Legal

Privacy policy

Last updated: 16 May 2026

1. Introduction

Hosti ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you use our website at hosti.co.uk and our hosting services. It also explains your rights under UK data protection law, including the UK GDPR.

2. Who we are

Hosti is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us by submitting a support ticket at hosti.co.uk/support/ticket.

3. What data we collect

We collect the following categories of personal data: Account and billing information: your name, email address, billing address, and payment details when you register for an account or purchase a service. Technical data: IP address, browser type, device information, and usage data collected automatically when you visit our website. Communications: any messages, support tickets, or correspondence you send to us. Cookies: data collected via cookies and similar tracking technologies as described in our Cookie Policy.

4. How we use your data

We use your personal data to: (a) provide and manage your hosting services; (b) process payments and send billing communications; (c) respond to support requests; (d) send service notifications and important account updates; (e) comply with our legal obligations; (f) improve our website and services through aggregated analytics. We will only send you marketing communications if you have opted in to receive them. You can unsubscribe at any time.

5. Legal basis for processing

We process your personal data on the following legal bases: (a) contract — processing necessary to provide the services you have purchased; (b) legal obligation — processing required to comply with applicable laws; (c) legitimate interests — processing for fraud prevention, security, and service improvement; (d) consent — where you have given us explicit consent, such as for marketing emails.

6. Data retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter in accordance with our legal obligations. Billing records are retained for seven years in line with HMRC requirements. You may request deletion of your data at any time — see Section 9 for your rights.

7. Sharing your data

We do not sell your personal data. We may share your data with: (a) payment processors to handle transactions securely; (b) our hosting infrastructure provider to deliver services; (c) domain registries when you register a domain name; (d) legal or regulatory authorities where required by law. All third parties who process data on our behalf are subject to data processing agreements and are required to handle your data securely.

8. International transfers

Where your data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including standard contractual clauses where applicable.

9. Your rights

Under UK data protection law you have the right to: (a) access the personal data we hold about you; (b) correct inaccurate or incomplete data; (c) request deletion of your data in certain circumstances; (d) restrict or object to our processing of your data; (e) data portability — receive your data in a structured, machine-readable format; (f) withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us by submitting a support ticket at hosti.co.uk/support/ticket. We will respond within one calendar month.

10. Cookies

We use cookies to operate our website, remember your preferences, and understand how visitors use our site. For full details of the cookies we use and how to manage them, please see our Cookie Policy at hosti.co.uk/cookies.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our hosting infrastructure is housed in Tier 3 UK data centres with 24/7 monitoring. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

12. Children

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page indicates when the policy was last updated.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the opportunity to address your concerns directly — please contact us first.

15. Contact

For any questions about this Privacy Policy or to exercise your data rights, please contact us by submitting a support ticket at hosti.co.uk/support/ticket.