Privacy Policy

Effective 26 October 2026.

1. Who we are

“Golzak” is a brand used by two independent companies under the same owner, which cooperate under an intercompany arrangement:

• GOLZAK UK LTD, a private limited company registered in England and Wales under number 13649050, registered office 167-169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom (“Golzak UK”). Golzak UK publishes the golzak.com website, operates the customer portal (portal.golzak.com), publishes the Golzak mobile applications, and sells and invoices services paid by card (Stripe) or cryptocurrency.
• GOLZAK SARL AU, a Moroccan limited liability company with a sole shareholder, Commercial Register of Fès no. 60041, ICE 001562263000028, IF 3371989, registered office N°8 rue Omar Ibn Kaltoum, avenue El Kattani, Agdal, offices 29, 5th floor, 30000 Fès, Morocco (“Golzak Morocco”). Golzak Morocco is the registrar of .ma domain names accredited by the ANRT, employs our staff in Morocco, sells and invoices services paid by Moroccan bank transfer, cash or locally issued card (CMI), and technically hosts the golzak.com website on behalf of Golzak UK.

Which company is responsible for your data? The company named on your order and invoice is your contracting party. It is the data controller for your account, orders, billing and support. Golzak UK is the controller for the golzak.com website (cookies, analytics, contact forms) and for the mobile apps, each of which has a product privacy notice in section 7. Our customer portal only collects payments; your legal invoice is issued by the company you paid, from its own accounting system. When Golzak UK provides the customer portal to Golzak Morocco, it acts as Golzak Morocco’s processor, and when Golzak Morocco hosts the golzak.com website, it acts as Golzak UK’s processor. When you register a .ma domain through Golzak UK (or another reseller), Golzak Morocco receives the registrant data as the accredited registrar and passes it to the ANRT.

↑ Back to contents

2. What we collect

• Account and contact data: name, company name, postal address, country, e-mail, telephone, ICE/tax ID for businesses, login credentials (stored hashed), language.
• Domain registrant data: registrant and contact details. For .ma domains, the ANRT requires a national ID (CIN), passport or residence permit number, or the company’s tax/ICE identifier.
• Order and billing data: products, invoices, payment method, amount and date. Card numbers are entered directly with our payment providers (Stripe, CMI) and are never stored by Golzak.
• Support and communications: tickets, e-mails, chat, call notes and quote requests.
• Technical data: IP address, browser and device data, logs of access to our portal and servers, security events.
• Website and marketing data: cookies and similar technologies (see section 13), newsletter subscriptions and opt-outs, and the campaign identifiers attached to a form submission.
• Job applicants: CV, contact details and interview notes you send us.
• Hosted content: files, websites, e-mails and databases you store on our hosting. We process this content only on your instructions, as your processor. You remain responsible for the personal data your own visitors or customers give you. Our Data Processing Addendum applies to this content.

↑ Back to contents

3. Why we use it and on what legal basis

Where we rely on legitimate interests, we have balanced them against your rights. You may object at any time to processing based on legitimate interests, and we will stop unless we have compelling legitimate grounds or need the data to establish, exercise or defend legal claims. Objections to direct marketing are always honoured. Where data cannot be linked to you (such as crash reports), we cannot stop its processing for you individually.

How we ask for your consent. Our forms on golzak.com and in our client portal (contact, quote, support, newsletter, appointment booking and checkout) include a checkbox that is never pre-ticked. A required box confirms that you have read this policy and agree to the processing of your data to answer your request or provide the services you order. On the contact, quote and support forms and at checkout, a separate, optional box lets you choose to receive our offers by e-mail; you can still send your request without ticking it. The answers you give on our website forms are saved with your request, and your newsletter or mailing-list choice is recorded with your contact details. You can withdraw your consent at any time, using the unsubscribe link in each e-mail or by writing to privacy@golzak.com. This does not affect processing carried out before you withdrew it.

We do not make decisions with legal or similarly significant effects about you based solely on automated processing. We use an AI writing assistant (Anthropic’s Claude API) to help draft replies to commercial enquiries. A Golzak team member supervises its use, and the provider does not use our data to train its models.

