Legal
Privacy Policy
Last updated: October 6, 2026
This Privacy Policy explains how VASTIC (“VASTIC”, “we”, “us” or “our”) collects, uses, discloses and protects personal information when you visit this website (the “Site”), contact us through it or receive our communications.
VASTIC Creative Haus works with businesses on brand, growth, digital and AI projects. The Site is meant for business visitors. This policy does not cover the websites, apps or systems we build for our clients; those are governed by our agreements with them and by their own policies.
Summary
- We collect what you type in our contact form — name, work email, phone number, company, the service you need and your message — plus your optional marketing choices.
- We use it to answer you and to manage our relationship with you. We send marketing by email, calls, SMS or WhatsApp only if you opt in.
- Service providers that help us run the Site and our business — such as hosting, CRM, database and email providers — process it on our behalf.
- We do not sell your personal information or share it for cross-context behavioral advertising. Today the Site uses no analytics or advertising cookies.
- You can ask to access, correct or delete your information, unsubscribe at any time and manage cookies from “Cookie Preferences” at the bottom of every page.
Information we collect
Information you give us
- Contact form: first and last name, work email, phone number, company name (optional), the service you are interested in, your message, and your answers to the optional marketing checkboxes, including the wording you agreed to, its version and the date.
- Emails, calls and meetings: information you share when you write to juan@vastic.co or talk with us.
- Client relationships: if you or your company hire us, the business contact and billing information we need to deliver the services, under our agreement with you.
Please don’t send sensitive information — such as Social Security numbers, financial account numbers, health information or precise location — through the Site.
Information collected automatically
- Technical data: when you load the Site, our hosting provider receives the information your browser sends — such as IP address, browser and device type, the pages requested, the referring page, language and time zone — to deliver the Site, keep it secure and fix technical errors.
- Site statistics: our hosting provider counts page views, link clicks and page performance without cookies or persistent identifiers. We only see aggregated reports, such as visits, top pages, traffic sources, countries and device types.
- Browser storage: we save your cookie choices, and whether your browser sent a Global Privacy Control signal, in your browser’s local storage. Our website platform also stores a technical value there for its site-management tools. We do not use either to identify you.
We do not currently use analytics or advertising cookies, pixels or similar tracking technologies. If we add them, they will run only after you opt in through Cookie Preferences, and we will update this policy and our Cookie Policy first.
How we use information
- To respond to your request, schedule calls, prepare proposals and provide our services.
- To manage our relationship with you and our sales pipeline — for example, recording your request, the service you are interested in and our follow-ups.
- To confirm that we received your request and to write to you about it or about services you hired.
- To send marketing emails, only if you opted in. You can unsubscribe at any time.
- To contact you with marketing calls, SMS or WhatsApp messages, only if you gave your separate express written consent. Reply STOP to opt out.
- To keep the Site and our systems secure and prevent spam and abuse — for example, by filtering spam and limiting repeated form submissions.
- To understand, in aggregate, how the Site is used and to improve it.
- To comply with the law, enforce our terms and defend legal claims.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
How we disclose information
We may disclose personal information to service providers that help us operate our website and business, including hosting and infrastructure providers, CRM and customer communication platforms, email providers, database providers, analytics services, and telecommunications providers.
Depending on how you interact with us, this may include contact information, form submissions, technical information, communication preferences, and records related to your request.
These providers process information on our behalf or as necessary to provide their services.
| Category | Why we disclose information |
|---|---|
| Hosting and infrastructure providers | Operate and secure the website |
| CRM and communication providers | Manage inquiries and customer relationships |
| Database and cloud providers | Store and process submitted information |
| Email and messaging providers | Respond to requests and send authorized communications |
| Analytics and advertising providers | Understand website usage and support advertising, where enabled |
Advertising and analytics providers
Where applicable, we may disclose certain online identifiers and usage information to analytics or advertising providers. You can control non-essential cookies and applicable privacy choices through our Cookie Preferences.
Other disclosures
We may also disclose information to comply with the law or legal process; to protect our rights, safety and security, or those of our clients or others; in connection with a merger, acquisition or sale of assets; or with your consent or at your direction.
