Here is a comprehensive, UK GDPR-compliant Privacy Policy drafted specifically for your secure file transfer service. It covers the essential legal requirements for handling user data, processing subscription payments, and temporarily hosting third-party files.
Last Updated: 16 June 2026
VAULEX GROUP LTD ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal data when you use our secure file transfer platform and cloud storage services (the "Service").
We process all personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of data protection legislation, the Data Controller is:
Company Name: VAULEX GROUP LTD (Company Number: 17004770)
Registered Office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: billing@vaulex.co.uk
Telephone: 0333 305 1195
We collect and process the following types of data:
Account Information: Name, email address, and encrypted login credentials when you register for an account.
Billing Information: Billing addresses and transaction histories. (Note: We do not store full credit card details on our servers; these are securely processed by our third-party payment gateways).
Transfer Data: Sender and recipient email addresses, custom link names, IP addresses, browser types, and timestamp logs associated with file transfers.
Uploaded Files: The digital files you upload to our servers for transfer.
We rely on legitimate interest, contractual necessity, and legal compliance to process your data for the following purposes:
To provide, operate, and maintain the file transfer Service.
To process subscription payments and manage your account.
To send essential system notifications (e.g., transfer completion receipts, password resets, and expiry warnings).
To prevent fraudulent activity, unauthorized access, and abuse of our infrastructure.
We utilize enterprise-grade, secure cloud infrastructure to host your uploads.
Temporary Storage: Files are only retained on our servers for the duration specified by your transfer settings or subscription tier (e.g., 7 days, 30 days).
Automatic Deletion: Once a transfer link expires, the associated files are permanently and irreversibly deleted from our active storage buckets. We do not mine, read, or monetize the contents of your uploaded files.
We do not sell your personal data. We only share data with trusted third parties strictly necessary to operate our business, including:
Cloud storage and server hosting providers.
Secure payment processors (e.g., Stripe, PayPal).
Email delivery services used to send transfer notifications.
Law enforcement or regulatory bodies, if we are legally compelled to do so by a valid UK court order.
Under the UK GDPR, you possess the following rights regarding your personal data:
The Right to Access: You may request a copy of the personal data we hold about you.
The Right to Rectification: You may request that we correct any inaccurate or incomplete data.
The Right to Erasure: You may request the deletion of your account and associated personal data ("the right to be forgotten").
The Right to Restrict Processing: You may request a temporary halt to the processing of your data.
To exercise any of these rights, please contact us at billing@vaulex.co.uk. We will respond to all legitimate requests within 30 days.
Our platform uses essential cookies to manage user sessions, keep you logged securely into your dashboard, and ensure the basic functionality of the file upload process. By using the Service, you consent to the use of these essential technical cookies.
We may update this Privacy Policy from time to time to reflect changes in our technology or legal obligations. We will notify active users of any material changes via email or a prominent notice on our website.