Privacy Policy

1. Introduction

VM6 Networks LTD ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services, including VPS Hosting, Web Hosting, and Dedicated Servers.

2. Data We Collect

Personal Information We Collect

We collect the following types of personal data:

Account Information: Name, email address, phone number, billing address
Payment Data: Billing information, payment method details (processed securely)
Service Usage: Server configurations, resource usage, support tickets
Website Analytics: IP address, browser type, pages visited, time spent
Communication Records: Support conversations, emails, chat logs
Technical Data: Server logs, security monitoring data

3. How We Use Your Data

We use your data to:

Provide and maintain hosting services
Process payments and manage billing
Provide customer support and technical assistance
Send service updates and important notifications
Improve our services and user experience
Ensure security and prevent fraud
Comply with legal obligations
Send marketing communications (with consent)

4. Lawful Basis for Processing

Legal Basis Under UK GDPR

We process your data under the following lawful bases:

Contract Performance: To provide hosting services and fulfill our contract with you
Legitimate Interest: For service improvement, security monitoring, and business operations
Legal Obligation: To comply with tax, accounting, and other legal requirements
Consent: For marketing communications and non-essential cookies (where applicable)
Vital Interest: To protect your or others' safety in emergency situations

5. Cookies and Tracking

We use cookies to enhance your browsing experience and gather analytics. You can manage cookie preferences via your browser. For more detailed information, see our Cookie Policy.

Cookie Types

Essential Cookies: Required for basic site functionality and security
Analytics Cookies: Help us understand how visitors use our website
Preference Cookies: Remember your settings and choices
Marketing Cookies: Used to deliver relevant advertisements (with consent)

6. Data Sharing and Disclosure

We Never Sell Your Data

We do not sell your personal data to third parties. Your privacy is not for sale.

We may share your data with:

Service Providers: Payment processors, data center partners, security services
Legal Authorities: When required by law, court orders, or to protect legal rights
Business Transfers: In case of merger, acquisition, or business sale (with notice)
Emergency Situations: To protect life, safety, or prevent fraud

All third parties are contractually bound to protect your data in accordance with UK data protection laws.

7. Data Retention

Retention Periods

We retain your data only as long as necessary for:

Active Services: During the period you use our services
Account Closure: Up to 7 years for tax and accounting purposes (HMRC requirements)
Support Records: 3 years after service termination
Marketing Data: Until you withdraw consent or 2 years of inactivity
Security Logs: 12 months for security monitoring purposes

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access: Request a copy of your personal data we hold
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (where legally possible)
Restriction: Limit how we process your data
Portability: Receive your data in a structured, readable format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for marketing communications
Complain: Lodge a complaint with the ICO (Information Commissioner's Office)

Exercise Your Rights

To exercise any of these rights, please contact us at privacy@vm6.co.uk

We will respond to your request within one month, and there's no charge for most requests.

9. Data Security

Security Measures

We implement industry-standard security measures to safeguard your data, including:

Encryption: Data encrypted in transit and at rest
Access Controls: Strict access controls and authentication
Secure Infrastructure: Physically secure data centers with 24/7 monitoring
Regular Backups: Secure, encrypted backups stored off-site
Staff Training: Regular security training for all personnel
Incident Response: Comprehensive breach response procedures

10. International Data Transfers

Our primary data processing occurs within the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by UK authorities
Adequacy decisions recognizing equivalent data protection standards
Binding Corporate Rules for multinational service providers
Your explicit consent where required

11. Privacy Policy Updates

We may update this Privacy Policy as needed to reflect changes in our practices, services, or legal requirements. Any updates will be posted on this page with an updated revision date.

For significant changes that affect your rights, we will notify you via email or through prominent notices on our website.

Data Controller Information

Privacy Policy Contents