Legal
Privacy Policy
Last updated: 15 October 2026
In short: we collect little. That is what you send us through the contact form, email, Messenger or WhatsApp, basic server logs that we keep for about 14 days, and usage statistics from Google Analytics. We do not sell your information or use it for advertising. You have rights over your information under Vanuatu’s Data Protection and Privacy Act No. 13 of 2024.
- 1. Who we are
- 2. What we collect
- 3. How and why we use it
- 4. Who we share it with
- 5. Transfers outside Vanuatu
- 6. How long we keep it
- 7. Security
- 8. Your rights
- 9. Children
- 10. Other sites, products and programmes
- 11. Changes
- 12. Contact us
1. Who we are
This website is run by Antap Digital Limited, a company registered in Vanuatu (company number 305482), based in Port Vila (“Antap Digital”, “we”, “us”). We are the data controller for the personal information described in this policy.
Vanuatu’s Data Protection and Privacy Act No. 13 of 2024 (the “Act”) governs how we handle personal information. This policy explains what we do and your rights under the Act.
2. What we collect
Information you give us
- Contact form: your name, email address and the message you write.
- Email, Messenger and WhatsApp: your contact details and anything you send us.
- If you become a client: the business and contact details we need to prepare proposals, deliver work and invoice you. These are covered by our agreement with you as well as this policy.
Server logs
Our web server keeps standard access logs. Each entry includes your IP address, the date and time, the page or file requested, the response status, the page that referred you, and your browser and device type. We use these logs to keep the Website secure and to diagnose faults.
Google Analytics and cookies
We use Google Analytics to understand how the Website is used. It sets cookies in your browser and collects information such as the pages you view, how long you stay, the website you came from, your browser and device type, and your approximate location (for example, your country or city, worked out from your IP address). We use this to improve the Website. We do not use advertising or social media tracking tools, and Google Signals and ad personalisation are switched off.
Google Analytics can also detect an email address, phone number or postal address that you type into a form on the Website and send Google a hashed (one-way scrambled) version of it, which Google uses to measure visits more accurately. Google cannot read the original from the hash. Blocking cookies, as described below, stops this too.
You can stop Google Analytics by blocking cookies for this site in your browser settings, which works on phones as well as computers. Deleting cookies on its own does not stop it. On a computer you can also install Google’s Analytics opt-out browser add-on. The Website works normally without these cookies.
Fonts from Google
The Website loads its typeface (Montserrat) from Google Fonts. When a page loads, your browser requests the font from Google’s servers, which receive your IP address and browser details under Google’s own privacy policy.
3. How and why we use it
We use personal information for the purposes below, and only where the Act allows it:
- To reply to your enquiries and prepare proposals or quotations you ask for. You give us this information so that we can respond to you, and replying is what you would reasonably expect.
- To provide, support and invoice our services where you have engaged us. This is necessary to perform our contract with you.
- To keep the Website and our systems secure, and to investigate misuse or faults. This is in our legitimate interest.
- To understand and improve how the Website is used, through Google Analytics. This is in our legitimate interest. You can object at any time (see section 8).
- To meet our legal and accounting obligations.
We do not use your information for advertising, and we do not make decisions about you using only automated processing.
4. Who we share it with
We do not sell or rent personal information. We share it only with the providers that help us run the Website and communicate with you, and only as needed:
- Web3Forms processes contact form submissions. The details you enter go to Web3Forms, which delivers them to us by email.
- Google provides Google Analytics and Google Fonts, as described above.
- Email and messaging providers carry the messages you send us and our replies. If you contact us on Facebook Messenger or WhatsApp, Meta’s terms and privacy policies also apply.
- Our hosting provider runs the server the Website is served from.
- Advisers and authorities such as accountants and lawyers, or government bodies, where we are required or permitted by law to share information.
5. Transfers outside Vanuatu
Some of the providers above, including Google, Web3Forms and Meta, process information in countries other than Vanuatu. The Act regulates transfers of personal data collected in Vanuatu to other countries. We share personal information outside Vanuatu only with the providers listed in section 4 and only for the purposes in this policy, and we work to meet the Act’s requirements for those transfers, including any authorisations, approved countries or safeguards it requires.
Google and Meta process information mainly in the United States. Web3Forms processes it outside Vanuatu. Google receives information about your visit each time a page loads, for Google Analytics and to deliver the Website’s typeface, not only when you use the contact form. To stop Google Analytics receiving information about your visit, block cookies for this site as described in section 2. If you have other concerns about transfers, please contact us.
6. How long we keep it
- Server logs are rotated automatically and deleted after about 14 days.
- Google Analytics data is kept for no longer than 14 months, then deleted automatically.
- Enquiries (contact form, email, Messenger and WhatsApp messages) are kept for as long as needed to deal with your request and any resulting work, and for a reasonable period afterwards as a business record. After that we delete or anonymise them.
- Client records are kept for as long as our agreement requires and as the law requires us to keep financial records.
7. Security
The Website is served over HTTPS, and access to the systems that hold your information is limited to people who need it. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. If a data breach affects you, we will tell you and handle it as the Act requires.
8. Your rights
Under the Act you have the right to:
- Access: ask whether we hold personal information about you and get a copy, together with details of why we use it, who receives it, whether it is sent outside Vanuatu and, if so, to whom and to which countries, and how long we keep it. We reply in writing, free of charge, within one month. If a request is clearly excessive or unreasonable we may charge a reasonable fee or decline, and we would have to show why.
- Correction and erasure: have inaccurate or incomplete information corrected, or have your information erased, without delay and free of charge, in the circumstances the Act sets out.
- Restriction: ask us to pause using your information while a dispute about it is resolved.
- Objection: object to our use of your information at any time, free of charge, unless we can show legitimate grounds that override your interests.
- Withdraw consent: where we rely on your consent, withdraw it at any time, free of charge.
- Human involvement: not be subject to a decision that significantly affects you based solely on automated processing.
To use any of these rights, email hello@antapdigital.com. We may need to confirm who you are first.
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You can also complain to the Deputy Commissioner of Data Protection and Privacy, who is appointed under the Digital Safety Authority Act No. 15 of 2024, or go to the courts.
9. Children
The Website is intended for businesses and organisations, not for children. Under the Act a child is anyone under 18. We do not knowingly collect personal information from children, and if you believe a child has sent us information, please contact us so we can delete it.
10. Other sites, products and programmes
The Website links to services we do not control, such as client products, Facebook, WhatsApp and Google Forms. Some pages, for example programme pages we host for clients, send you to forms run on third-party services. What you submit there is handled as stated on that form and under that service’s own privacy policy.
Client products we build and support (for example YumiGo, YumiLoans, YumiJobs and YumiTransfer) have their own privacy notices, which apply to those products.
11. Changes
We may update this policy from time to time. The date at the top shows when it was last changed. Our Terms of Use also apply to your use of the Website.
12. Contact us
Antap Digital Limited (Vanuatu company number 305482)
Rue Bretagne, Port Vila, Vanuatu
Phone: +678 550 0250
Email: hello@antapdigital.com