Privacy Policy

Last updated: 16/01/2026

Introduction
The protection of your personal data is our highest priority. This privacy policy informs you about how Vita Loom Ecosystem Ltd (hereinafter "we", "us" or "VLE"), collects, processes, and uses your personal data when you use our services.

This ecosystem includes:
The strategic architecture of "Vita Loom Labs"
The infrastructure services of "VLE Port Labs"

We strictly adhere to applicable data protection laws, in particular the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

1. Data Controller
The data controller responsible for your personal data is:

Vita Loom Ecosystem Ltd
Registered in England & Wales
Company Registration Number: 16972504

Registered Office:

71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

United Kingdom

Director: Filip Kettner
Email: filip@vle.global

2. Type, Purpose, and Legal Basis of Data Processing
We process personal data only to the extent necessary for providing our content and services.

2.1. When you visit our website
Each time you access our website, our system automatically collects data from the computer system of the accessing device (e.g., IP address, browser type, date and time of access). This processing is necessary to ensure the security and functionality of our website and is based on our legitimate interest (Art. 6 para. 1 lit. f UK/EU GDPR).

2.2. When you contact us
If you contact us by email, contact form, or LinkedIn, the data you provide (name, email address, content of your message) will be stored to process your request. This processing is carried out for the purpose of taking steps prior to entering into a contract or for the performance of a contract (Art. 6 para. 1 lit. b UK/EU GDPR).

2.3. When using VLE Services (Blueprints & Infrastructure)
To provide our high-quality strategic architecture and infrastructure services (including the VLE Impact Blueprint, VLE Port Labs, and the Catalyst Program), we process the contact details of your stakeholders as well as the strategic information, analyses, visions, and financing plans provided by the partner and its portfolio organizations. The legal basis for this is the performance of the contract (Art. 6 para. 1 lit. b UK/EU GDPR).

AI & Architectural Confidentiality:
All client content is treated with the highest level of architectural confidentiality. To increase efficiency, we exclusively use vetted, leading AI models via their secure enterprise APIs. Our process, through a combination of contractual obligations from the providers and our own methodology, ensures that none of your proprietary data is ever used to train global AI models. The sovereignty and confidentiality of your intellectual property are the foundation of our work.

3. Use of Cookies and Tracking Technologies
We use technically necessary cookies that are essential for the operation of the website. For the use of all other cookies (e.g., for analysis or marketing purposes), we obtain your explicit consent in advance via our consent banner (Art. 6 para. 1 lit. a UK/EU GDPR). You can withdraw your consent at any time.

4. Data Transfer to Third Parties and International Transfers
Your data will generally not be transferred to third parties unless this is necessary for the performance of the contract or you have given your consent. Our service providers, who act as data processors on our behalf, include:

Hosting providers for the operation of our website.
Payment service providers (e.g., Wise, Stripe) for the secure processing of transactions.
AI enterprise service providers (exclusively within the scope of providing the "Blueprint" service under strict confidentiality obligations).

International Transfers:
As a UK-based company, data may be processed in the United Kingdom. The EU Commission has recognized the UK as providing an adequate level of data protection ("Adequacy Decision"). If data is transferred to countries outside the UK/EU/EEA (e.g., the USA), we ensure an adequate level of data protection through appropriate safeguards (e.g., Standard Contractual Clauses / IDTA).

5. Data Retention and Deletion
We store your personal data only for as long as is necessary to achieve the purposes stated here or as required by statutory retention periods (e.g., under UK commercial or tax law).

6. Your Rights
You have the right to access, rectify, erase, restrict processing, object to processing, and data portability regarding your personal data. You also have the right to lodge a complaint with a supervisory authority.

UK Authority: Information Commissioner's Office (ICO).
EU Authorities: You may also contact the data protection authority in your country of residence.