Legal
Privacy policy
What this website collects, why we are allowed to hold it, and what you can ask us to do about it. Short sections, plain words, no hiding.
Who we are
Vestae is the trading name of Vestae Ltd. Vestae Ltd is the data controller for this website, which means we are the ones who decide what is collected here and why.
Vestae Ltd is registered in England and Wales, company number 17409674. Our registered office is 38 Windmill Avenue, Rubery, Birmingham, B45 9TA.
For anything about privacy or your data, or anything else, write to the email address shown in the footer of this page or call the number shown there.
What this website collects
Three things, and that is the lot.
Waitlist registrations
Signups are closed at the moment, so this website takes waitlist registrations. When you join the waitlist we store your email address, and your name if you choose to give one. It is held as a lead in Vestae's own system.
Contact enquiries
When you send us a message through the contact form it becomes an enquiry record in Vestae's own system, together with whatever you wrote in it and the contact details you gave us to reply to.
Cookie choices
When you make a choice on the cookie banner we store that choice, the version of the policy you saw, the user agent your browser sent, and a one way hashed form of your IP address. The raw IP address is not stored.
Why we are allowed to hold it
Waitlist registrations are held because you asked to be told when places open. That is your consent, and you can withdraw it at any time by writing to us at the email address shown in the footer of this page.
Contact enquiries are held because you contacted us and we need to be able to answer you, and because we have a legitimate interest in keeping a record of our own correspondence.
Cookie records are held because the law expects us to be able to show what you chose and when. Strictly necessary cookies do not need your permission. Everything else runs only after you have made a choice.
The AI assistant, and where your words go
Vestae has an AI operator built into it. If a message of yours is handled by that operator, the content of the message is sent to an AI model provider so it can be answered.
That means the words you write can leave our systems in order to be answered. We are telling you plainly rather than leaving you to find out. If you would rather a message was not handled that way, write to us at the email address shown in the footer of this page and a person will read it.
Where it is held
The Vestae production platform is hosted in the United Kingdom, with IONOS in Birmingham. That is where your waitlist registration, your enquiry and your cookie record live.
Some of the services that help run this website are separate from the platform itself, and we are not going to claim that every one of them keeps everything in the United Kingdom, because we would be telling you something we cannot stand behind. What we can tell you is where the platform itself runs.
How long we keep it
We have not set fixed retention periods for this website yet, and we are not going to print a number we do not keep to. What is true today is this: waitlist registrations, contact enquiries and cookie records are held in Vestae's own systems, and we delete any of them on request. Write to the email address shown in the footer of this page and it goes.
Cookie records on your side expire on their own. The cc_choice cookie lasts 180 days and the cc_subject cookie lasts 365 days, after which the banner asks you again.
What you can ask us to do
You can ask us for a copy of what we hold about you. You can ask us to correct it if it is wrong. You can ask us to erase it. You can object to us holding it, and where we are relying on your consent you can withdraw that consent.
All of those go to the email address shown in the footer of this page. Tell us what you want and we will do it.
If you are not satisfied with how we have handled it, you can complain to the Information Commissioner's Office, the United Kingdom's data protection regulator, at ico.org.uk.
Customers who run their business on Vestae
This policy covers this website. It does not cover the data inside a customer's own Vestae account.
When a business uses Vestae to run itself, that business decides what goes in and what happens to it. Vestae Ltd processes that data on their instructions, under a separate agreement with them, and that agreement is what governs it rather than this page.
So if you are a customer of a business that runs on Vestae and you want to know what they hold about you, ask them. They are the ones who decide.
This page was last updated on 9 October 2026.