Privacy notice

Valantai is the data controller for the personal data described here. Valantai acts as a broker to the party selling the goods presented on this platform; it is not the seller and not the manufacturer.

Questions about this notice, or any request about your data, go to trade@valantai.com. We have not appointed a Data Protection Officer, as we are not required to.

Seven things. The fourth is the one to read carefully, the fifth applies only if you ask us to keep you in mind for future deals, the sixth only if you are selling through us, and the seventh is about Valantai's own people rather than about you.

The activity record exists because the material in these rooms is commercially sensitive and the people who own it are entitled to know how it was handled. It is also why documents carry your name: a file that leaks can be traced back to the copy it came from.

For controlling access and keeping the activity record, our basis is legitimate interests: running a confidential transaction, protecting the seller's commercial information, and being able to evidence how that information was handled. We consider this proportionate because access is by invitation to named business contacts, the data is about professional activity rather than private life, and the alternative is not disclosing the material at all.

For anything you send us through the register-interest form, our basis is taking steps at your request before entering into a contract.

For telling you about future deals, our basis is consent, and it is the only thing on this platform we rely on consent for. You give it by ticking a box that shows you the exact wording, we store that wording and the date with your record, and every email carries a link that stops it. Withdrawing takes one click, needs no sign-in and no explanation, and it does not affect any deal room you have been invited to. We do not pass these details to a seller or to anybody else.

For identity checks on sellers, when that is in use, our basis will be legal obligation where money laundering rules apply to the transaction, and legitimate interests otherwise: knowing who we are putting in front of a buyer. A sanctions or politically exposed person result can amount to data about criminal allegations or political exposure, and we process it because it is necessary for reasons of substantial public interest, namely preventing and detecting unlawful acts and complying with a regulatory requirement. How long we would keep the identity documents themselves is in the table below. The ownership record and the screening result are not covered by that table, for the reason given under "How long we keep it" below.

For our own staff list, and for the record of who at Valantai did what on a deal, our basis is again legitimate interests: knowing who may act for Valantai, and being able to show who decided what and why.

We do not rely on consent, because access to a deal room is conditional and consent given in those circumstances would not be freely given. You can still object to processing based on legitimate interests: see your rights below.

Valantai staff working on the mandate, and five service providers who process data on our instructions and do not use it for their own purposes.

We may share a summary of activity with the seller whose goods are presented, because demonstrating how their material was handled is part of what we do for them. We may also disclose data where the law requires it, or to establish or defend a legal claim.

We do not sell personal data and we do not share it for advertising. There is no advertising, no analytics, no tag manager and no third-party tracker on this platform, and no page loads anything from a company not named above. Fonts, images and scripts are all served from this domain, so visiting a page does not tell anyone else that you did.

Data is stored in the United Kingdom. All four of our providers are incorporated in the United States and their staff may access data for support purposes, which is a transfer outside the UK. Where that happens we rely on the providers' standard data protection terms, which include the UK International Data Transfer Addendum or equivalent safeguards.

Six years reflects the ordinary limitation period for a contract claim in England and Wales. We keep these records for that long specifically so that a question about what was disclosed, to whom, and on what terms can still be answered. A deal is closed by a person at Valantai and that date is recorded, so these periods have a fixed starting point rather than running from nothing, and the deletion itself is done by a job that runs every night and writes down what it removed: which records, how many, and the range of dates they covered, but not their contents, because a record of a deletion that keeps a copy of the thing deleted is not a deletion.

Some of what this notice describes has no row in the table above, because there is no rule in the code that ever removes it. Who is on Valantai's staff list, who uploaded a document, and who approved, refused or suspended a deal are kept for as long as the deal, or the platform, exists: these describe what Valantai did, not what a counterparty did, and nothing currently deletes them. The same is true of the ownership record and the screening result described above under "Identity checks, if you are a seller". The identity documents themselves are destroyed under the rule above, for the period stated in it, and that clock only begins when somebody at Valantai records that the relationship with that seller has ended. Nothing in the code yet sets a date for the ownership record or the screening result held alongside them, so they stand until it does, and this notice will state the period on the day one exists. Saying which of these has a deletion date and which does not is deliberate: a table of periods that quietly leaves things out reads as a complete answer and is not one.

This platform sets only the cookies it needs in order to work. There are no analytics cookies, no advertising cookies and no third-party cookies of any kind, so there is nothing here to consent to or opt out of. In full:

You can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that is wrong
• delete it, though we may need to keep some of it to defend a legal claim
• restrict what we do with it while a question about it is resolved
• provide it in a portable form
• stop processing it, where we rely on legitimate interests

Email trade@valantai.com and we will respond within one month. That address reaches the deal desk directly, and a person there deals with it: there is no separate system logging requests of this kind, so if you would like your own record of having asked, keep a copy of the email.

Providing your data is not a statutory requirement, but without an invitation record we cannot give you access to a room, and without the activity record we would not offer the material at all.

There is no automated decision-making and no profiling that produces legal effects. The decision about what you may see is made by a person at Valantai. Where we use an AI service, it is to read the structure of a seller's spreadsheet and never to make a decision about a person, and a member of staff approves the result before any buyer sees it.

Tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or to the supervisory authority in your own country if you are in the EU.

If we change how we use personal data we will update this notice and change the date at the top. This version replaces any earlier one.