Privacy Policy

Effective date: 2026. This Privacy Policy describes how Vantage Point Security Group ("Vantage Point", "we", "us") processes personal information across the vpsec.io website and our commercial engagements.

1. Information we collect

We collect information you provide directly, through contact forms, careers applications, lead-magnet downloads, and direct correspondence. This typically includes name, email address, company, role, country, and your enquiry context. We also collect technical information automatically when you visit the website, such as your browser type, device, and pages visited.

2. How we use your information

We use personal information to respond to enquiries, deliver requested resources, evaluate job applications, manage engagements with our clients, and improve the website. We do not sell personal information.

3. Lawful basis

Where applicable, we rely on your consent (for marketing and lead-magnet downloads), contract performance (for client engagements), legal obligation (for regulatory and accreditation requirements), and legitimate interests (for business operations and security).

4. Sharing

We share information with regional Vantage Point entities in Singapore, Indonesia, and Thailand for the purposes set out above. We use service providers (for hosting, email, and analytics) under appropriate data processing terms. We do not transfer personal information outside these arrangements without a lawful basis.

5. Retention

We keep personal information only as long as needed for the purpose for which it was collected or as required by applicable law.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict processing of, or port your personal information, and to withdraw consent at any time. Contact privacy@vantagepoint.sg to exercise these rights.

7. Security

We apply administrative, technical, and physical safeguards aligned with ISO 27001:2022 and SOC 2. No method of transmission is fully secure; we work continuously to maintain appropriate controls.

8. Cookies and consent

No analytics cookies are set on your first visit to this site. When you land here, you see a banner asking for your consent. If you click Accept, we load Google Analytics (usage metrics) and Microsoft Clarity (session recording for UX debugging). If you Decline or ignore the banner, none of those trackers load. Your choice is stored locally in your browser under the key vp-cookie-consent; clear your browser storage to reset it.

9. Contact

Privacy enquiries can be sent to privacy@vantagepoint.sg or to our Singapore HQ at 601 MacPherson Road, #07-11/12 Grantral Mall, Singapore 368242.

How this policy applies to blog.vpsec.io

blog.vpsec.io is the official blog of Vantage Point Security and is covered by this Privacy Policy. The blog has no contact forms, comments or accounts for readers, so it does not ask you for personal information.

When you visit the blog, our hosting infrastructure (Amazon Web Services) records standard request logs — such as IP address, browser user agent, requested page, time and referring page — to operate, secure and protect the site against abuse. These logs are kept for up to 12 months.

If analytics is enabled on the blog, Google Analytics is loaded only after you click Accept on the cookie banner; Microsoft Clarity is not used on the blog. Your choice is stored in a cookie named vp_consent on the vpsec.io domain, so the same decision applies on www.vpsec.io and blog.vpsec.io and you are not asked twice. The choice is also kept in your browser under the key vp-cookie-consent and expires after 12 months. You can change it at any time with the button below or by clearing cookies for vpsec.io.

Some articles embed videos using the privacy-enhanced YouTube (youtube-nocookie.com) or Vimeo players; these load only on the articles that contain them. Fonts and images are served from the blog itself.

This policy is published by Vantage Point Security. The corporate version is at https://www.vpsec.io/en/privacy-policy/.