have their own privacy terms.
02 Information we handle
- Business enquiries: information you send by email or through our listed communication channels, such as your name, work email, organisation, role, and message.
- Correspondence: follow-up messages and information you choose to provide about a potential engagement. Please avoid sending identity documents, private keys, seed phrases, or sensitive personal information through an initial enquiry.
- Client and trading records: information needed for an agreed mandate, such as authorised contacts, client instructions, account references, approvals, order and execution records, and relevant settlement or due-diligence information. The precise information depends on the service and applicable requirements.
- Technical information: hosting, security, and external content providers may receive an IP address, browser details, request time, and requested resource when delivering the website. Vercel hosts our website, Cloudflare provides domain and delivery services, and Amazon Web Services (AWS) supports our server and data hosting.
Introduction form: when you submit the form, we use your email address to send an introduction request to [email protected] through our business email service. The message includes your email address and submission time so our team can respond. Technical request information may be used temporarily to limit duplicate submissions and abuse. Submitting the form does not subscribe you to marketing emails.
03 How information is used
We use relevant information to respond to enquiries, assess and administer client relationships, carry out authorised mandates, maintain instruction and trading records, arrange business communications, operate and secure the website, and meet applicable legal obligations, including relevant sanctions and due-diligence requirements.
Providing enquiry information is voluntary, although we may be unable to respond without a way to contact you. A business enquiry is not, by itself, a request to join a marketing mailing list. Any future marketing or additional use should be described before it begins, with the choices required by applicable law.
04 Legal bases
Where applicable law requires a legal basis, the relevant bases are:
- Business correspondence: legitimate interests in answering relevant enquiries and managing business relationships, subject to an assessment of individuals’ rights.
- Steps toward a contract: where you personally request steps necessary before entering a contract with us.
- Agreed services: performance of a contract where you are personally a party to it, or another applicable basis for business contacts and representatives involved in a corporate mandate.
- Security and legal obligations: legitimate interests in protecting the website, or a specific legal obligation where one applies.
- Optional tracking or marketing: consent where required. Consent may be withdrawn without affecting earlier lawful processing.
The applicable legal basis depends on the processing purpose and jurisdiction.
06 AI-assisted work
We do not use customer information to train or fine-tune AI models. Customer information used as input to AI-assisted analysis, research, or reporting must first be de-identified. Identifying details must be removed or masked before the data enters those workflows.
De-identification does not automatically make information anonymous. If a person can still be identified or re-identified, the information remains subject to the applicable personal-data protections and agreed confidentiality requirements.
We use enterprise API services from OpenAI and Anthropic (Claude) to develop and operate AI agents. Agent development involves configuring, testing, and refining agents, prompts, and workflows. These services must be used under arrangements and settings consistent with this policy, including the restriction on training with customer information.
The current public website has no AI chat or AI-based enquiry analysis. Human oversight and agreed trading authority continue to apply to any AI-assisted work.
08 Retention & security
Our standard retention policy is three years, with automatic deletion when the applicable period ends. The period starts according to the category of information:
- Enquiry emails and related correspondence: three years from the end of the enquiry. Information incorporated into an ongoing client relationship follows the client-record schedule below.
- Client information and engagement records: three years from the end of the client relationship.
- Technical logs: three years from the date each log entry is created.
- Backups: the retention deadline follows the underlying record category. Creating a backup or restoring a record does not restart its retention period; expired records must not be returned to active use.
These standard periods are subject to any applicable legal requirement to keep records longer or delete them sooner.
Records subject to mandatory transaction, due-diligence, sanctions, tax, or other recordkeeping obligations, or a binding preservation order, must be retained for the required period. Automatic deletion is suspended for the affected records until the obligation ends. A valid deletion requirement under applicable law, or a lawful order from a competent government authority or court, is followed according to its terms.
Appropriate safeguards must reflect the sensitivity of the information and the systems used. No website or communication channel can guarantee absolute security.
09 Your choices & rights
Depending on the law that applies, you may have rights to access or receive a copy of your information, correct it, request deletion, restrict processing, or obtain it in a portable format. These rights may be subject to legal conditions and exceptions.
You may also have a right to object to processing based on legitimate interests, and to object to direct marketing. Where processing relies on consent, you may withdraw it. You may complain to the relevant data protection authority without first contacting us.
Vantage Digital Labs Limited receives and coordinates access, correction, deletion, and other privacy requests through [email protected]. Use “Privacy request” in the subject. We may need proportionate information to verify your identity and will handle the request within the period required by applicable law, taking account of any mandatory recordkeeping obligations.
10 Children
The website is intended for professional and business audiences, not for children. If you believe a child has sent personal information to us, contact us so the circumstances can be reviewed and appropriate action taken.
11 Changes to this policy
The date above records the latest revision of this page. Changes to the website or information-handling practices will be reflected in this notice. Material changes to purposes or practices require any additional notice or consent required by applicable law.
12 Contact
Vantage Digital Labs Limited
Company number: 2197849
Registered in: British Virgin Islands
Registered address: MC Chambers, Wickhams Cay 1, Road Town, Tortola, British Virgin Islands.
For privacy requests, legal notices, or questions about this policy, email [email protected].