This Privacy Policy explains how Hostingoor ("we", "us") collects and uses personal data when you visit www.hostingoor.com, create an account or use our Services. We are the controller of this data under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number].
Contact for data protection questions: [email protected], or by post to Hostingoor, [Registered office address].
1. The data we collect
- Account and contact data: name, company name, email address, telephone number, postal address, country, VAT or tax number.
- Domain registrant data: the contact details registries require for each domain you register.
- Billing data: invoices, payments, refunds, credit balance. Card payments are handled by our payment providers; we do not store full card numbers.
- Technical data: IP address, browser and device type, sign-in times, security events and server logs.
- Support data: tickets, emails and the files you send us.
- Service data: configuration and usage of your hosting, email and domains (disk and bandwidth use, DNS records and similar).
The content you store on our servers (websites, databases, mailboxes) is processed on your behalf as described in our Data Processing Agreement; for that content you are the controller.
2. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Creating your account and providing the Services you order | Contract |
| Registering and renewing domain names with registries and registrars | Contract |
| Invoicing, taking payments, keeping accounting records | Contract; legal obligation (tax and company law) |
| Preventing fraud and abuse, securing our network, keeping logs | Legitimate interests |
| Answering support requests and complaints | Contract; legitimate interests |
| Service messages (renewals, security alerts, maintenance) | Contract; legitimate interests |
| Marketing emails about our own similar services | Consent or the "soft opt-in" under PECR; you can opt out at any time |
| Responding to lawful requests from authorities | Legal obligation |
3. Who we share it with
We never sell your personal data. We share it only where needed to provide the Services or where the law requires:
- domain registries and registrars (for example Nominet for .uk domains, and ICANN-accredited registrars for generic domains), who may publish some registrant data in WHOIS/RDAP as their rules require;
- payment providers that process your payments;
- data centre, software, email delivery and backup providers acting as our processors;
- certificate authorities when you order an SSL certificate;
- Google or Microsoft when you order Google Workspace or Microsoft 365;
- professional advisers, and law enforcement or regulators where the law requires us to.
4. International transfers
Some providers process data outside the UK. When they do, we make sure the transfer is protected, for example by UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
5. How long we keep it
- Account data: while your account is open and for up to 6 years after it closes, in case of claims.
- Invoices and accounting records: 6 years from the end of the financial year, as required by UK tax law.
- Server and security logs: normally up to 12 months.
- Support tickets: up to 3 years after they are closed.
- Backups of hosted content: overwritten on a rolling basis, normally within 30 days.
6. Your rights
Under UK data protection law you have the right to access your data, to have it corrected, to have it erased, to restrict or object to its use, to data portability, and to withdraw consent at any time where we rely on consent. You can also object at any time to direct marketing. To use your rights, email [email protected]. We reply within one month and do not normally charge a fee.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113.
7. Security
We protect personal data with encrypted connections (HTTPS), encrypted storage of secrets, two-factor authentication for staff, access controls, monitoring and regular updates. No system is completely secure; if a breach affects you in a way that is likely to result in a high risk to your rights, we will tell you without undue delay.
8. Cookies
We use cookies that are needed for the website to work. See our Cookie Policy.
9. Children
Our Services are not intended for anyone under 18 and we do not knowingly collect their data.
10. Changes
We update this policy when our processing changes. The date at the top shows when it was last updated; we tell account holders about significant changes by email.