Privacy Policy

1. Who we are

VMease Limited ("VMease", "we", "our" or "us") is a company registered in Jersey with company number 161188.

VMease is the controller of the personal information described in this policy. We are registered with the Jersey Office of the Information Commissioner under registration number 103729.

2. The law we follow

We process personal information under the Data Protection (Jersey) Law 2018, which is closely aligned with the EU General Data Protection Regulation (GDPR). The European Commission recognises Jersey as providing an adequate level of data protection, so personal information can flow between the European Union and Jersey without additional safeguards.

Where the EU GDPR or the UK GDPR applies to our processing of your personal information (for example, because we offer our services to people in the European Union or the United Kingdom), we will also comply with that law, including the rights it gives you.

3. What this policy covers

This policy covers how VMease collects, uses, stores and shares personal information, as a Data Controller, for its own business purposes, including sales, licensing, customer administration, website analytics and business communications.

It does not cover the data inside our customers' environments. The VMease platform is installed and runs in infrastructure that our customers or their partners own and control. We do not ordinarily host, store, access or otherwise process customer workload data.

It does not cover the occasions when VMease, as a Data Processor, processes personal information on a customer's behalf, principally during installation, migration, diagnostics and support. This is covered by our Data Processing Agreement rather than by this policy.

4. Information we collect

Information you give us

• Name, company name and job title
• Email address and telephone number
• Details of your enquiry, trial request or support request
• Event registrations and partner applications

Information we collect automatically

• IP address, browser type and device information
• How you use our website
• Cookie and analytics information, where you have agreed to it
• Licence identifiers, VMease software version, fault and other product telemetry

5. How we use it, and our lawful basis

6. Who we share it with

We do not sell personal information. We share it only where needed to run our business:

• Service providers who process personal information for us to run our own business, such as email, document storage, CRM, accounting and website hosting
• Subprocessors who process personal information on our customers' behalf where we act as their processor, for example when we provide support
• Reseller and integration partners, where your enquiry relates to their territory or a project they are delivering
• Professional advisers and authorities, where the law requires it

7. Where your information is stored

Our operations and support systems are hosted in the United Kingdom.

Some of the business tools we use are provided by companies whose parent company is outside Europe. This does not in itself mean that your information is stored outside Europe. Where those providers offer a European or UK data region we use it. Where personal information is transferred outside Jersey, the UK or the EU, the transfer relies on an adequacy decision or, where required, other appropriate safeguards such as standard contractual clauses.

8. How long we keep it

9. Cookies

Our website uses essential cookies to work properly and, only with your consent, analytics cookies to help us improve it. You can change your choice at any time through the cookie settings link on our website. Our analytics are provided by Google Analytics 4, a service of Google Ireland Limited. Google may process analytics information in the United States and other countries where it or its service providers operate. Where it does, Google relies on the EU–US Data Privacy Framework (and its UK Extension) or standard contractual clauses.

10. How we protect it

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. The measures we apply depend on the system and the information it holds, and include access controls, multi-factor authentication, encryption in transit and limiting access to the people who need it. More detail is available on our Security & Trust page.

11. Your rights

Depending on where you live, and subject to the conditions and exceptions in applicable data protection law, you can ask us to:

• Give you a copy of the information we hold about you
• Correct information that is inaccurate
• Delete your information
• Restrict or object to how we use it
• Move it to another provider
• Stop sending you marketing

Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email legal.team@vmease.com. We will respond within four weeks of receiving your request, as Jersey law requires, and within any shorter period required by the UK GDPR or EU GDPR where those laws apply. Where the law allows, we may extend this period for complex or multiple requests, and we will tell you if we do. If we cannot meet your request in full, for example because we must keep information to meet a legal obligation, we will explain why.

If you are unhappy with how we have handled your information, you can complain to the Jersey Office of the Information Commissioner (jerseyoic.org), or to the data protection authority where you live.

12. Changes and contact

We will update this policy when our practices change and show the date of the latest version below.

Contact: legal.team@vmease.com

Version: 1.3 · Published: 3 November 2026