Privacy notice

How we use your information.

This notice covers our website, your client account and the hosted dashboard service.

Last updated: 22 July 2026

AccountYour name, email and the details needed to run your service
BillingSubscription references and active-profile usage used to calculate charges
SecuritySign-in and service activity used to protect accounts and investigate problems
01

Who we are

MRCHRISSYSERVICES LTD, company number 12947362, trades as VPN Dashboard and provides hosted software for businesses that sell or manage VPN access. It is responsible for the personal information described in this notice.

Our trading and contact address is The Pavilion, 29 Church Street, Digby, Lincoln, LN4 3LZ, United Kingdom. Our registered office is 32 Castlemere Drive, Shaw, Oldham, Lancashire, OL2 8TQ, United Kingdom. Privacy questions can be sent to privacy@vpndashboard.com.

02

Information we collect

Most information comes directly from you when you create an account, configure a service or contact support.

  • Your name, email address and account authentication details
  • Your chosen dashboard region, package and optional services
  • Your service name, customer address and billing system when you configure them
  • Sign-in records, IP address and security information
  • Messages, setup notes, attachments and support correspondence
  • Subscription status, Stripe references and active-profile usage
  • Service health, software version and recent activity

Stripe collects the billing identity, address, tax details and payment information needed for checkout. Older order records may contain billing details supplied before we moved this collection to Stripe. We retain those only where they are still needed for the contract, accounting or legal obligations.

We do not store full card numbers or CVC codes. Reports from hosted dashboards do not include VPN private keys, VPN configurations, customer passwords or server credentials.

03

Why we use it

Provide the service
Create your account, process your order, set up the dashboard, manage the subscription and provide support. This is necessary to perform our contract with you.
Run and secure the service
Monitor service health, prevent abuse, investigate faults and protect accounts. We do this for our legitimate interest in running a secure and reliable service.
Meet legal obligations
Keep billing, tax, accounting and security records where the law requires us to do so.

We do not sell personal information. We do not use it for automated decisions that have a legal or similarly significant effect.

04

Payments

Stripe processes checkout and keeps your billing identity, address, tax details and payment method. We keep the Stripe customer, checkout and subscription references needed to provide the service. We may also receive the card type and last four digits, payment status, invoice totals and tax outcome. We do not store full card numbers or CVC codes.

You can manage payment methods, invoices and billing details through Stripe's billing portal from your account. Your own customer billing remains in the billing system you connect to VPN Dashboard.

05

Dashboard and support data

Your hosted dashboard reports active-profile counts for monthly usage billing. It may also report its software version, service health, totals and recent activity so we can run and support the service.

We are the controller for your account, billing and support information. When we process your customers’ personal information solely to provide the dashboard, your business is the controller and we act as its processor under the applicable agreement.

Support reports leave out secrets.

Private keys, VPN configurations, billing tokens, sign-in secrets, customer passwords and server credentials are excluded or redacted.

06

Who receives information

We use suppliers where needed to provide the service, including Stripe for payments and providers of hosting infrastructure, transactional email, DNS and service monitoring. We require suppliers to handle information only for the agreed service and with suitable safeguards.

Where a supplier processes information outside the UK, we use an approved transfer mechanism where required, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Contact us for the current subprocessor list or a data processing agreement.

07

How long we keep it

Account and service information is kept while the service is active. After it ends, we keep only what is needed for support, security, disputes and legal obligations. Accounting and tax records are normally kept for six years from the end of the financial year they relate to, and longer where the law requires it.

Security records are kept only while needed to investigate and protect the service. Backup copies expire through their normal rotation. A record may be kept longer for a legal claim, active investigation or other legal requirement.

08

Cookies

The website uses necessary cookies to maintain signed-in sessions, protect forms and keep accounts secure. We do not use advertising cookies on this site.

09

Your rights

Depending on the circumstances, you may ask for access to your personal information, correction of inaccurate information, deletion, restriction or portability.

Your right to object: you may object to our use of personal information where we rely on legitimate interests. We will consider your circumstances and stop unless there are compelling grounds to continue or the information is needed for legal claims.

These rights are not absolute and can depend on the legal reason for processing. Email us to make a request; we may need to confirm your identity before acting on it.

10

Contact and complaints

Send privacy questions, data processing agreement requests or rights requests to privacy@vpndashboard.com. Please explain what you need and which account or service the request relates to.

If you are unhappy with our response, you can complain to the Information Commissioner’s Office, the UK data protection regulator.