Privacy Policy

This Privacy Policy applies to vantacontainers.com, our sales portals, buyer and partner dashboards, mobile experiences, marketing emails, and to in-person interactions at our depots and events. It does not cover third-party websites we link to.

The data controller is Vanta Containers Inc., 2200 Alameda St, Los Angeles, CA 90058, USA, with regional entities in Rotterdam, Singapore, and Dubai acting as joint controllers for their respective territories.

Information you provide directly. Name, company, job title, shipping and billing addresses, email, phone number, VAT/EIN/GST number, business registration numbers, payment details, container specifications, delivery windows, uploaded photos or drawings for custom modifications, and any information shared in support requests.

Information collected automatically. IP address, device and browser type, operating system, referring URLs, pages visited, session duration, click paths, and approximate location (city / region level). Collected via cookies and similar technologies (see Cookie Policy).

Information from third parties. Credit-check bureaus (for wholesale terms), sanctions and PEP screening providers, freight carrier APIs (delivery events), and single sign-on providers (Google, Microsoft) if you use them to authenticate.

We process personal data to:

• Fulfill container orders, coordinate depot pickup, and manage international shipping.
• Issue quotes, invoices, credit notes, and tax documents.
• Provide customer support and warranty service.
• Send transactional emails (order confirmations, dispatch alerts, delivery ETAs).
• Prevent fraud, verify identity, and comply with export controls, sanctions, and anti-money-laundering laws.
• Improve our marketplace, personalize catalog results, and measure marketing performance.
• Send marketing communications where you have opted in \u2014 you can unsubscribe at any time.
• Defend legal claims and enforce our Terms of Service.

Under the GDPR we rely on one or more of the following lawful bases:

• Contract performance \u2014 to fulfill your order and provide requested services.
• Legitimate interest \u2014 to prevent fraud, secure our systems, improve services, and pursue direct B2B marketing to existing customers.
• Consent \u2014 for non-essential cookies, marketing to prospects, and any sensitive data processing.
• Legal obligation \u2014 for tax records, customs declarations, export-control screening, and anti-money-laundering checks.

We share data only with partners essential to delivering our services:

• Freight forwarders, shipping lines, and drayage carriers \u2014 to arrange pickup and delivery.
• Customs brokers \u2014 for import/export clearance documents.
• Payment processors (Stripe, Adyen, bank partners) \u2014 to collect payment.
• Cloud hosting and infrastructure providers \u2014 to run our platform.
• Analytics and marketing platforms \u2014 with anonymized or aggregated data where possible.
• Professional advisors (auditors, lawyers, insurers) \u2014 under confidentiality.
• Regulators or law enforcement \u2014 where legally required.
• Successors \u2014 in the event of a merger, acquisition, or asset sale, subject to equivalent protections.

All third parties are bound by written data-protection terms. We do not sell your personal data.

Because we operate depots on four continents, personal data may be transferred outside your country, including to the United States, the European Economic Area, the United Kingdom, the United Arab Emirates, and Singapore.

Transfers from the EU/UK rely on the European Commission's Standard Contractual Clauses (2021) and, where applicable, supplementary technical, contractual, and organizational safeguards following the Schrems II judgment. A copy of the clauses is available on request.

• Transactional records (orders, invoices, customs documents) \u2014 up to 10 years to meet tax, customs, and warranty obligations.
• Account data \u2014 for the life of your account plus 24 months of inactivity, then deleted or anonymized.
• Marketing preferences \u2014 until you withdraw consent.
• Support tickets \u2014 archived after 24 months of inactivity.
• Server and access logs \u2014 up to 12 months for security investigations.
• CCTV footage at depots \u2014 30 days rolling, longer where retained for an active investigation.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete data (subject to legal retention obligations).
• Restrict or object to processing.
• Port data to another provider in a machine-readable format.
• Withdraw consent at any time (without affecting past processing).
• Lodge a complaint with your data protection authority.

See our GDPR page for how to submit a request. California residents can also review their specific rights (including opt-out of \u201csharing\u201d for cross-context behavioral advertising) via the same channel.

We apply industry-standard technical and organizational measures, including:

• TLS 1.3 encryption in transit and AES-256 at rest.
• Role-based access control with least-privilege enforcement.
• Mandatory multi-factor authentication for all internal systems.
• Continuous vulnerability scanning and quarterly penetration tests.
• Security awareness training for all employees at hire and annually.
• Documented incident-response plan with 72-hour regulator notification target.

No system is 100% secure. Please notify security@vantacontainers.com immediately of any suspected compromise.

We use automated rules for fraud scoring, sanctions screening, and credit risk. These systems may flag an order for manual review or decline high-risk transactions. You have the right to request human review of any automated decision that produces a legal or similarly significant effect on you.

Our services are intended for businesses and adults. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with data, contact our DPO and we will delete it.

We may update this policy to reflect changes in law or our services. Material changes will be notified by email to registered users and posted at the top of this page. Continued use of our services after changes take effect constitutes acceptance.

Data Protection Officer \u2014 Vanta Containers, 2200 Alameda St, Los Angeles, CA 90058, USA.

Email: dpo@vantacontainers.com \u00b7 EU representative: eu-rep@vantacontainers.com (Rotterdam) \u00b7 UK representative: uk-rep@vantacontainers.com (London).