↑ Back to contents

4. Who receives your data

We share data only as needed for the purposes above, with:

• the other Golzak company, under the intercompany agreement (customer portal, website hosting, .ma reselling and data processing terms);
• domain registries and registrars: ANRT (.ma, Morocco) and Enom, LLC (other extensions, USA). Some registrant data may appear in public WHOIS/RDAP directories according to registry rules;
• hosting and software providers: our hosting and infrastructure providers (servers, content delivery and security, databases, security logs and e-mail delivery, including our newsletter and marketing e-mails), our business-software providers (separate ERP and CRM databases for each company, and workflow automation) and our AI assistant provider (Anthropic, PBC, USA);
• payment providers and banks: Stripe (for Golzak UK), CMI and Moroccan banks (for Golzak Morocco), and Cryptomus (if you choose to pay with cryptocurrency);
• on golzak.com: Google (Analytics, Tag Manager, Ads) and Meta Platforms (Meta Pixel), for audience measurement and advertising;
• our accountants and legal advisers, and public authorities or courts where the law requires it.

We do not sell your personal data.

↑ Back to contents

5. International transfers

Your data may be processed in Morocco, the United Kingdom, the European Union (France, Belgium, Germany, Ireland, the Netherlands), Canada, the United States and, for Vantom VPN, the other countries where its VPN servers run and South Africa (see section 7). For transfers outside the UK or EU we rely on adequacy decisions (EU, UK and Canada), on the UK International Data Transfer Addendum and EU Standard Contractual Clauses included in our providers’ data processing agreements, and, where applicable, on the EU-US Data Privacy Framework and its UK Extension. For data controlled by Golzak Morocco, transfers abroad are notified to the CNDP and carried out under the authorisation regime of Articles 43 and 44 of Law 09-08.

↑ Back to contents

6. How long we keep it

• Customer account and contract data: for the duration of the contract, then 5 years (limitation period).
• Invoices, accounting and billing records (including app purchase records): at least 10 years, also after you close or delete your account, and not erased on request (legal obligation: Moroccan Commercial Code and tax law, UK Companies Act and HMRC rules).
• .ma identity numbers: for the life of the domain plus 1 year.
• Support tickets and account activity logs: for the duration of your account and contract, then 5 years.
• Prospects and newsletter contacts: 3 years after our last contact with you, or until you opt out. Your opt-out is kept so that we can respect it.
• Job applicants: 2 years, unless you ask us to delete your application sooner.
• Proxy server logs (Blue Proxy, Proxynel): see section 7.
• App accounts: until you delete your account; Vantom VPN accounts are also deleted after 2 years without use (see section 7).
• Vantom VPN: see the table in section 7.

↑ Back to contents

7. Product privacy notices (Blue Proxy, Proxynel, Vantom VPN)

The rest of this policy applies to all Golzak services. This section adds a privacy notice for each of our products, with only what is specific to that product: the data it uses, why, and for how long. Where a product notice differs from the general sections, the notice applies to that product; for example, the advertising described in section 8 concerns only the products whose notice says they show ads. The Blue Proxy, Proxynel and Vantom VPN apps are published on Google Play by GOLZAK UK LTD, which is the controller of the data described in this section.

Blue Proxy and Proxynel

• Account (optional): if you sign in with Google, we receive your e-mail address, name, profile picture and a user identifier (Firebase Authentication), and use them to link your subscription to your account.
• Purchases: subscriptions are sold through Google Play. We receive the purchase token, product and subscription status from Google Play; we never receive your payment card details.
• Advertising: the free versions show ads served by Google AdMob and Meta Audience Network. These providers collect your device’s advertising ID and app set ID, your IP address (used to estimate your approximate location), device information and your interactions with ads, for advertising, measurement and fraud prevention. In the EEA, the UK and Switzerland, the free versions of our apps are funded by personalised advertising. Before any ad is shown, Google’s consent tool (certified under the IAB Transparency & Consent Framework) asks for your consent. If you do not wish to consent, you can use the ad-free subscription (Blue Proxy+ or Proxynel+) instead. You can change your choice at any time in the app’s privacy settings.
• Analytics and app quality: we use Google Analytics for Firebase, Firebase Crashlytics, Cloud Messaging (push notifications), Performance Monitoring and, in Proxynel, In-App Messaging. Both apps also use Google Play’s in-app review prompt, which Google runs under its own terms. They collect app interactions, crash logs, diagnostics, device information and a push-notification token.
• Proxy service: the app sends your browsing through our proxy servers. The connection between the app and our proxy servers is not yet encrypted: pages on HTTPS sites stay encrypted from end to end, but the name of each site you visit and the app’s access token for the proxy and its signed proof are sent in the clear, and pages on HTTP sites are not encrypted at all. We are adding encryption to this connection. To run the service, prevent abuse and comply with the law, our servers record your IP address, the date and time, your account or session identifier and the destination: for HTTPS sites only the domain name, never the content of pages; for HTTP sites the full address of the page, including any query string. Our servers rotate these logs by size, not by age, so on a quiet server they can be kept for weeks or months, with no fixed limit; we are adding a limit of 7 days. When the server rejects a sign-in to the proxy, it also logs the last part of the rejected request, which usually contains the site you were opening and can contain part of the access token. We never sell your browsing history.
• Connection Health (Blue Proxy): to find and fix connection problems, Blue Proxy reports connection checks and failures to our diagnostics service. A report contains your IP address, a random installation identifier, a one-way hash of your account identifier if you are signed in, your network operator and country, the DNS servers of your network, the site (domain and port, never the page address) that failed to load, the results of network tests, including the addresses of the network hops on the way to our servers, and app and device details. We keep these reports for 14 days. There is currently no setting in the app to turn these reports off.
• Security: the apps use Android key attestation through our sign-in service (Golzak Auth, see the Vantom VPN notice below for what that service keeps) to detect modified apps and abuse.
• Website permissions: Proxynel does not access your location, camera or microphone for itself. If a website you visit asks for them, the app shows a prompt; if you allow it, the data goes only to that website, not to Golzak.

