Angstep

Great software should be fairly priced

Legal

Privacy Policy

We keep it simple: your data stays in the EU, we collect only what we need, and you can ask us to delete it at any time. This page explains the detail behind that commitment.

The most up to date version of our Privacy Policy can be downloaded in PDF format HERE

If you use our Netmon product you should sign and send us a copy of the DPA that can be found in PDF format Here

Who we are

NetMon is a network monitoring and remote access platform built for Managed Service Providers. It is operated by Angstep Ltd, a company registered in England and Wales (company number 17358935), with its registered office at Applegarth, Groes Lwyd, Abergele, Conwy, LL22 7SU.

References to "we", "us" or "Angstep" in this policy refer to Angstep Ltd, the data controller responsible for your information. We are registered with the Information Commissioner's Office under reference ZC183626. Our contact details are at the bottom of this page.

What data we collect

We collect the minimum data required to operate the platform:

DataHow collectedWhy
Email address Google OAuth sign-in Account identification and transactional email
Google display name Google OAuth profile (first sign-in only) Pre-fill your organisation name
IP addresses Logged automatically on security events Detecting unauthorised access attempts
Network and device data Deployed monitoring agent Providing the monitoring and security scanning service
Consent records Recorded when you accept our terms or change your marketing preference Evidence of what you agreed to, when, and from where
Product usage statistics Derived from your account — device counts, sites, features used Understanding how organisations use NetMon, and identifying who may benefit from a different plan

We do not collect payment card data directly — payments are handled by Stripe, who operate under their own privacy policy.

Legal basis for processing

We process your personal data on the following legal bases:

  • Contract performance — account data necessary to provide the service you've signed up for, including alerts telling you when a device on your network goes offline.
  • Legitimate interests — security event logging to protect the platform and other users from unauthorised access; and business-to-business analysis of how organisations use NetMon, so we can tell which customers may benefit from a different plan.
  • Consent — marketing emails only. This is optional, separate from accepting our terms, and nothing about your service depends on it.
  • Legal obligation — retention of financial records, and responding to data subject requests.

Marketing and your CRM record

We use HubSpot as our customer relationship management system. Two different things are sent there, and they are treated differently:

  • Business information about your organisation — company name, plan, number of devices and sites, and whether you have reached a plan limit. This is business data rather than personal data, and is processed under legitimate interests for business-to-business account management. It is sent for all organisations.
  • Your personal contact details — name and email address. These are sent only if you have given explicit marketing consent, and are deleted from HubSpot if you withdraw it.

You can give or withdraw marketing consent at any time from the Account page in NetMon. Withdrawal takes effect on the next daily synchronisation, and does not affect your service in any way.

Where your data is stored

All personal data is stored on servers located in Falkenstein, Germany (EU), operated by Hetzner Online GmbH. The exceptions are the OAuth exchange with Google, payment processing by Stripe, and our HubSpot CRM — each covered by Standard Contractual Clauses and the UK International Data Transfer Agreement. Our HubSpot account is hosted in the EU.

How long we keep it

We retain account data for as long as your account is active, plus 30 days after cancellation to allow for data export requests. Security event logs are kept for 90 days. Financial records are kept for 7 years as required by law.

Consent records are retained for the lifetime of your account plus 7 years. This is deliberate: if you ask us to prove what you agreed to and when, we must be able to show it.

Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your data ("right to be forgotten").
  • Portability — receive your data in a machine-readable format.
  • Restriction — ask us to limit how we use your data.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — where we rely on consent (marketing emails), you may withdraw it at any time from your Account page, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at supportteam@angstep.co.uk. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Our registration number is ZC183626.

Cookies

The NetMon platform uses a single, strictly necessary session cookie (netmon_session) for authentication. We do not use analytics cookies, advertising cookies, or any third-party tracking.

This website (angstep.co.uk) does not set any cookies.

Contact

For privacy-related queries or to exercise your rights, contact us at supportteam@angstep.co.uk.

Last updated: July 2026. Governing law: England and Wales.