How we protect your personal information

1. Who we are

Web Hosting Cymru is the data controller responsible for your personal data.

Business name: Web Hosting Cymru
Registered address: 15 Neptune Court, Vanguard Way, Cardiff Bay, CF24 5PJ
Email: info@webhostingcymru.co.uk

2. The role we play (important for hosting services)

When providing hosting services, we may act as both:

• Data Controller - for your account, billing, and communication data
• Data Processor - for any data you store, upload or manage on your website, emails or systems hosted with us

You remain responsible for ensuring that any data you host complies with applicable data protection laws.

3. Information we collect

• Name, business name and contact details
• Email address and telephone number
• Billing and payment information
• Account and service usage data
• Support requests and communications
• Technical data (IP address, login activity, browser type)

4. How we use your information

• To provide and manage hosting and related services
• To manage billing and accounts
• To respond to support enquiries
• To maintain system security and prevent abuse
• To improve services and performance

5. Legal basis for processing

We rely on the following legal bases:

• Contract: to deliver services you purchase
• Legal obligation: accounting and compliance requirements
• Legitimate interests: security, fraud prevention and service improvement
• Consent: where applicable (e.g. marketing)

6. Hosting and stored data

As part of our services, we may store website files, databases, emails and backups on your behalf. We do not access or use this data except where necessary to provide technical support, maintain systems, or where required by law.

7. Sharing your data

We may share your data with trusted third parties where required to provide services, including:

• Payment processors
• Domain registrars
• Infrastructure and hosting providers
• Email and support systems

We do not sell your personal data.

8. International data transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

9. Data security

We implement appropriate security measures including encryption, access controls, monitoring and system protections to safeguard your data.

10. Data retention

• Account and billing records: up to 6 years (legal requirement)
• Support communications: as necessary for service history
• Technical logs: retained for security and monitoring purposes

11. Your rights

You have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Request data portability

12. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK’s data protection regulator.

13. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

14. Third-party links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

15. Contact us

For any privacy-related queries, contact us at:
info@webhostingcymru.co.uk

Last updated: April 2026