Deleting your Blue Proxy or Proxynel account: there is no deletion option in these apps yet. You can request deletion of your app account and associated data on our account deletion page or by writing to privacy@golzak.com from the e-mail linked to your account; if you never signed in, we may not be able to find your account. We delete your account, user identifier and profile data within 30 days. We keep purchase records for at least 10 years, also after you delete your account, as tax and accounting evidence and to answer disputes; they are not erased on request. Proxy logs and Connection Health reports expire on their own as described above. Uninstalling the app does not cancel a Google Play subscription.

Vantom VPN

Vantom VPN uses Android's VpnService to create an encrypted WireGuard tunnel between your device and a Vantom server in the country you choose. Our VPN servers run in several countries, which change over time; the current locations are shown in the app. The tunnel runs only when you turn it on. GOLZAK UK LTD is the controller of the data described here. The Blue Proxy and Proxynel notice above does not apply to Vantom VPN. The free version of Vantom VPN is funded by ads and analytics; Premium, an optional paid subscription, removes the ads. Vantom VPN is for adults (18 or over); see section 15.

Our no-logs promise. The Vantom VPN servers that carry your traffic keep no logs of your browsing, the websites, apps or other destinations you reach, your DNS queries, the content of your traffic, or your device's IP address. While you are connected, your DNS queries are resolved by public DNS resolvers (Cloudflare and Google), and we do not log them. To run the tunnel, a server reports to our service only technical information about the connection (your device's VPN key, when it last connected and how much data it carried).

What connects outside the VPN. The Vantom app itself, Google Play services and the Play Store connect outside the VPN tunnel, over your normal network and with your own IP address. This covers our own service (sign-in, settings, ads, analytics, crash reports, notifications and purchases), and the rest of what Google Play services and the Play Store do for your device and your other apps while you are connected. If you turn on “Block connections without VPN” in your phone’s settings, the Play Store goes through the VPN, and so does Google Play services unless Android lets it use your network directly. The internet traffic of all other apps, and your browsing, go through the tunnel; traffic to your local network (such as printers or casting) stays on it.

What we collect. Depending on how you use Vantom VPN, we collect these categories of data:

• Account information: the account the app creates for you (you can use the app without signing in) and its identifiers, your plan, and, if you choose to link a Google account, that account’s identifier, name, e-mail address and profile picture.
• Device and app information: device and installation identifiers (including a one-way hash of Android’s device ID, used to count free time per device and, for statistics, to recognise the same device when the app is installed again), keys and security checks that show requests come from our app on a real device, push-notification tokens, and details such as the app version, operating system, device model, language and device type, and how you installed the app.
• Network information: the IP address your device uses to reach our service, the approximate location and network provider derived from it, and the type of network you use.
• Connection information: which of our server locations you use, when, for how long and how much data the connection carried, and the technical data needed to run the tunnel. Never the content or destinations of your traffic.
• App activity: how you use the app, such as the screens you open, the buttons and choices you make, the locations you look at and pick, the settings you change, and the offers and ads you see, through app analytics and statistics kept with your account.
• Purchases and revenue: your Premium purchases and subscription status from Google Play, and the revenue linked to your account from ads and purchases. We never receive your payment card details.
• Diagnostics: crash reports, performance data, errors and the app’s diagnostic log.
• Messages you send us: feedback, its attachments and the reply address you give.
• Consent records: the choices you make about our in-app notice, ads, analytics and notifications, and, in the EEA, the UK and Switzerland, whether you subscribed to Premium after declining ads, kept as proof with the time, your IP address and your account details.

