This Privacy Policy explains how UKNode Ltd ("UKNode", "we", "us") collects, uses, shares and protects personal data when you visit our website, open an account, or use our hosting and related services. It should be read alongside our Terms & Conditions and Acceptable Use Policy.
UKNode Ltd is a company registered in England and Wales (company number 15880458), with its registered office at 124 City Road, London, EC1V 2NX. For the purposes of the UK GDPR and the Data Protection Act 2018, UKNode is the data controller for personal data we hold about our customers and website visitors. In respect of content you store on our infrastructure, you are the data controller and UKNode acts as a data processor.
1. Personal data we collect
We collect only the data we need to provide, bill and support your services:
- Account data — name, email address, postal address, telephone number, company name and any details you provide when registering or contacting us.
- Billing data — billing address, VAT number where applicable, and payment records. Card details are processed by our PCI-DSS-compliant payment providers and are not stored on our systems.
- Service data — the services you order, configuration choices, support tickets and correspondence with our team.
- Technical data — IP address, browser and device information, and server/access logs generated when you use the website or your services.
- Verification data — identity or charity-status documentation where you apply for services that require it.
2. How we use your data and our lawful bases
We process personal data under the following lawful bases in the UK GDPR:
- Performance of a contract — to create and manage your account, provision and operate services, take payment and provide support.
- Legitimate interests — to secure our network and prevent abuse and fraud, to maintain service logs, and to communicate with you about your services. We balance these interests against your rights.
- Legal obligation — to keep accounting and tax records and to respond to lawful requests from authorities.
- Consent — for optional marketing communications, which you may withdraw at any time.
3. Marketing communications
We will only send marketing email where you have opted in or where permitted for existing customers in relation to similar services. Every marketing message includes an unsubscribe link, and you can opt out at any time by contacting us. Service, billing and security notices are operational and are not marketing — you cannot opt out of those while you hold an active account.
4. Sharing your data
We do not sell your personal data. We share it only where necessary: with payment providers to take payment; with domain registries and registrars where you register a domain; with suppliers who help us operate the business (such as email delivery) under appropriate contractual safeguards; and with authorities where we are legally required to do so. Where any processor is located outside the UK, we put in place appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
5. Where your data is stored
Our infrastructure is operated from a Tier III data centre in Manchester, United Kingdom, and customer data is stored primarily in the UK. We apply appropriate technical and organisational measures — including access controls, encryption in transit and network security — to protect personal data, though no system can guarantee absolute security.
6. How long we keep it
We retain personal data only for as long as necessary. Account and service data is kept for the life of your account and then deleted within a reasonable period after closure, subject to the data-retention provisions in our Terms & Conditions. Billing and accounting records are retained for at least six years to meet UK statutory obligations. Server and security logs are retained for a limited period proportionate to their security purpose.
7. Your rights
Under the UK GDPR you have the right to be informed, and the rights of access, rectification, erasure, restriction, data portability and objection, as well as rights relating to automated decision-making. We do not carry out automated decision-making that produces legal or similarly significant effects. To exercise any right, contact us using the details below; we will respond within one month, and we do not charge a fee except where a request is manifestly unfounded or excessive.
8. Cookies
Our website uses only the cookies necessary for it to function and to keep your session secure. We do not use advertising or third-party tracking cookies. You can control or block cookies in your browser settings, though some parts of the site may not work correctly without them.
9. Complaints
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always published on this page with the "Last updated" date shown above. Material changes will be notified by email or via your control panel.
11. Contact
For any privacy matter, or to exercise your rights, contact UKNode Ltd, 124 City Road, London, EC1V 2NX, or email [email protected].