Who controls your data
VANTAM Services is the controller for the personal data described in this policy. VANTAM Services is a Dutch eenmanszaak registered with the Dutch Chamber of Commerce under KvK number 42080058.
For privacy matters, contact vantam.request@gmail.com.
What the contact form collects
The open form is for a minimal initial enquiry. It does not accept files and does not create a contract or payment obligation.
- name, email address, enquiry type, and message
- language and the path of the page from which you submitted the form
- when provided: audience, planned moving date, city or region, housing budget range, situation status, guarantor context, and help needed
- privacy policy version and acknowledgement time
- workflow status, creation time, last meaningful contact time, and scheduled deletion time
- a pseudonymous rate-limit identifier, time window, request count, and expiry time for abuse prevention
How the contact form works
Your browser sends the form to a Next.js API running on Vercel. The server validates the request, limits abusive traffic, minimises the submitted data, and stores an accepted enquiry in Supabase PostgreSQL.
The browser cannot write directly to Supabase. Privileged credentials remain on the server, and public database access is restricted. Full form submissions are not sent through Resend or automatically delivered to Gmail.
Gmail is used only if later correspondence takes place by email. WhatsApp is a separate optional channel that you choose yourself.
Withdrawal requests
When you use the withdrawal page, VANTAM processes your name, email, contract or service reference, short service identification, locale, explicit confirmation, submission timestamp, public reference, status, and acknowledgement timestamp if an acknowledgement is sent.
The purpose is to receive and process withdrawal requests, identify the relevant contract, send the acknowledgement through Gmail, and keep a controlled operational record in Supabase PostgreSQL. The browser cannot write directly to the database.
The legal basis depends on the situation and may include steps taken at your request before a possible contract, contractual performance where a contract exists, legal obligations, and VANTAM’s legitimate interests in security and administration. This policy does not claim one legal basis for every case.
Retention for withdrawal requests is unresolved until the applicable contract or claim category is established.
Purposes and legal bases
The legal basis depends on why the data is processed. The required Privacy Policy checkbox confirms that you have read this policy; it is not the legal basis for all processing.
- responding to enquiries and taking steps you request before a possible contract
- VANTAM’s legitimate interests in website security, abuse prevention, enquiry administration, and reliable operation
- performing a contract after an engagement exists
- meeting applicable tax, accounting, record-keeping, or other legal obligations
- consent only where a separate activity specifically relies on consent
Email, phone, and WhatsApp
You may contact VANTAM by email, telephone, or WhatsApp Business. Email correspondence is handled through Gmail. WhatsApp is an optional third-party service provided by WhatsApp and Meta, and their own privacy terms apply when you use it.
- Email: vantam.request@gmail.com
- Telephone: +31 6 42 28 81 70
- WhatsApp Business: +31 6 42 28 81 70
Service providers and other recipients
VANTAM limits access to people and providers that need the data for the purposes described above.
- Vercel, as the website hosting and server runtime provider, may process technical request and operational information
- Supabase, as the PostgreSQL contact-database provider, stores accepted form enquiries and rate-limit records
- Google, as the Gmail provider, processes later email correspondence
- WhatsApp and Meta process communications when you choose WhatsApp
- professional advisers, accountants, courts, regulators, or public authorities where access is necessary or legally required
International processing
VANTAM does not claim that all data remains exclusively in the European Union. Providers and their subprocessors may process or access data internationally.
The safeguards that apply depend on the provider, processing location, and its current official terms. These may include adequacy decisions or contractual safeguards where required. This policy does not claim that VANTAM has signed a particular data processing agreement or set of standard contractual clauses unless that arrangement has been verified.
How long data is kept
Non-client enquiries may be retained for up to 12 months after the last meaningful contact. Deletion is an operational process and may not occur at the exact moment the retention period ends.
- pseudonymous rate-limit records are kept only for a short operational period
- email, WhatsApp, and client records are kept only as reasonably necessary for communication, services, disputes, and applicable legal obligations
- withdrawal requests are retained until the applicable contract or claim category retention decision is established
- records may be deleted earlier when they are no longer needed or retained longer where an applicable legal duty or justified dispute requires it
Security and sensitive documents
VANTAM uses technical and organisational measures intended to reduce risk, including server-side validation, origin checks, request-size limits, abuse controls, restricted database access, and server-only credentials. No system can guarantee absolute security.
The contact database does not store raw IP addresses for rate limiting. The server converts a valid client IP address into an irreversible HMAC-derived identifier before storage.
Do not submit passports, banking documents, health data, guarantor documents, or other sensitive files through the open form or an ordinary WhatsApp conversation.
Your data protection rights
Depending on the circumstances, the General Data Protection Regulation gives you rights of access, correction, deletion, restriction, objection, and data portability where applicable. You may withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing.
Send a request to vantam.request@gmail.com. VANTAM may request information reasonably necessary to verify your identity. You may also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.
Automated decision-making
The website does not make decisions with legal or similarly significant effects based solely on automated processing.
Policy changes
VANTAM may update this policy when its services, providers, legal obligations, or website processing change.
Last updated: 16 June 2026.