Skip to content
HomePrivacy Policy

Privacy Policy

Last updated: 30 June 2026

This Privacy Policy explains how Vastrox ("we", "us", "our") collects, uses, shares and protects personal data when you visit our website, create an account or use our Services. We are the data controller for the personal data described in this policy. For privacy matters, contact us at privacy@vastrox.com.

1. Data we collect

  • Account & identity data: name, email address, phone number, country, and (for business customers) company name and VAT number.
  • Billing data: billing address, transaction history and invoices. Card details, where card payment is used, are processed by our payment providers and are not stored on our servers.
  • Technical data: IP address, browser type, device information, and log data generated when you use the Services.
  • Service data: information related to the products you order and operate, and support tickets you submit.
  • Cookies & usage data: as described in our Cookie Policy.

2. How we use your data and lawful bases

  • To provide the Services (performance of a contract): creating and managing your account, provisioning services, billing and support.
  • To secure the platform (legitimate interests): fraud prevention, abuse detection, and network security.
  • To comply with law (legal obligation): tax, accounting and lawful requests.
  • To communicate (contract / legitimate interests / consent): service notices, and — only where you have opted in — marketing messages, which you can unsubscribe from at any time.

3. Cookies

We use essential cookies to keep you signed in and to keep the platform secure, and — with your consent — analytics cookies to understand usage. You can manage your preferences via the cookie banner. See our Cookie Policy for details.

4. Third parties we share data with

We share personal data only as needed to operate the Services, with providers acting as our processors under appropriate agreements. These include:

  • Payment providers (e.g. PayPal) to process payments;
  • Infrastructure providers (our datacenter and network partners in France, Germany and the United Kingdom) to host the Services;
  • Security & delivery providers (e.g. Cloudflare) for DDoS protection and content delivery;
  • Email providers for transactional and (where opted in) marketing email.

We do not sell your personal data.

5. Data retention

We retain account and billing records for as long as your account is active and thereafter as required to comply with legal, tax and accounting obligations (typically up to the statutory retention period). Technical logs are retained for a limited period for security and troubleshooting. When data is no longer required, we delete or anonymise it.

6. International transfers

Your data is primarily processed within the European Economic Area and the United Kingdom. Where data is transferred outside these regions, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. EU/EEA and UK residents have these rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA. To exercise any right, contact privacy@vastrox.com. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We implement technical and organisational measures to protect personal data, including encryption in transit, access controls, encrypted storage of sensitive credentials, and regular backups. No method of transmission or storage is completely secure, but we work continually to protect your information.

9. Children

The Services are not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or via a website notice. The "Last updated" date above reflects the latest revision.

11. Contact

For any privacy request or question, contact our data protection contact at privacy@vastrox.com. Data controller: Vastrox, Eli Cohen 7, Bat Yam, Israel (VAT 318870227).