Legal
Privacy policy
Last updated: 13 November 2025
1. Introduction
QuantFX VPS ("QuantFX VPS", "we", "us", or "our") operates thequantfxvps.cloud website and client portal (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you create an account, purchase Windows or bare-metal trading infrastructure, use our control panel, or contact support.
We process personal data in accordance with applicable data protection laws, including the UK GDPR and EU GDPR where relevant. If you do not agree with this policy, please do not use the Service.
2. Data controller
The data controller is QuantFX VPS. For privacy enquiries: privacy@quantfxvps.cloud. You may also contact us via the support ticket system in your client area.
3. Personal data we collect
- Account data: name, email address, hashed password, role, session metadata (IP address, user agent, timestamps).
- Billing data: order history, invoice amounts, payment status, Stripe session identifiers when you pay by card (card data is processed by Stripe, not stored on our servers).
- Service data: hostnames, plan selections, datacenter region, provisioning logs, RDP access metadata (credentials are encrypted at rest).
- Support data: ticket subject and message content, staff replies, resolution status.
- Technical data: server and application logs, anti-abuse signals, cookies necessary for authentication and security.
4. How we use your data
We use personal data to:
- Provide, provision, and maintain VPS and bare-metal services;
- Authenticate users and prevent fraud or abuse;
- Process payments and issue invoices;
- Respond to support requests and improve the Service;
- Comply with legal obligations and enforce our Terms of Service;
- Send transactional emails (receipts, security alerts, provisioning notices).
5. Legal bases (EEA/UK)
Where GDPR applies, we rely on: (a) performance of a contract (providing hosting you ordered); (b) legitimate interests (security, fraud prevention, product improvement); (c) legal obligation; and (d) consent where required (e.g. non-essential marketing, if offered).
6. Retention
Account data is retained while your account is active and for a reasonable period thereafter for legal and accounting purposes (typically up to seven years for billing records). Support tickets may be archived after closure. Logs are rotated on a defined schedule unless needed for incident investigation.
7. Processors and international transfers
We use subprocessors such as cloud infrastructure providers, payment processors (Stripe), and email delivery services. Where data leaves the UK/EEA, we implement appropriate safeguards (e.g. Standard Contractual Clauses or UK International Data Transfer Agreement) commensurate with risk.
8. Security
We apply encryption for sensitive credentials, access controls for administrative systems, and monitoring for anomalous activity. No method of transmission over the Internet is 100% secure; you are responsible for safeguarding your account password and RDP credentials.
9. Your rights
Depending on jurisdiction, you may have rights to access, rectify, erase, restrict, object, portability, and to lodge a complaint with a supervisory authority. To exercise rights, contact privacy@quantfxvps.cloud. We may need to verify your identity before fulfilling requests.
11. Children
The Service is not directed at individuals under 18. We do not knowingly collect data from children.
12. Changes
We may update this policy periodically. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance where permitted by law.