Legal

Privacy notice

Last updated 27 July 2026

This platform is a private deal room. Access is by invitation and everything inside it is confidential, so we record who opens what. This notice explains exactly what that means, because it is more than most websites do and you are entitled to know before you use it.

Who we are

Valantai is the data controller for the personal data described here. Valantai acts as a broker to the party selling the goods presented on this platform; it is not the seller and not the manufacturer.

Questions about this notice, or any request about your data, go to trade@valantai.com. We have not appointed a Data Protection Officer, as we are not required to.

What we collect, and why

Four things, and the fourth is the one to read carefully.

Your invitation

Your name, email address, company and country, given to us by the person at Valantai who invited you. Used to decide whether you may enter a room and what you may see in it.

Confidentiality acceptance

When you accept the confidentiality wording, we record your email address, name, company, the date and time, your IP address, your browser, and the exact wording you were shown. Used so both sides can later establish what was agreed and when.

Enquiries

Anything you type into the register-interest form: what you are interested in, quantity, destination market, timing, your company and any message. Used to respond to you.

Your activity in the room

Every page you open, every document you read and every file you download, each recorded against your email address with the date and time, your IP address and your browser. Downloads also record which document and version, and a reference that is stamped into the file itself.

That last one exists because the material in these rooms is commercially sensitive and the people who own it are entitled to know how it was handled. It is also why documents carry your name: a file that leaks can be traced back to the copy it came from.

Our lawful basis

For controlling access and keeping the activity record, our basis is legitimate interests: running a confidential transaction, protecting the seller's commercial information, and being able to evidence how that information was handled. We consider this proportionate because access is by invitation to named business contacts, the data is about professional activity rather than private life, and the alternative is not disclosing the material at all.

For enquiries, our basis is taking steps at your request before entering into a contract.

We do not rely on consent, because access to a deal room is conditional and consent given in those circumstances would not be freely given. You can still object to processing based on legitimate interests: see your rights below.

Who else sees it

Valantai staff working on the mandate. Our hosting and database providers, who process data on our instructions and do not use it for their own purposes: Supabase (database and file storage, hosted in the United Kingdom) and Vercel (application hosting).

We may share a summary of activity with the seller whose goods are presented, because demonstrating how their material was handled is part of what we do for them. We may also disclose data where the law requires it, or to establish or defend a legal claim.

We do not sell personal data, we do not share it for advertising, and there is no advertising, analytics or tracking of any kind on this platform.

Where it goes

Data is stored in the United Kingdom. Our providers are incorporated in the United States and their staff may access data for support purposes, which is a transfer outside the UK. Where that happens we rely on the providers' standard data protection terms, which include the UK International Data Transfer Addendum or equivalent safeguards.

How long we keep it

Invitations

For the life of the mandate, then six years.

Confidentiality acceptances

Six years from the end of the mandate, because that is the period during which a claim about the terms could be brought.

Enquiries

Six years from the end of the mandate.

Activity records

Six years from the end of the mandate.

Six years reflects the ordinary limitation period for a contract claim in England and Wales. We keep these records for that long specifically so that a question about what was disclosed, to whom, and on what terms can still be answered.

Cookies

This platform sets only the cookies it needs in order to work: one that keeps you signed in, and one that carries a demonstration pass if you arrived on a demonstration link. There are no analytics cookies, no advertising cookies and no third-party trackers, so there is nothing here to consent to or opt out of.

Your rights

You can ask us to:

give you a copy of the personal data we hold about you
correct anything that is wrong
delete it, though we may need to keep some of it to defend a legal claim
restrict what we do with it while a question about it is resolved
provide it in a portable form
stop processing it, where we rely on legitimate interests

Email trade@valantai.com and we will respond within one month.

Providing your data is not a statutory requirement, but without an invitation record we cannot give you access to a room, and without the activity record we would not offer the material at all.

There is no automated decision-making and no profiling that produces legal effects. The decision about what you may see is made by a person at Valantai.

If you are unhappy

Tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or to the supervisory authority in your own country if you are in the EU.

Changes

If we change how we use personal data we will update this notice and change the date at the top. This version replaces any earlier one.