Privacy notice

Who is responsible for your information

VexHoster is operated by VENLOXA LTD, company number 17367677, registered in England and Wales. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For questions about your information, contact [email protected].

What we collect when you order or request a quote

Account registration collects your name, email address and a password, which is stored as a password hash rather than plaintext. We also record email verification and security/session information needed to protect your account. The order form collects your name, account email address, optional company name, selected service and configuration, location and operating system preferences, selected extras and any information you include in your message. We record an order reference, submission time, the selected service snapshot and price where relevant, payment status and provisioning progress. Quote requests are recorded without collecting payment at submission.

Use the dedicated password field only for your account password. Do not include passwords, payment card details, identity documents or other sensitive information in project notes or support messages. We do not collect payment card details through this website.

How we use it

We use your information to create and secure your customer account, verify your email, handle password resets, display your private billing and delivery information, and create and administer standard orders, prepare payment invoices, contact you, provision paid services and review custom quote requests. For custom work, we use it to prepare an offer and take steps at your request before a contract. We also use information needed to provide and administer an agreed service. We keep necessary records for legal obligations and use limited technical data for our legitimate interests in security, abuse prevention and service reliability.

Submitting a request does not subscribe you to marketing. We do not sell your information or use the order form for behavioural advertising.

Where your request goes

Your order or quote request is stored in our order system and a notification is sent to the VexHoster team at [email protected]. Only authorised people handling your request should access it. Our hosting, email and website delivery providers process the data necessary to operate these systems. Cloudflare may process connection information when delivering and protecting the website.

Infrastructure providers may process information outside your country. Applicable transfer safeguards must be used where required; you can contact us for information about the arrangements relevant to your request. We may also disclose information where required by law.

Cryptocurrency payment invoices

When you submit an eligible fixed-price standard order, we create a hosted payment invoice with Plisio automatically. Custom requests receive an invoice after their quote is agreed. We send the invoice reference, amount and currency, and service description to the payment provider. Our integration does not send your contact email automatically. Plisio processes the payment details you provide on its checkout, including the selected cryptocurrency, network, transaction information and necessary connection data, under its own privacy policy. We store invoice, payment-status and inventory-reservation records to administer the order, prevent conflicting hardware allocation and investigate payment issues. Customer order pages require the account owner to sign in. Payment and delivered access details also require email verification. The hosted payment provider has its own payment page; treat provider invoice links and all service access information as private.

Cookies, local storage and technical records

The public site does not use advertising or analytics tracking. Essential browser storage may be used to preserve an order submission identifier so a retry does not create duplicate requests. Customer billing uses an essential secure session cookie to keep you signed in and protect account actions. Administration also uses a secure session cookie to keep authorised staff signed in. Cloudflare may use necessary security cookies.

Web servers keep limited operational access and error logs, which may include IP addresses and request times. The order system uses a hashed connection identifier to limit abusive submissions. These measures help protect the service.

How long we keep information

We keep account information for the customer relationship and security purposes, and request information while reviewing and following up on your request and, if a service is agreed, for the customer relationship and any applicable legal record-keeping requirements. We periodically review records and remove information that is no longer needed. You can ask us to delete an unneeded enquiry. Daily order-database backups are rotated so that only the most recent 30 copies are retained; deleted records may remain in those backups until they rotate out.

Your choices and rights

Depending on the applicable law, you may request access, correction, deletion, restriction or portability of your information, or object to certain uses. Where we rely on consent, you can withdraw it without affecting earlier lawful processing. Some information may need to be retained to meet legal obligations or resolve a dispute.

Write to [email protected] and include your request number if available. You also have the right to complain to the relevant data protection authority, including the UK Information Commissioner's Office.