Terms of Service

Last updated:

In short: ViviMail is business email hosting for companies and sole traders, provided by Viviron Ltd. You pay a monthly price per company, can cancel at any time, and keep ownership of your email. Don't use ViviMail to send spam or break the law. Where we handle your mailbox contents we act as your data processor under the agreement in Schedule 1.

1. About these terms

These terms are a contract between you and Viviron Ltd, a company registered in England and Wales (company number 16534437) whose registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ ("Viviron", "we", "us"). ViviMail is a service of Viviron.

"You" means the business, organisation or sole trader that uses ViviMail, and the person who accepts these terms on its behalf. By creating an account or using ViviMail you confirm that you have authority to accept these terms for that business.

ViviMail is for business use only. It is not offered to consumers. If you use ViviMail as part of a separate agreement with Viviron (for example where ViviMail is included in your Viviron service), that agreement takes priority where it differs from these terms.

2. The service

ViviMail provides email hosting on your own domain: mailboxes, webmail, access from email apps (IMAP and SMTP), spam and virus filtering, a dashboard to manage domains, mailboxes and your team, and related features we add from time to time.

To use your own domain you must own it or have permission to use it, and you must add the DNS records shown in your dashboard.

3. Your account and security

4. Plans, prices and the introductory offer

Prices are per organisation per month and are shown on our pricing section and in your dashboard. Starter includes up to 15 mailboxes and 30 GB of storage, Business up to 30 mailboxes and 50 GB, and Pro up to 50 mailboxes and 100 GB. Storage is shared by your organisation and you decide how much each mailbox gets. Aliases (extra addresses such as sales@ that deliver to your mailboxes) do not count towards the mailbox limit; up to 1,000 are included.

Viviron Ltd is not currently registered for VAT, so no VAT is charged. If we become VAT registered, VAT will be added to prices at the applicable rate and we will tell you before it applies.

Introductory offers

Sending limits

To protect all customers from spam, each mailbox can send to a limited number of recipients per day. New paying organisations have a lower limit (100 recipients per mailbox per day) for their first 30 days; after that the limit for your plan applies (currently 500). Messages over the limit are refused, not lost.

5. Payment

6. Changing plan and cancelling

7. Acceptable use

You must not use ViviMail, or allow anyone else to use it, to:

If you break these rules we may suspend the affected mailboxes or your organisation, as described in section 11. Report abuse to abuse@vivimail.co.uk.

8. Your data

9. Support and access to your account

To provide support, keep the service secure and meet legal obligations, authorised Viviron staff can access your organisation's account, including mailbox contents, where this is necessary: for example to resolve a problem you report, investigate abuse, spam or a security incident, or comply with a court order or other legal requirement. Access is limited to authorised staff, requires a recorded reason and is logged. We do not access your mailboxes for any other purpose, and we do not sell or use your email content for advertising.

10. Availability and backups

We work to keep ViviMail available and secure at all times, but we do not guarantee uninterrupted service. We may carry out maintenance, which we try to do at quiet times and announce in advance where it could affect you.

We take reasonable steps to protect your data, but you remain responsible for keeping your own copies of email that is important to you. Any email app can keep a copy of your mailboxes.

11. Suspension and termination

We may suspend all or part of the service, with notice where reasonably possible, if: payment is overdue; you break these terms (including acceptable use); your account is being used to send spam or is compromised; or we must do so by law. We will restore it once the issue is resolved.

We may end these terms with 30 days' notice, or immediately if you seriously or repeatedly break them. You may end them at any time by cancelling your plan.

12. Liability

13. Changes to the service or these terms

We may improve or change ViviMail. If we make a change to these terms or our prices that materially affects you, we will give you at least 30 days' notice by email or in your dashboard. If you do not agree, you can cancel before the change takes effect.

14. General

Schedule 1: Data processing agreement

This schedule applies where we process personal data contained in Customer Data on your behalf. It forms part of the terms and is intended to meet Article 28 of the UK GDPR.

1. Roles and details of processing

ControllerYou (the customer)
ProcessorViviron Ltd
Subject matter and purposeHosting, filtering, storing, sending and receiving email and related data so that we can provide ViviMail
DurationThe term of your plan, plus up to 90 days afterwards (see section 8 of the terms)
Types of personal dataAnything contained in emails and attachments, including names, email addresses and message content; this may include special category data if you or your correspondents send it
Data subjectsYour staff and users, and anyone who sends email to or receives email from your mailboxes

2. Our obligations

We will:

  1. process Customer Data only on your documented instructions, which are these terms and your use and configuration of ViviMail, unless the law requires otherwise (in which case we will tell you, unless the law prevents it);
  2. ensure that people authorised to process Customer Data are bound by confidentiality;
  3. apply appropriate technical and organisational security measures, including encryption in transit, two-step verification for all accounts, access controls with logging, and the measures described in our data protection page;
  4. use only the sub-processors listed on our data protection page, which you authorise generally; we will give you at least 30 days' notice of any new sub-processor so you can object, and we will impose equivalent data protection obligations on each sub-processor and remain responsible for them;
  5. help you, taking into account the nature of the processing, to respond to requests from data subjects and to meet your obligations on security, breach notification, data protection impact assessments and prior consultation;
  6. notify you without undue delay, and in any case within 48 hours, after becoming aware of a personal data breach affecting Customer Data, with the information you reasonably need;
  7. at the end of the service, delete Customer Data after the 90-day export period, unless the law requires us to keep it;
  8. make available the information reasonably needed to demonstrate compliance with this schedule, and allow audits by you or an auditor you appoint on reasonable notice, at your cost, no more than once a year unless required following a breach or by a regulator.

3. International transfers

Customer Data is stored in the United Kingdom. Where a sub-processor processes personal data outside the UK, we ensure an adequate safeguard applies, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.