General
At Vantara Consulting Group LLC ("Company," "we," "us," or "our"), we are committed to protecting your privacy and handling your personal data with transparency, care, and the highest standards of security. As an AI strategy and consulting firm serving professional services organizations — including law firms, accounting firms, family offices, and private equity firms — we understand that trust and confidentiality are foundational to everything we do.
This Privacy and Cookie Policy ("Policy") explains how we collect, use, disclose, and safeguard personal information when you interact with our website at vantaracg.com and any related services, content, tools, or communications (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you do not agree with any part of this Policy, please discontinue use of our Services and contact us with any questions.
This Policy applies to all visitors, prospective clients, existing clients, event registrants, newsletter subscribers, and all other individuals who interact with Vantara Consulting Group online or through our services. It does not govern the data practices of third-party services or platforms that may be accessible through links on our website.
A note on professional services: When Vantara Consulting Group is engaged as a consultant or service provider, any client data processed in the course of delivering services is governed by the applicable client services agreement and applicable professional obligations — not this Policy. This Policy applies solely to information collected through our website and marketing activities.
Information We Collect
We collect information in three primary ways: directly from you when you voluntarily engage with our Services, automatically through your interactions with our website, and in limited circumstances from third-party sources.
a. Personal Information You Provide
We collect information you voluntarily submit when you engage with our Services, including when you:
- Contact us through our website contact form, email, or phone
- Subscribe to our newsletter, blog updates, or email communications
- Register for webinars, events, or workshops hosted by Vantara
- Download or request access to gated content such as guides, reports, or assessments
- Request a consultation, AI assessment, or service proposal
- Participate in surveys, feedback forms, or research activities
- Apply for a position or submit a career inquiry
Personal information we may collect includes:
- Full name and professional title
- Business email address and phone number
- Company name, industry, and firm size
- Geographic location (city, state, country)
- The nature of your inquiry or the solutions you are seeking
- How you heard about Vantara Consulting Group
- Any other information you choose to share with us
b. Automatically Collected Information
When you visit our website, certain technical information is collected automatically through cookies and similar technologies:
- IP address and approximate geographic location
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Pages visited, time spent on each page, and navigation paths
- Referring URLs, search terms used to reach our site, and exit pages
- Interaction data including clicks, scrolls, downloads, and form completions
- Cookie identifiers and session tokens
Some of this data is collected by our hosting provider as part of operating the website. Analytics data is collected through Google Analytics cookies only if you accept them. Please see Section 8 for full details on our cookie practices.
c. Third-Party Data
We do not purchase personal data from third-party data brokers. We may receive limited professional information from third-party platforms only when you explicitly authorize or initiate such a connection — for example, when registering for an event through a partner platform or connecting through LinkedIn. Any such data is handled in accordance with this Policy.
How We Use Your Information
We process personal data for legitimate business purposes and, where required by applicable law, only with your consent. We use the information we collect for the following specific purposes:
- Service delivery: To provide, operate, and maintain our website, tools, and professional consulting services
- Communication: To respond to inquiries, support requests, and service-related notifications in a timely manner
- Marketing: To send relevant newsletters, event invitations, and thought leadership content that may interest you — always with your consent and with an easy opt-out at any time
- Personalization: To tailor content, recommendations, and resources to your firm type, industry, and stated areas of interest
- Analytics & improvement: To understand how our Services are used and to continuously improve our website, content, and service offerings
- Security & compliance: To detect and prevent fraud, unauthorized access, and other illegal activity, and to comply with applicable legal and regulatory obligations
- Business operations: To manage proposals, contracts, billing, and client relationships where applicable
- Events & content: To manage webinar registrations, event attendance, and access to gated educational resources
We do not sell your personal information. We do not sell, rent, or trade your personal data to any third party under any circumstances. We do not use automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.
Sharing Your Information
We share personal data only in the limited circumstances described below. We never sell personal information to third parties.
Service Providers
We engage trusted third-party vendors to help us operate our Services. These may include email marketing platforms, website hosting providers, CRM tools, analytics services, scheduling software, and event management systems. All such vendors are contractually bound to process personal data only as directed by Vantara Consulting Group and in accordance with applicable privacy law.
Technology Partners
Vantara works with a select network of technology partners — including ChangePond and Intellect Technologies — who may be involved in delivering certain services. Where a partner's involvement requires access to your information, we will ensure appropriate data protection agreements are in place and will inform you as required.
Legal & Regulatory Requirements
We may disclose personal information if required by law, subpoena, court order, or directive from a governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Vantara Consulting Group, our clients, or the public.
Business Transfers
In the event of a merger, acquisition, asset sale, or corporate restructuring involving Vantara Consulting Group, personal data we hold may be transferred as part of that transaction. We will notify affected individuals as required by law, and your rights under this Policy will continue to be protected.
