Last updated: 23 September 2026

This policy explains what personal data Virtual Minds Hub Enterprise (“Vemhost”) collects, why, and what rights you have. We are the data controller. Contact: support@vemhost.net, Savanna Junction, Commercial Avenue, Bamenda.

1. What we collect

• Account details you give us: name, email address, postal address, phone number, and company name where applicable.
• Billing records: invoices, payments, and what you purchased. We do not store card numbers. Card payments are handled by our payment provider.
• Support correspondence: tickets and emails you send us, and our replies.
• Technical data generated by using the service: IP addresses, web server access logs, mail logs, and authentication records. These are needed to run the service, investigate faults, and detect abuse.
• Cookies: our site and client area use cookies necessary for login sessions and for remembering preferences.

2. Why we use it, and on what basis

• To provide and support the services you buy, and to bill for them — necessary for our contract with you.
• To keep the service secure and prevent abuse, including malware scanning and blocking attacks — our legitimate interest, and that of our other customers.
• To meet legal and accounting obligations — legal duty.
• To send service notices such as maintenance, invoices and security alerts. These are not marketing and you cannot opt out while you hold an account.

3. Who else processes it

• Payment provider — to take payments. They receive what they need to process the transaction.
• Google — off-site copies of server backups are stored in Google Drive. Those backups contain hosted data, which may include personal data you hold.
• Our security provider — malware scanning and intrusion prevention on the server.
• Our data-centre provider, which houses the server.
• A certificate authority, which issues the free TLS certificates protecting your sites. Issued certificates are published in public transparency logs, which include domain names.

We do not sell personal data, and we do not share it for advertising.

4. Where it is stored

Our server is located in Germany. Backup copies are stored with Google, which may process data outside that country.

5. How long we keep it

• Account and billing records: while your account is active, then 7 years where tax law requires.
• Server and mail logs: 30 days.
• Backups: two days of history. Data you delete disappears from backups within that period.
• Support tickets: 1 day.

6. Your rights

You may ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Some data we must keep — invoices, for example, are subject to accounting law. Write to support@vemhost.net and we will respond within 30 days. If you are unhappy with our response you may complain to your data protection authority.

7. Data you hold about others

If your website or mailboxes hold personal data about your own customers, you are the controller of that data and we process it on your behalf in order to host it. You are responsible for having a lawful basis and your own privacy notice.

8. Security

We protect data in transit with encryption, require encrypted connections for mail and control-panel access, scan for malware, and limit administrative access. No system is perfectly secure; if a breach affects your personal data we will notify you and any regulator as required.

9. International transfers

Our server is located in Germany. Off-site backup copies are stored with Google and may be processed outside Germany and outside the European Economic Area. Where we transfer personal data of EEA residents outside the EEA, that transfer relies on the safeguards our providers have in place, such as the European Commission’s standard contractual clauses. You may ask us which safeguards apply to a particular transfer.

10. Changes

We will post updates here and, where changes are significant, notify you by email.