Privacy Policy

Information you provide directly. When you submit our contact form you give us your name, email address, company name (optional), and the content of your message. We use this solely to respond to your enquiry.

Usage data. Our hosting provider automatically collects standard server log data — your IP address, browser type, pages visited, and timestamps. This data is used for security monitoring and aggregate analytics only. We do not cross-reference it with personally identifiable information.

Cookies and analytics. We use Google Analytics 4 to measure aggregate site usage. It only loads after you accept on the consent banner. We do not run advertising cookies or third-party tracking pixels. IP addresses are anonymised before Google receives them. You can withdraw consent at any time:

Withdraw cookie consent

We use the information we collect to:

• Respond to your enquiries and manage our relationship with you.
• Improve the functionality and content of the website.
• Comply with legal obligations and protect against fraud or misuse.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We will never send you unsolicited commercial email.

If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is based on the following legal grounds:

• Contract performance — where processing is necessary to respond to your enquiry or provide our services.
• Legitimate interests — for site security and aggregate analytics, where those interests are not overridden by your rights.
• Consent — where you have explicitly agreed, e.g. by submitting a contact form.

We use the following third-party services to operate this website:

• Sanity.io — headless CMS used to manage site content. See Sanity's Privacy Policy (opens in new tab).
• Resend — email delivery service used to send notifications when you submit our contact form. See Resend's Privacy Policy (opens in new tab).
• Vercel — hosting and edge network. See Vercel's Privacy Policy (opens in new tab).
• Google Analytics 4 — aggregate site analytics. Only loaded after you accept on the consent banner; IP addresses are anonymised. See Google's Privacy Policy (opens in new tab).
• Cloudflare Turnstile — bot detection on the contact form. Privacy-preserving; no cross-site cookies. See Cloudflare's Privacy Policy (opens in new tab).

Contact form submissions are retained in our email inbox for up to 24 months and then permanently deleted. Usage logs are retained for 90 days. If you request deletion of your data earlier, we will action it within 30 days.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data, subject to legal retention obligations.
• Restriction — request that we limit processing while a dispute is resolved.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, email us at hello@varanity.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS/TLS. No method of internet transmission is 100% secure and we cannot guarantee absolute security.

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be flagged by an updated “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Questions about this policy or requests to exercise your rights should be sent to: