Privacy Policy

This Privacy Policy explains what personal data VPNIUM (“we”, “us”, or “our”) collects when you browse our sites, request demos, sign agreements, or use our cloud-delivered Zero Trust services (together, the “Services”), how we use it, and the choices available to you. Using the Services means you acknowledge the practices described here.

1. Who we are

VPNIUM provides Zero Trust Network Access (ZTNA) and related security services. The data controller for personal data processed through the Services is the entity identified in your order form or agreement, or as otherwise disclosed to you at the point of collection.

2. Information we collect

We may collect the following categories of information, depending on how you use the Services:

• Account and contact data: name, email address, company name, phone number, billing address, and credentials you provide when registering or contacting us.
• Technical and usage data: IP addresses, device identifiers, browser type, operating system, timestamps, log data, diagnostic data, and security-related events necessary to operate and protect the Services.
• Administrative configuration: policies, access rules, and metadata you configure within the product (which may include identifiers of users, groups, and applications).
• Support communications: information you send when you contact support, including attachments you choose to provide.
• Payment data: processed by our payment processors; we typically receive limited billing metadata rather than full card numbers.

3. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Services;
• Authenticate users, enforce access controls, and detect, prevent, and respond to fraud, abuse, and security incidents;
• Communicate with you about the Services, including transactional messages, service notices, and (where permitted) product updates;
• Comply with legal obligations and enforce our terms;
• Analyze usage in aggregated or de-identified form to improve reliability and performance.

4. Legal bases (EEA/UK users)

Where applicable, we rely on one or more of the following legal bases: performance of a contract, legitimate interests (such as securing our Services and improving reliability), consent (where required), and legal obligation.

5. Sharing of information

We may share information with:

• Service providers who assist us with hosting, analytics, communications, customer support, and payment processing, subject to appropriate safeguards;
• Professional advisors (e.g., lawyers, auditors) where necessary;
• Authorities when required by law or to protect rights, safety, and security;
• Corporate transactions such as a merger, acquisition, or asset sale, with notice as required by law.

We do not sell your personal information as “sale” is commonly defined in privacy laws, and we do not share personal information with third parties for their independent marketing without appropriate consent where required.

6. International transfers

We may process data in countries other than your own. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognized by applicable law.

7. Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on the nature of the data and legal requirements.

8. Security

We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure; we encourage you to use strong credentials and follow your organization’s security policies.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the details below. We may need to verify your request.

10. Cookies and similar technologies

We may use cookies and similar technologies for essential operation, security, preferences, and analytics. You can control cookies through your browser settings; disabling certain cookies may affect functionality.

11. Children’s privacy

The Services are not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version and revise the “Last updated” date. Where changes are material, we will provide additional notice as required by law.

13. Contact

For privacy-specific questions or to exercise your data rights, email [email protected] or use the secure form on our Contact page so we can authenticate your request.