Privacy Notice

Who we are

Vault Cloud UK Ltd is the data controller for the personal data described in this notice. Our registered office is:

Vault Cloud UK Ltd
5th Floor
167–169 Great Portland Street
London W1W 5PF
United Kingdom

We are registered with the Information Commissioner's Office under registration number C2034590.

For any privacy enquiry, including a request to exercise your rights, contact privacy@vaultcloud.uk.

What we collect

Information you give us

• Enquiry details — your name, organisation, email address, telephone number and the content of your message when you use our contact form or email us directly.
• Business relationship data — contact details and correspondence relating to customer, partner and supplier relationships.
• Recruitment data — the information in an application or speculative approach, where you apply for a role with us.

Information we collect automatically

• Technical and usage data — IP address, browser type, pages viewed and referring page, collected through our website platform to keep the site secure and understand how it is used.
• Cookies — strictly necessary cookies required to deliver the site, and analytics cookies only where you have consented to them.

We do not collect special category data through this website, and we ask that you do not include classified, sensitive or personal information in an enquiry form. If you need to discuss something sensitive, contact us and we will arrange an appropriate channel.

Why we use it, and our legal basis

• Responding to enquiries and managing relationships — our legitimate interests in running and developing the business.
• Performing a contract — where an enquiry becomes a customer, partner or supplier relationship.
• Recruitment — our legitimate interests in assessing candidates, and steps taken at your request before entering a contract.
• Security and integrity of our systems — our legitimate interests in protecting the website and investigating misuse.
• Analytics cookies — your consent, which you can withdraw at any time.
• Legal and regulatory obligations — where the law requires us to retain or disclose information.

Sharing and international transfers

We do not sell personal data and we do not share it for advertising purposes.

We share personal data with service providers who support our operations — including website hosting, email and IT services — and with professional advisers where necessary. All are bound by contract to process personal data only on our instructions.

Some of those service providers may process technical and enquiry data outside the United Kingdom. Where that happens we rely on UK adequacy regulations or the International Data Transfer Agreement, together with appropriate technical and organisational safeguards.

This applies to our corporate website only. It does not describe how customer workloads are handled on Vault's sovereign cloud platform, which is UK-hosted and UK-operated and is governed by the terms of the relevant customer agreement.

Retention

We keep enquiry correspondence for as long as needed to respond and for a reasonable period afterwards for business record-keeping. Contract and financial records are kept for the periods required by law. Unsuccessful recruitment records are kept for twelve months unless you ask us to remove them sooner.

Your rights

Subject to the conditions in UK data protection law, you have the right to request access to your personal data, and to ask us to correct it, delete it, restrict how we use it, or provide it in a portable format. You may also object to processing based on our legitimate interests, and withdraw consent where we rely on it.

To exercise any of these rights, contact privacy@vaultcloud.uk. If you are not satisfied with our response you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to resolve it first.