Legal
Privacy Policy
This Privacy Policy explains how SquareCode UK Limited (“SquareCode”, “VaultLayer”, “we”, “our” or “us”) collects, uses and protects information when you use VaultLayer and our websites.
Last updated: 15 July 2026
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
VaultLayer is operated by:
SquareCode UK Limited
Company No. 17298176
128 City Road
London
EC1V 2NX
United Kingdom
Email: privacy@squarecode.co.uk
Information we collect
Depending on how you use VaultLayer, we may collect the following information.
Account information
When you create an account we may collect:
- Name
- Company name
- Email address
- Telephone number
- Billing address
- User preferences
- Authentication information
Website information
When you connect websites to VaultLayer we may collect technical information including:
- Domain names
- SSL certificate information
- DNS configuration
- Server software versions
- PHP version
- Web server type
- WordPress version
- Installed plugins
- HTTP response headers
- Performance metrics
- Availability information
- Security configuration
- Infrastructure metadata
VaultLayer is designed to analyse website configuration and operational health. It is not designed to collect personal information belonging to visitors of your websites.
Monitoring data
While monitoring your websites we may collect:
- Uptime history
- Performance samples
- Error responses
- Security events
- Website health scores
- Compliance information
- Remediation history
- Audit events
- Policy compliance
- Predictive maintenance data
Support information
If you contact us we may collect:
- Emails
- Support tickets
- Chat messages
- Diagnostic information you choose to share
Billing information
Payments are processed securely by our payment provider. VaultLayer does not store complete payment card information.
Cookies
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Improve website performance
- Understand how our website is used
- Protect against fraud
You can control cookies through your browser settings.
How we use your information
We use your information to:
- Provide VaultLayer services
- Monitor connected websites
- Detect operational issues
- Generate AI recommendations
- Perform authorised automated remediations
- Produce reports
- Improve platform security
- Respond to support requests
- Send service-related communications
- Comply with legal obligations
AI features
VaultLayer includes AI-powered operational assistance. Information submitted to AI services may be processed to generate:
- Incident explanations
- Suggested remediations
- Performance analysis
- Security summaries
- Operational recommendations
We do not use your organisation's monitoring data to train public AI models.
Legal basis
We process personal information under one or more of the following lawful bases:
- Performance of a contract
- Legitimate interests
- Legal obligation
- Consent where required
Sharing information
We may share information with trusted service providers who help operate VaultLayer, including providers of:
- Cloud infrastructure
- Payment processing
- Email delivery
- Error monitoring
- Customer support
- AI processing
These providers process information only on our instructions. We never sell personal information. See our Trust Centre for related documents.
International transfers
Some service providers may process information outside the United Kingdom. Where this occurs we ensure appropriate safeguards are in place as required by UK GDPR.
Data retention
We retain information only for as long as necessary. Account information is generally retained while your account remains active. Monitoring data, audit logs and backups may be retained for operational, security and legal purposes. You may request deletion of your account at any time, subject to applicable legal obligations.
Security
We use industry-standard security measures including:
- Encryption in transit
- Encryption at rest where appropriate
- Role-based access controls
- Audit logging
- Multi-factor authentication
- Continuous security monitoring
No internet service can ever be guaranteed completely secure. Read more on our Security page.
Your rights
Under UK GDPR you have the right to:
- Access your information
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent where applicable
Requests can be made by emailing privacy@vaultlayer.co.uk.
Changes to this policy
We may update this Privacy Policy from time to time. Where changes are significant we will notify account holders.
Contact us
If you have questions about this Privacy Policy or how we process information, contact privacy@vaultlayer.co.uk or write to:
SquareCode UK Limited Trading as VaultLayer
128 City Road
London
EC1V 2NX
United Kingdom