GDPR and Your Data Rights

What this page adds

The privacy policy says what gets kept and the reasons for it. What you have here is the method for making us act on that. Go there for the substance, and come back here to lodge a request.

1. Two sorts of data, and two separate answers

• Data held about you, the customer. Your account, your invoices, your tickets and any domains registered in your name. What happens to that is decided by us, so a request comes here and we are the ones who answer.
• Data sitting inside a site you host. Your members, your orders, your subscribers. That data sits on our servers because you put it there, and what happens to it is your call. Anyone who writes to us about their record on your website gets sent back to you.

2. Rights open to you here

• See it — everything on file that amounts to your personal data comes over to you.
• Fix it — anything wrong gets corrected.
• Delete it — unless something outranks what you have asked for. Invoices normally do, since tax law wants six years of them, and a legal duty wins over a preference.
• Pause it — processing pauses until an argument over accuracy has been settled.
• Take it with you — whatever data you handed over, supplied in machine-readable form, wherever we keep it on consent or in order to perform a contract.
• Object — against anything we run on legitimate interests. Object to marketing and it simply halts, with no balancing exercise involved.
• Withdraw consent — at any moment you choose, wherever consent was the basis for it. Nothing done beforehand becomes unlawful as a result.

3. How to ask

Write "Data request" on the subject line, then send to info@hosting-cheap.com, or go through the contact page. No form exists for this, and quoting the legislation is not required of you. One plain sentence counts as a valid request, and that is how we treat it.

Say what you want, name the account or email address it concerns, and where possible narrow it down to one system or one span of time. Narrowing is optional. Do it, though, and the answer coming back tends to be far more useful than the one you get by asking for everything.

4. Confirming that you are you

Passing an account's data to whoever happens to email about it would itself be a breach, so identity gets confirmed before anything moves. Mail arriving from the address on the account usually settles that. Where the account has closed, or the request comes on somebody else's behalf, we ask for one further check and tell you why.

Identity documents get requested only where nothing lighter would work, and they are deleted the moment that check is finished.

5. How long

One calendar month, counted from the point where we can identify you. A genuinely complicated request, or a repeated one, may run up to two months beyond that, and should it happen you learn the reason inside the first month rather than at the tail end.

Nothing is charged for this. A fee is permitted by law where a request is plainly unfounded or excessive, but we would sooner set out our reasons for calling a request excessive than post you an invoice.

6. Refusals, and why they happen

Part of a request is sometimes refused: a deletion that would wipe out records we are obliged to keep, or an access request that would pass you somebody else's data alongside your own. Where that happens, you are told the reason, which exemption we lean on, and the route for pushing back. Silence is not what you get.

7. Complaining

Start with us through the complaints procedure — that route runs quicker, and there is every chance we simply got it wrong. Nothing obliges you to, mind, and heading straight to the regulator costs you nothing.

For England and Walesthat means the Information Commissioner's Office, found at ico.org.uk, which takes complaints straight from members of the public.

8. Who holds the data

Bohzo Ltd, a company registered in England and Wales under Company No. 15031604, which trades as Hosting-Cheap. Registered office: The Workspace Basildon, 7 High Pavement, Basildon, England, SS14 1EA. Requests to info@hosting-cheap.com.