Privacy Policy
Last updated: October 2026
1. Controller
The controller responsible for processing personal data on this website is:
Vantage Health Strategy LLC
30 N Gould St
Sheridan, WY 82801, United States
Email: hello@vantage-healthstrategy.com
Data protection officer: Not appointed. A data protection officer is not required for an organization of our size and processing activities.
2. What we process, and why
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Server log data (IP address, timestamp, page requested, referrer, browser and OS) | Delivering the site, security, troubleshooting | Art. 6(1)(f) — legitimate interest in a secure, functioning site | 7 days |
| Contact form: name, email, organisation, your message | Answering your enquiry and any follow-up | Art. 6(1)(b) — pre-contractual steps; Art. 6(1)(f) — business communication | 24 months after our last communication |
| Cookie and consent preferences | Remembering your choice | Art. 6(1)(c) — legal obligation to record consent | Until you clear your browser data |
3. Processors and recipients
We use the following service providers, each under a data processing agreement:
| Provider | Function | Location | Transfer safeguard |
|---|---|---|---|
| Netlify, Inc. | Website hosting | United States | EU Standard Contractual Clauses |
| Formspree, Inc. | Contact form delivery | United States | EU Standard Contractual Clauses |
| Google LLC (Google Fonts) | Web fonts | United States | EU Standard Contractual Clauses |
Where data is transferred outside the EEA, we rely on the safeguards named above, such as EU Standard Contractual Clauses or an adequacy decision.
4. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have data erased (Art. 17);
- restrict processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting processing already carried out; and
- lodge a complaint with a supervisory authority. As we have no establishment in the EU, you may contact the data protection authority of the EU member state in which you live or work.
To exercise any of these, write to hello@vantage-healthstrategy.com. We respond within one month.
5. Is providing data required?
No. Browsing the site requires no personal data beyond the technical log data above. If you use the contact form, the fields marked as required are needed for us to reply; without them we cannot answer.
6. Automated decision-making
We do not use your data for automated decision-making or profiling.
7. Security
The site is served over TLS, and we apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
8. Changes
We may update this notice as the site or the law changes. The version in force is the one published here, with the date shown above.