Privacy Policy

1. The controller

The data controller is UK Health Care Support Ltd, a company registered in England and Wales under company number 15042717, registered office Office 4648, 58 Peregrine Road, Ilford, England, IG6 3SZ. Hosting & Domains is a trading name of UK Health Care Support Ltd.

Anything to do with your personal data, the rights in section 7 included, should go to info@hosting-n-domains.com with “Data protection” in the subject line.

We are established in the United Kingdom and sell worldwide, so this notice is written to satisfy the UK GDPR and the EU GDPR alike.

2. The data we process

• Account and billing details — your name, email address, billing address and every invoice raised on the account.
• Payment details — handled by Stripe. All that reaches us is a payment token and the last four digits of the card; the full number and the security code never touch our systems.
• Support correspondence — tickets, emails and whatever you choose to put into them.
• Domain registrant details — the contact details a registry insists on before it will put a name in your name.
• Technical logs — IP addresses, request data and error logs thrown off as you use the platform.
• Your site's content — the files, databases and mailboxes held on our hosting. We do not look inside them, other than when you ask us to for support, or when a specific abuse or security report requires it.

3. Purposes and lawful bases

Data protection law demands a lawful basis for every purpose we process for. Ours are listed in full below rather than summarised, so each can be judged on its own merits.

Personal data is never sold here, and none of it is fed into the training of machine-learning systems.

4. Cookies and measurement

A handful of necessary cookies keep the site working — the currency your prices show in, and the note of your cookie choice so the banner stops asking. Those require no consent.

Everything else waits on your agreement. Our analytics is aggregate and cookieless, and it loads only when you accept the analytics category in the banner. Decline and no analytics code is fetched at all. Clearing the consent cookie resets your decision whenever you want. No third-party advertising trackers run on this site. Our cookie policy carries the detail.

5. Who else processes your data

The list is kept short. Each party below either acts on our instructions under contract or is a controller in its own right where the service demands it — a registry, for instance, holds registrant records on its own account.

Disclosure may also happen where the law compels it, or where we need to bring or defend a legal claim.

6. Sending data outside the UK and EEA

Several of the providers above sit outside the UK and the European Economic Area, so your data can leave those territories. Every transfer of that kind is covered by an appropriate safeguard — a UK adequacy decision for the destination country, the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses.

The hosting account, and everything sitting on it, lives in a London datacentre. Email info@hosting-n-domains.com and we will say which safeguard covers any particular transfer.

7. Your rights over your data

Those are the rights that belong to you over your own data. To use one, email info@hosting-n-domains.com. We reply within one month, and no fee is charged.

• Access — Obtain a copy of the personal data we hold on you.
• Rectification — Correct anything held about you that is wrong or incomplete.
• Erasure — Erase what is held, wherever no obligation compels us to retain it.
• Restriction — Halt the processing while a question of accuracy or legitimacy is resolved.
• Portability — Carry away whatever you gave us in a structured, machine-readable form.
• Objection — Object to processing we run on the legitimate-interests basis.
• Withdraw consent — Take your consent back whenever you wish; what was processed beforehand stays lawful.

We may need to confirm your identity before acting on a request, so that nobody else walks off with your data.

Unhappy with how we have handled your data? You may complain to the UK's Information Commissioner's Office at ico.org.uk. Within the EU it is the supervisory authority in your own country that takes it. A chance to put matters right first would be welcome, though nothing obliges you to approach us before going to a regulator.

8. Retention periods

• Account and billing records — kept while the account is open, and then for six years after your last transaction, which is the period UK tax law sets.
• Support tickets — three years past closure, so the history is to hand if the same fault returns.
• Server and access logs — usually 30 to 90 days; kept longer only where a log belongs to a live security or abuse investigation.
• Your hosted content — for as long as the service runs, then briefly in copies after cancellation, after which it goes the same way as the account.
• Marketing consent records — until you withdraw consent, plus a note of the withdrawal itself so that it can be honoured.

9. Names and public WHOIS

Registering a name means passing your contact details to the registry. Where a registry allows it, we switch on free WHOIS privacy so your personal details stay out of public lookups. Some endings — country-code ones especially — do not allow it, and your details can then sit on a public record. If that matters to you, ask us before you register.

10. Children

Our services are not aimed at children, and we do not knowingly collect data from anybody under 16. Tell us if you think a child has given us personal data and we will delete it.

11. Changes to this notice

Should a change materially alter how your data is handled, word reaches you by email or through the client area before it takes effect. The date printed at the top of this page marks the current version. Send questions to info@hosting-n-domains.com.