How we use personal information to run our website, customer accounts and services, and how you can exercise your rights.
1. Controller and contact
UAPEER HOSTING SOLUTIONS LIMITED, company 11259161, controls account, billing, support and website administration information. Our registered office is International House, 10 Churchill Way, Cardiff, Wales, CF10 2HE, United Kingdom. Send privacy requests or complaints through the client area or our email contact, marked “Privacy”.
2. Information we handle
- Contact, billing and business details you provide, selected services, orders and related correspondence.
- Invoices, transaction references, payment status and records needed to reconcile payments. External payment services handle their checkout information under their notices.
- Support messages, attachments, abuse reports and information needed to investigate incidents.
- Technical records: IP address, requested URL, time, browser information, response status and relevant security or resource-usage logs.
Provide only what a request needs. Do not send passwords, full card details or sensitive documents through ordinary email.
3. Purposes and lawful bases
Account, order and support data lets us take steps you request before a contract and perform it. Relevant records meet legal obligations such as accounting requirements or binding lawful requests.
Our legitimate interests include network security, fraud and abuse prevention, troubleshooting, service quality and resolving disputes. We balance these against your rights. Where consent is needed for an optional purpose, we ask separately; you may withdraw it. Service and security notices are distinct from optional marketing.
4. Cookies and this website
This public website does not set analytics or advertising cookies or use third-party tracking scripts. Language is selected through the URL. Fonts and assets are served locally; the cached plan catalogue contains no customer account information.
The separate client area at my.uapeer.eu uses session and security mechanisms needed for sign-in and ordering. Payment providers and other sites you choose to visit have their own notices. Future optional tracking here would require an updated notice and the choices required by law.
5. Sharing and international processing
Information needed for a service may be shared with infrastructure and network providers, billing and communications suppliers, payment processors, domain registrars and certificate authorities. Advisers and public authorities may receive information where necessary and lawful. Domain or certificate registration can require disclosures under the relevant authority’s rules.
Advertised hosting locations are in the UK. A third-party service or authorised support activity can involve processing elsewhere; UK hosting does not mean every account or transaction record stays in the UK. A restricted international transfer requires an applicable adequacy decision, appropriate contractual safeguards with the required assessment, or another lawful exception. Ask us for the countries, recipients and safeguards relevant to your service and how to obtain a copy.
6. Retention and protection
Information is kept only as long as its purpose requires. Account and support records follow the customer relationship and necessary dispute period; invoices follow accounting and tax requirements; security logs follow operational and incident-investigation needs. A legal hold can require longer retention. Where no fixed period applies, we consider record type, contractual duties, legal time limits and the risk of keeping it. Ask us about the period for your records.
Access is limited to people who need it for their work, with proportionate technical and organisational safeguards. Absolute security cannot be guaranteed. Backups may persist for their rotation cycle after live deletion and are not ordinary active records.
7. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or a portable copy and withdraw consent without affecting earlier lawful processing. Some records must be kept despite a deletion request.
You may object to processing based on legitimate interests, and to direct marketing at any time. Use the contact routes above. Identity is verified only where reasonably needed. We respond within the applicable legal time limit, normally one month, explaining any lawful extension or pause.
This public website does not make solely automated decisions with legal or similarly significant effects about you.
8. Privacy complaints
Explain what happened, the information involved and your desired outcome. We acknowledge a data protection complaint within 30 days, investigate appropriately and communicate the outcome without undue delay. You can also complain to the Information Commissioner’s Office or another competent authority. Your rights do not depend on accepting a commercial settlement.
9. Hosted data and updates
For personal data you host about others, you normally determine its purposes and remain responsible for notices, lawful collection and instructions. Our processor role and any necessary data processing agreement must be addressed for your service. Ask about processor terms and subprocessors before uploading data requiring additional arrangements. Requests about a customer’s website should normally go to its operator first.
We update this notice when practices or legal requirements change and bring material changes to your attention where required. The date above identifies this version.