Keeping your account when you reinstall. So that you keep the same account and device when you install Vantom VPN again on the same phone, the app stores a restore code with Google Play services on your phone (Block Store). The code stays on that phone and is not copied to your other devices or to a new phone; Android keeps it through a reinstall when Google backup is turned on. When the app is installed again, it uses the code once to sign you back in to the same account. We keep only a one-way hash of the code, for at most 400 days, and the links between your account, your devices and their security keys, including the link to a previous installation on the same phone; all of it is deleted with your account. A deleted account is never restored. We also use device identifiers to recognise your device and keep your account when you reinstall the app or clear its data.

How we use it. We use this data to:

• provide and operate the service: connect you, run your account, the free time and Premium, and answer your messages;
• keep the service and our users secure, and prevent fraud, abuse and misuse;
• run analytics: understand how the app is used and how it performs, measure revenue, and fix problems;
• test and improve our features, plans, prices and offers, including through A/B tests and experiments;
• personalise the app experience, ad placements and offers, including rewards and the plans and prices offered in your country;
• show ads in the free version;
• send you service notifications and, if you allow notifications, news and offers;
• keep billing and tax records, establish or defend legal claims, and answer legally binding requests.

Why we may use it (legal basis). We provide the VPN, your account, the free time and Premium to perform our contract with you. We rely on our legitimate interests to secure the service and prevent fraud and abuse, to run analytics, and to test, improve and personalise the service, its plans, prices, offers and ads; you may object, see section 12. In the EEA, the UK and Switzerland, Google Analytics for Firebase, personalised ads and sharing data with our advertising partners rely on your consent, which you can withdraw at any time with “Privacy choices” in the app’s Settings (see section 8). Our own app statistics and the information we keep with your account, analytics, fraud prevention, experiments and personalising the app experience rely, in every region, on our legitimate interests and on providing the service you asked for; you can object at any time by writing to us (see section 12) or, where the app offers it, with its personalisation setting. We keep billing records and answer legally binding requests to meet our legal obligations, and keep consent and billing records to establish or defend legal claims.

Advertising. The free version shows ads served by Google AdMob, which can run an auction with Meta Audience Network. Premium subscribers see no ads. These partners collect your device’s advertising ID, device information, your IP address (for an approximate location), your interactions with ads, and diagnostic and crash information about the ads software, for advertising, measurement and fraud prevention, under their own privacy policies; in US states with a privacy law, Meta’s Limited Data Use is turned on. Ad traffic never passes through the VPN tunnel. When you watch an optional ad for more free time or to use a Premium location for a while, Google confirms the reward to our service so that it can be credited once. In the EEA, the UK and Switzerland, before any ad is shown, Google’s consent tool (certified under the IAB Transparency & Consent Framework) asks for your consent to personalised advertising. The free version is funded by that advertising: if you do not consent, or later withdraw your consent, the app asks you to subscribe to Premium, which shows no ads and needs no consent, and the VPN stays off until you either subscribe or consent. You can change your choice at any time, as easily as you gave it, with “Privacy choices” in the app’s Settings.

Premium. Premium is an optional paid subscription sold through Google Play Billing, which processes the payment. Uninstalling the app or deleting your account does not cancel a Google Play subscription; cancel it in Google Play. Section 1.10 of our Terms applies.

Who receives it. We do not sell your data. Our service providers process it on our behalf under data processing terms: Google (Firebase sign-in, Analytics, Crashlytics and Cloud Messaging, Google Play, Google Fonts and Google Cloud) and our hosting and infrastructure providers (control servers, database, logs and VPN servers). Our advertising partners (Google AdMob and Meta Audience Network) receive the data described under “Advertising”. We disclose Vantom data to authorities only when a request is legally binding on GOLZAK UK LTD (for example a UK court order, or a foreign request made through a mutual legal assistance procedure recognised in the United Kingdom), or in an emergency involving a risk of death or serious injury. We check each request and may refuse or challenge one that is unlawful or too broad, and we can only disclose what we still hold, within the periods below. We cannot disclose the websites or apps you use, your DNS queries or the content of your traffic, because we do not record them. Where the law allows and we can reach you, we tell you before we disclose. Authorities can write to contact@golzak.com (subject “Law enforcement request”).

