# Privacy Policy

**Last Updated: January 12, 2026**

**Vynvex Technologies Ltd** (“Vynvex”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data responsibly.

We are a company registered in England and Wales (Company No. 16910192), with registered office at 182–184 High Street North, East Ham, London E6 2JA, United Kingdom, and are registered with the Information Commissioner’s Office (ICO Registration No. ZC072601).

This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with us, including through our website (vynvex.com), when you book a Free Trial Day, or when you become a client.

## 1. What Personal Data We Collect

We collect only the personal data necessary to provide our services:

**When you submit a form or contact us:**
– Full name
– Email address
– Company/agency name
– Website/hosting platform
– Your country & time zone (for shceduling purposes)
– Preferred trial day / shift time
– Any message or notes (optional)

**When you become a client:**
– Billing information (handled securely via Stripe — we do not store card details)
– Login credentials (cPanel, WHMCS, etc.) — shared via encrypted channels and deleted after use
– Communication records (tickets, emails, Slack messages)

We do **not** collect sensitive personal data (e.g., health, race, religion).

## 2. How We Use Your Personal Data

We use your data only for the following purposes:

– To respond to inquiries and book Free Trial Days
– To provide after-hours technical support (ticket handling, fixes, reports)
– To send daily summaries and monthly performance reports
– To process payments (via Stripe)
– To communicate about your account, updates, or service issues
– To comply with legal obligations (e.g., ICO reporting, tax records)

We never use your data for marketing unless you explicitly opt in.

## 3. Legal Basis for Processing

We process your personal data under the following UK GDPR legal bases:

– **Contract** — to deliver the Services you request (support, reports, trial day)
– **Legitimate interests** — to communicate with you about your account and improve service quality
– **Legal obligation** — to comply with ICO, tax, and accounting laws
– **Consent** — only if we ever send optional marketing (you can withdraw consent anytime)

## 4. Data Security

We take data security very seriously:

– Credentials are shared via encrypted, time-limited channels (e.g., Bitwarden Send)
– Stored in AES-256 encrypted password managers
– All access to Client systems and data is performed exclusively through secure, encrypted VPN connections to protect against unauthorized interception
– Deleted upon termination or when no longer needed, within 7 days
– All communications use secure protocols (HTTPS, encrypted email/Slack)
– Our systems are protected with firewalls, antivirus, and regular updates

Despite our safeguards, no system is 100% secure. In the unlikely event of a data breach, we will notify you and the ICO within 72 hours as required by GDPR.

## 5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing.

We may share data only:
– With service providers (e.g., Stripe for payments, Slack for reports) under strict data processing agreements
– If required by law (e.g., court order, ICO request)

## 6. Data Retention

We keep personal data only as long as necessary:

– Inquiry/trial data: 12 months (or until you request deletion)
– Client data: For the duration of the service + 6 years (UK tax/legal requirement)
– Credentials: Deleted immediately after use or termination

## 7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:
– **Access** — request a copy of the data we hold about you
– **Rectification** — correct any inaccurate or incomplete data
– **Erasure** (“right to be forgotten”) — request deletion of your data (subject to legal obligations)
– **Restriction** — limit how we process your data in certain cases
– **Objection** — object to processing based on legitimate interests
– **Data portability** — receive your data in a structured, machine-readable format

To exercise any of these rights, simply email [email protected]. We will respond within **one month** (free of charge, unless requests are excessive or unfounded). We may need to verify your identity before proceeding.

## 8. International Transfers

Your data is processed primarily in the UK. If any processing occurs outside the UK/EEA (e.g., cloud tools), we ensure adequate safeguards (e.g., UK International Data Transfer Agreement or Standard Contractual Clauses).

## 9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our Services after changes constitutes acceptance.

## 10. Contact Us

If you have any questions about this Privacy Policy or your data, contact us at:
**Email**: [email protected]
**Registered Office**: 182–184 High Street North, East Ham, London E6 2JA, United Kingdom

© 2026 Vynvex Technologies Ltd. All rights reserved.