Privacy policy
Last updated on 24 September 2026. The Dutch version prevails. Virenix's company details are at the bottom of every page.
Who is responsible
Virenix is responsible for processing the personal data described in this policy. Our company details are at the bottom of every page. Send privacy questions to the email address on our contact page.
Which data we process
Account data: name, email address, password (only stored encrypted) and language preference. Billing data: address, and for business customers the company name and VAT number. Payment data: the status and amount of payments. Your bank or card details are handled by our payment provider; we do not store them. Service data: your servers, their settings and the files you put on them. Support data: your tickets and emails with us. Technical data: IP addresses and log files, for security and fixing outages.
Why we use it
To deliver your service and manage your account (performance of the contract). To create and keep invoices (legal obligation). To prevent and investigate misuse, fraud and attacks (legitimate interest). To inform you about your service, such as maintenance or outages (performance of the contract). To ask you once after an order for a review (legitimate interest; you can always decline). We do not send newsletters or advertising without your consent, and we never sell your data.
Who we share it with
We only share data when needed for the purposes above, with parties that work on our behalf under a written agreement: the data centres that house our servers, our payment provider, our email provider, and Trustpilot if you choose to leave a review. Otherwise, we only pass on data when the law requires it, for example to the Dutch Tax Administration or on a valid request from the authorities.
Data storage
If a service provider uses systems outside the European Economic Area, we only allow that with the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
How long we keep it
Account data: as long as your account exists, and up to 12 months afterwards to handle questions or disputes. Invoices and payments: 7 years, as Dutch tax law requires. Server data and backups: until no later than 30 days after the service ends. Support data: 2 years after the last contact. Log files: up to 90 days, unless we need them for an ongoing misuse investigation.
Security
We protect your data with appropriate technical and organisational measures, including encrypted connections, encrypted password storage, limited staff access and regular updates. If you notice anything unusual, please report it straight away.
Cookies
This website only uses functional cookies: to keep you signed in, to protect forms, and to remember which notices you have closed. These do not require consent. We do not use tracking or advertising cookies. If we ever do, we will ask for your consent first.
Your rights
You may access, correct or delete your data, restrict its processing, object to processing based on legitimate interest, and receive your data in a common file format. Send your request to the email address on our contact page. We respond within one month and may ask you to confirm your identity. Data we are legally required to keep, such as invoices, cannot be deleted before that period ends.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can fix it. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We update this policy when our services or the law change. We announce important changes by email. The current version is always published here.