How long we keep it.

Where it is processed. Vantom data is processed in the country of the VPN server you choose, in Western Europe, where our main database is stored, in the United States, where Google and some of our providers are based, and in South Africa, where Google stores our copy of the app analytics. Our service runs on a global network, so each request is first handled in a data centre near you. Transfers rely on the safeguards in section 5 (UK and EU adequacy decisions, the EU-US Data Privacy Framework and its UK Extension where our providers hold it, and EU Standard Contractual Clauses with the UK Addendum otherwise).

Your rights. You have the rights described in sections 11 and 12, including access, correction, deletion, restriction, portability and objection, and you can complain to the UK Information Commissioner’s Office or, in the EU, to your local supervisory authority. To exercise them for Vantom VPN, write to privacy@golzak.com: from your linked Google account’s e-mail address, or, if you use the app anonymously, with your Vantom account ID and device identifier (both are shown in the app’s Settings). We may ask for further details to confirm the account is yours.

Deleting your account: in the app, open Account › Request account deletion and confirm (with Google, if you linked a Google account). Your account is deleted 7 days later, and you can cancel in the app until then. Deletion removes your account and the data linked to it from our systems, including your devices, keys, connection records, statistics, feedback and diagnostic logs and your Firebase sign-in, and keeps a deleted-account marker for 90 days. Billing records of any Premium purchase and your consent records are kept, as described above, and records that expire on their own are deleted on their schedule. The same screen offers “Email us instead”, which prepares an e-mail to privacy@golzak.com with the details we need; you can also write to that address yourself. We then delete your data within 30 days and confirm by e-mail. Our account deletion page gives the same steps.

Unused accounts: if an account has not been used for 2 years, we delete it automatically with the data linked to it in our service, except billing records and consent records. This automatic deletion does not yet remove the account’s Firebase sign-in record (which, for a linked Google account, holds its e-mail address, name and profile picture), which Google keeps as our processor.

What deletion cannot reach: crash reports and app analytics in Google Firebase are not linked to your account ID, so they cannot be deleted for one person; they expire on their own, as set out above. Logs and records that expire within days or months, and the free-time and reward usage records, are not deleted one by one but expire on their own.

↑ Back to contents

8. Advertising and analytics

We use Google Analytics, Google Tag Manager, Google Ads (conversion measurement and remarketing), Meta Pixel and Hotjar (Contentsquare SAS) on golzak.com, and Google AdMob and Meta Audience Network in the free versions of Blue Proxy and Proxynel, and Google AdMob (with Meta Audience Network bidding) in the free version of Vantom VPN. These partners may use cookies, device identifiers and similar technologies to collect information about your use of our services and other sites and apps, and to measure and personalise ads. Learn how Google uses information from sites or apps that use our services.

Where a service offers controls, you can opt out at any time:

• through our cookie banner on the website, the privacy settings in Blue Proxy and Proxynel, or “Privacy choices” in Vantom VPN’s Settings for its ads (see section 7). In Vantom VPN, “Privacy choices” in Settings stops its app analytics in the EEA, the UK and Switzerland; elsewhere the app has no analytics setting yet. You can reset or delete your advertising ID in your Android settings (Google › Ads); this removes that identifier from future events but does not stop them;
• Google: My Ad Center and the Google Analytics opt-out add-on;
• Meta: your Meta ad preferences;
• industry tools: NAI, DAA and Your Online Choices;
• on Android: Settings > Google > Ads, to delete or reset your advertising ID.

Hotjar records anonymised usage and heatmaps only after you accept analytics cookies; text typed in form fields is masked.

↑ Back to contents

9. Domain registration data

To register a domain we must pass the registrant’s details to the registrar and registry. Generic domains (.com, .net, etc.) are registered through eNom, LLC (Tucows group), an ICANN-accredited registrar, which acts as an independent controller for this data under ICANN’s Registration Data Policy. The data is sent to the registry, deposited with a data escrow agent designated by ICANN, and made available through WHOIS/RDAP services, where personal data of individuals is generally redacted; registrars disclose it to third parties with a legitimate interest according to ICANN rules. For .ma domains, the data is sent to the ANRT, which publishes it in the .ma WHOIS as provided by its naming decision.