With Your Consent
In any other circumstance where we wish to share your personal data with a third party not described above, we will seek your explicit consent prior to doing so.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, including to satisfy applicable legal, accounting, or reporting obligations. Our general retention periods are as follows:
- Marketing contacts: Retained while you remain subscribed or actively engaged with our communications; deleted or anonymized within 90 days of an unsubscribe request or confirmed inactivity
- Inquiry and contact records: Retained for up to three (3) years to support follow-up, service history, and audit needs
- Event registrations: Retained for up to twelve (12) months following the event date
- Website analytics data: Typically retained in aggregated or anonymized form in accordance with our analytics providers' policies
- Client engagement records: Retained per the terms of the applicable client services agreement and applicable professional retention requirements
When personal data is no longer required for any of the above purposes, we securely delete or anonymize it using commercially reasonable methods designed to prevent reconstruction or re-identification.
Security Measures
The security of your personal information is important to us. We implement technical, organizational, and administrative safeguards designed to protect your data from unauthorized access, disclosure, alteration, loss, or destruction. Our practices include:
- TLS/HTTPS encryption for all data transmitted through our website
- Access controls limiting data access to authorized personnel with a demonstrated need
- Regular security assessments, vulnerability monitoring, and system reviews
- Vendor security review and execution of data processing agreements before engaging third-party providers
- Employee training on data handling and privacy best practices
As a firm focused on AI governance and technology implementation, we hold ourselves to a high standard in the protection of information — not just for our clients, but for all individuals whose data we handle.
No method of internet transmission or electronic storage is completely secure. While we employ commercially reasonable security measures, we cannot guarantee absolute security. In the event of a data breach that may materially affect your rights or freedoms, we will notify you in accordance with applicable legal requirements and without undue delay.
Your Rights
Depending on your location and applicable privacy laws, you have specific rights over your personal data. We honor these rights for all individuals who interact with our Services, regardless of jurisdiction, to the extent practicable under applicable law.
To exercise any of these rights, contact us at connect@vantaracg.com. We will respond within the timeframe required by applicable law, generally within 30 days of receiving a verified request. We may request reasonable identity verification before processing certain requests.
California Residents (CCPA)
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected and how it is used, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA.
EEA, UK & International Residents
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection law, you have rights under the GDPR, UK GDPR, or equivalent legislation, including the right to lodge a complaint with your local supervisory authority. Our lawful bases for processing personal data include legitimate interests, consent, and the performance of a contract, as appropriate to each processing activity.
Marketing Opt-Out
You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send, or by contacting us directly at the address below. Opting out of marketing communications will not affect your receipt of transactional or service-related messages.
Cookies & Tracking Technologies
We use a small number of cookies and similar technologies to operate our website and, with your permission, to understand how it is used. When you first visit, we ask whether you accept analytics cookies. We do not set them unless you click Accept, and you can change your choice at any time using the Cookie Settings link at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as a decision to decline analytics cookies.
Types of Cookies We Use
| Type | Purpose | Examples | Retention |
|---|---|---|---|
| Essential | Required for the website to work, including form submissions, and to remember your cookie choice. Cannot be disabled without affecting site functionality. | Your cookie consent choice (stored in your browser's local storage) | Until you clear it or change your choice |
| Analytics | Help us understand how visitors interact with our website, such as which pages are viewed and how visitors arrived, so we can improve content and navigation. Set only if you accept. | Google Analytics 4 (_ga, _ga_<ID>) | Up to 2 years |
Managing Cookies
You can manage, disable, or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of our website. For guidance on managing cookies in your specific browser, visit:
- Google Chrome: support.google.com/chrome/answer/95647
- Apple Safari: support.apple.com/guide/safari/manage-cookies
- Mozilla Firefox: support.mozilla.org/kb/cookies-information-websites-store
- Microsoft Edge: support.microsoft.com/microsoft-edge/delete-cookies
We do not currently use advertising or marketing cookies, such as Google Ads, the LinkedIn Insight Tag, or the Meta Pixel. If that changes, we will update this Policy and ask for your consent first. To learn more about how Google uses data from sites that use its services, visit policies.google.com/technologies/partner-sites. You can also install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
Do Not Track Signals
Some web browsers transmit "Do Not Track" (DNT) signals to websites they visit. At this time, there is no universally accepted or legally mandated standard for how websites must respond to DNT signals, and our Services do not currently alter their data collection or use practices in response to DNT browser signals.
We will update this section if a recognized standard is established and we elect to honor it. In the meantime, we encourage you to use the cookie management tools and opt-out mechanisms described in Section 8 to control the data collected about your browsing activity.
Privacy of Minors
Our Services are directed exclusively to business professionals and are not intended for, marketed to, or designed to attract individuals under the age of 18. We do not knowingly collect, process, solicit, or store personal data from anyone under 18 years of age.
If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete such information from our records. If you believe we may have collected information from a minor, please contact us immediately at connect@vantaracg.com so that we can investigate and act promptly.
Updates to This Policy
We may revise this Privacy and Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, applicable regulations, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of our Services after changes are posted constitutes your acceptance of the updated Policy. Where required by applicable law, we will provide direct notice of significant changes — for example, via email to subscribers or a prominent notice on our website.
Previous versions of this Policy are available upon request by contacting us at the address in Section 12.
Contact Us
If you have questions, concerns, requests, or complaints related to this Policy or our data practices, please contact us through any of the channels below. We are committed to responding promptly and resolving any concerns in good faith.
New York, New York 10003-1502
United States