No sale or sharing. We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not share your phone number or your SMS or WhatsApp opt-in with third parties for their own marketing.
Marketing communications
Email. We send marketing emails only to people who opted in. Each one includes an unsubscribe link and our postal address, and we honor unsubscribe requests promptly and within 10 business days. Unsubscribing does not stop messages about a request you made or services you hired.
Calls, SMS and WhatsApp. We contact you for marketing by phone, SMS or WhatsApp only if you checked the separate box that gives your express written consent. Consent is not a condition of any purchase. Message frequency varies, and message and data rates may apply. You can withdraw your consent at any time by replying STOP (or a similar word such as “cancel”, “end”, “quit” or “unsubscribe”), by telling us during a call or by writing to juan@vastic.co; we honor withdrawals promptly and within the time the law requires. Reply HELP for help.
Even without marketing consent, we may call, email or message you at the details you gave us about the request you made.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, and then delete or de-identify it. How long depends on the type of information and why we have it:
- Contact requests and CRM records: while we discuss or provide our services, and afterwards for as long as needed to follow up, keep business records, comply with legal obligations, resolve disputes and enforce our agreements.
- Consent and opt-out records: for as long as we contact you on the basis of that consent, and afterwards for as long as needed to show that we followed the law.
- Aggregated site statistics: they do not identify you and may be kept longer.
How we protect information
We use reasonable administrative, technical and physical safeguards designed to protect the information we handle, such as encrypted connections, access controls and limiting access to our systems to the people who need it. Our service providers maintain their own security programs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your privacy rights
Depending on where you live, and on whether a given law applies to us, you may have the right to:
- know and access the personal information we hold about you, and receive a portable copy;
- correct inaccurate information;
- delete your information;
- opt out of the sale or sharing of your information, targeted advertising and profiling (we do none of these today);
- limit the use of sensitive personal information (we do not collect it on purpose); and
- not be discriminated against for exercising these rights.
Residents of states with comprehensive privacy laws — such as California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia — have some or all of these rights, subject to the thresholds and exceptions in each law. Even where a law does not apply to us, you can ask us to access, correct or delete your information and we will consider the request in good faith.
How to make a request
Email juan@vastic.co with the subject “Privacy request”. Tell us what you are asking for and how we can reach you. We verify requests by matching information we already hold — for example, by confirming that you control the email address you used with us. You may use an authorized agent; we may ask for proof of the agent’s authorization and verify your identity directly. We respond within 45 days and may extend that once by another 45 days when reasonably necessary, telling you why.
Appeals
If we decline your request, you can appeal by replying to our decision with the subject “Privacy appeal”. We will answer within the time your state’s law requires. If you disagree with the result, you can contact your state Attorney General.
Additional information for California residents
In the past 12 months we collected the categories of personal information below. We collect them for the purposes in “How we use information”, keep them as described in “How long we keep information”, and disclose them for business purposes only to the categories of service providers described in “How we disclose information”.
| Category | Examples | Source | Sold or shared |
|---|---|---|---|
| Identifiers | Name, email address, phone number, IP address | You; your browser | No |
| Personal information listed in Cal. Civ. Code § 1798.80(e) | Name, phone number, company | You | No |
| Commercial information | Services you are interested in; proposals and services | You; us | No |
| Internet or other electronic network activity | Pages viewed, link clicks, referring page (aggregated, without cookies) | Your browser, through our hosting provider | No |
| Professional information | Company name, and your role if you share it | You | No |
| Sensitive personal information | Not collected on purpose | — | No |
We do not use or disclose sensitive personal information for purposes that would give you the right to limit it, we do not offer financial incentives for personal information, and we do not disclose personal information to third parties for their own direct marketing (California “Shine the Light” law).
Children
The Site is for business users and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child sent us information, contact us and we will delete it.
Visitors outside the United States
We and our service providers may process and store information in the United States and in other countries whose data protection laws may differ from those where you live.
Changes to this policy
We may update this policy. We will post the new version here with a new “Last updated” date and, for material changes, give notice as the law requires — for example, on the Site or by email.
