GDPR Compliance Statement

APM Internet Ltd (trading as The Very Good Email Company) is committed to protecting the personal data of our customers, partners and website visitors, and to complying fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

As a company whose core business is email — one of the most personal forms of communication — we have always taken data security and privacy extremely seriously. This page summarises our approach to GDPR compliance.

Our Role

Depending on the context, The Very Good Email Company acts as either a Data Controller (for example, when we collect and manage your contact and billing information) or a Data Processor (for example, when we handle email data on behalf of our customers through services such as MailCore Pro and MessageBunker).

We take both responsibilities seriously and have put appropriate measures in place for each.

What Data We Collect and Why

We collect only the personal data we need to provide our services and support our customers. The lawful bases on which we process personal data include:

  • Contract performance — to set up and manage your account and deliver the services you have ordered
  • Legitimate interests — to manage our business operations, prevent fraud, and maintain the security of our systems
  • Legal obligation — to comply with applicable law, including financial and tax regulations
  • Consent — for optional communications such as marketing emails, where you have specifically opted in

Full details of what we collect and how we use it are set out in our Privacy Policy.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • The right to access the data we hold about you
  • The right to rectification if your data is inaccurate or incomplete
  • The right to erasure (“the right to be forgotten”) in certain circumstances
  • The right to restrict how we process your data
  • The right to data portability
  • The right to object to processing based on legitimate interests
  • The right to withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at privacy@verygoodemail.com. We will respond within 30 days.

Data Storage and Security

All personal data is stored and processed exclusively within the United Kingdom. Our servers are hosted at a Tier 4 UK data centre (Pulsant, Milton Keynes), which holds ISO 27001 and PCI Level 1 accreditation. Full details of our hosting environment are set out in our Privacy Policy.

We do not transfer personal data outside the UK.

Our Ongoing Compliance Efforts

Assessment
We continually review how we collect, use, store and dispose of personal data, updating our policies, procedures and documentation as needed. We also assess the services we provide — including MessageBunker — to ensure they support our customers’ own GDPR obligations.

Contractual Commitments
We review and update our contracts and data processing agreements on an ongoing basis to reflect the requirements of UK GDPR. Customers who require a formal Data Processing Agreement (DPA) should contact us.

Employee Awareness and Responsibility
All staff are trained on their obligations under UK GDPR with regard to data protection, security and privacy. All employees and data centres are based in the UK.

Data Retention
We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. Customers may request details of our retention periods by contacting us.

Complaints

If you have a concern about how we handle your personal data, please contact us in the first instance at privacy@verygoodemail.com and we will do our best to resolve it.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) — the UK’s data protection supervisory authority — at ico.org.uk or by calling 0303 123 1113.

This statement was last reviewed in April 2026. The Very Good Email Company is a trading style of APM Internet Limited, registered in England and Wales (No. 04601087).

Scroll to Top