Privacy notice

Who we are

Vitalos Technologies Limited (company number 16696895), registered office 114 High Street, Bentley, Doncaster, England, DN5 0AT, is the controller of the personal data described in this notice. You can contact us about it at support@vitalos.co.uk.

What we collect

When you send an enquiry through this website we collect your name, organisation, work email address, role (optional), what you are trying to achieve, your timeframe, an optional budget range, the page you enquired from and any campaign tags in the link you followed.

To protect the form from abuse we store a one-way hash of your IP address, and we use Cloudflare Turnstile to check that the enquiry is not from an automated bot.

We do not use analytics or advertising cookies on this website.

Website analytics

We use Vercel Web Analytics and Vercel Speed Insights to understand how this website is used and how quickly its pages load. They do not set cookies or store anything on your device, and they do not identify you.

For each page view, Vercel records the page address (without any query string), the referring website, your approximate location (country, region and city), your browser, operating system and device type, and measurements of how quickly the page loaded. Visits are counted using a value derived from your request that is discarded after 24 hours, so it cannot be used to recognise you over time. We may also count when a "Talk to Vitalos" link is clicked or an enquiry is accepted; these counts contain no personal data or form content.

We see this information only as aggregated reports. Our lawful basis is our legitimate interest in understanding and improving our website.

Relay, our website assistant

Our website has an optional chat assistant, Relay. Relay answers questions about Vitalos using an AI model and the information published on this website. If you ask, it passes the conversation to a member of our team.

When you use Relay we collect what you type, the page you are on, the page that referred you, any campaign tags in the link you followed, your browser type and approximate country, and a one-way hash of your IP address that we use to prevent abuse. If you ask to talk to a person, we also collect your name, email address and, optionally, your organisation, with your consent. Relay stores a conversation reference in your browser only after you send your first message, so the conversation can continue as you move between pages.

Relay sends your messages to DeepSeek, our AI model provider, to generate answers. Before anything is sent, we remove email addresses, phone numbers, postcodes, account and card numbers and similar identifiers, and we never send your name, email address or organisation. DeepSeek processes these redacted messages in the People's Republic of China, which has no UK adequacy decision. Please do not type sensitive personal information into Relay.

We use Relay conversations to answer your question, to let our team reply if you ask for a person, and to keep the service secure. Our lawful basis is our legitimate interest in answering enquiries about our services and, when you ask for a person, your consent to us contacting you about that enquiry.

We delete Relay conversations 90 days after the last message if you did not leave contact details, and 12 months after the last message if you did. You can delete a conversation at any time from the Relay menu.

Why we use it

We use your details to reply to your enquiry and to discuss working together. Our lawful basis is our legitimate interest in responding to business enquiries and keeping our website secure.

We do not add you to marketing lists.

How long we keep it

We keep enquiries for 24 months after our last contact with you, then delete them. If your enquiry leads to us working together, we keep the relevant details for as long as that relationship and our legal obligations require.

Who we share it with

We use service providers who process your data on our behalf: Vercel (website hosting), Supabase (database), Resend (email delivery), Cloudflare (bot protection), DeepSeek (AI answers in Relay) and Microsoft Azure (our internal team console). We do not sell your personal data.

International transfers

Some of these providers process personal data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations or the UK International Data Transfer Addendum with that provider. The exception is DeepSeek, which processes the redacted Relay messages described above in the People's Republic of China, which has no UK adequacy decision.

Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to give you a copy. Email support@vitalos.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Changes to this notice

If we change this notice we will publish the new version on this page with a new version number and effective date.