↑ Back to contents

10. Fraud and abuse prevention

To protect our users, our networks and third parties, we use automated checks:

• Android key attestation, to detect modified apps;
• monitoring of proxy usage patterns, such as traffic volume and failed sign-ins, to detect abuse, spam and attacks;
• anti-bot protection by our security provider on our websites;
• payment fraud screening by our payment providers.

These checks may lead us to suspend an account. A member of our team reviews any suspension you contest. We do not make decisions with legal or similarly significant effects based solely on automated processing.

↑ Back to contents

11. US state privacy rights

If you live in a US state with a consumer privacy law (such as California):

• What we collect: the categories in sections 2 and 7: identifiers, commercial information, internet activity, approximate location and inferences for advertising.
• Selling and sharing: we do not sell personal information for money. Disclosing identifiers to advertising partners for cross-context behavioural advertising may count as “sharing” or “selling” under these laws.
• Your rights: you may opt out of this, and request access to, correction or deletion of your information, using the privacy settings in our apps, the cookie banner, or by writing to privacy@golzak.com. You may use an authorised agent.

Opt-out signals. Our website treats a Global Privacy Control (GPC) signal from your browser as a request to opt out of the sale or sharing of your personal information, and as a refusal of optional cookies for that browser. Because there is no common standard for “Do Not Track”, we do not respond to that signal. Use the Do Not Sell or Share My Personal Information options described here, or the privacy settings in our apps.

Appeals. If we decline your request, you may appeal by replying to our decision or writing to privacy@golzak.com with the subject “Privacy appeal”. We will respond within 45 days. If you are not satisfied, you may contact your state Attorney General.

We will not discriminate against you for exercising your rights. We do not knowingly sell or share data of persons under 16.

↑ Back to contents

12. Your rights

You may request access to, rectification or erasure of your data, and may object to its processing, including for direct marketing at any time and free of charge. Under the UK GDPR you may also request restriction of processing and data portability, and withdraw consent at any time. Write to privacy@golzak.com or to the postal address of the company concerned. We reply within one month, and may ask you to verify your identity.

You may lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) for Golzak UK, or with Morocco’s Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP, www.cndp.ma) for Golzak Morocco. Residents of the EU may also contact their local supervisory authority. The processing operations of Golzak Morocco are being declared to, and submitted for authorisation by, the CNDP in accordance with Law 09-08.

How we handle requests. To protect your data, we verify your identity before acting on a request, usually by asking you to write from the e-mail linked to your account or to confirm account details. An authorised agent may act for you with your signed permission, and we may ask you to confirm the request directly. We do not charge for requests unless they are manifestly unfounded or excessive.

↑ Back to contents

13. Cookies

golzak.com uses strictly necessary cookies (session, security, language and shopping cart), which do not need consent. It also uses analytics cookies (Google Analytics, via Google Tag Manager) and advertising cookies and pixels (Google Ads, Meta Pixel) to measure our audience and the performance of our campaigns. You can refuse optional cookies through the cookie banner, block them in your browser settings, or opt out at adssettings.google.com and in your Meta ad preferences.

↑ Back to contents

14. Security

We protect your data with encrypted connections (HTTPS/TLS), access restricted to authorised staff, individual accounts with strong passwords and two-factor authentication where available, logging, backups, and contracts with each provider that cover confidentiality and security. No system is completely secure. If a breach is likely to put your rights at risk, we will notify you and the competent authority as required by law.

↑ Back to contents

15. Children

Our services are intended for persons aged 18 or over. We do not knowingly collect data from minors, and we delete any such data once we become aware of it. We do not knowingly show personalised advertising to anyone under 16.

↑ Back to contents

16. Changes

We may update this policy. We will inform customers by e-mail or through the portal of any material change before it takes effect. Vantom VPN users, who may have no e-mail address with us, are told in the app before a material change takes effect. The effective date is shown at the top.

↑ Back to contents

17. Contact

Data protection contact for both companies: privacy@golzak.com.
GOLZAK UK LTD, 167-169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.
GOLZAK SARL AU, N°8 rue Omar Ibn Kaltoum, av. El Kattani, Agdal, bureaux 29, 5e étage, 30000 Fès, Morocco.

↑ Back to contents

See also our Terms of Service, Acceptable Use, Refund and .ma policies.