This policy explains what personal information we collect, how we use it, and the rights you have over it.
1. Who we are
Korhost is run by Michael Callachan, a sole trader trading as 28TEN Media and Korhost, of Salters Lane, Trimdon Grange, TS29 6ES, United Kingdom. We are not registered for VAT.
We're the "controller" of the personal information described in this policy, which means we decide how it's used. If you have any questions about this policy or your information, email contact@korhost.co.uk.
2. Information we collect
- Account details: your name, email address, phone number, postal address and company name, if you give one.
- Order and billing details: the products you buy, your billing history and payment records. Card details are handled by our payment provider and aren't stored by us.
- Domain registrant details: the contact details registries require when you register a domain.
- Support messages: anything you tell us when you contact us.
- Technical information: such as IP addresses and log data created when you use our control panel and Services.
We don't access the content of your website or emails, except where it's necessary to provide support you've asked for, to deal with security issues or abuse, or where the law requires it.
3. How we use it and why
| What we use it for | Lawful basis |
|---|---|
| Setting up and providing your Services, including registering domains | Performing our contract with you |
| Taking payments, sending invoices and renewal reminders | Performing our contract with you |
| Answering support requests and complaints | Performing our contract / legitimate interests |
| Keeping our Services secure and preventing fraud and abuse | Legitimate interests |
| Keeping financial and tax records | Legal obligation |
| Sending news and offers about our products | Consent, or legitimate interests for existing customers (you can opt out at any time) |
4. Who we share it with
We only share your information where it's needed to provide our Services or where the law requires it:
- Our UK data centre and server provider, which runs the servers, control panel and shop we use to provide our Services, under a contract that only allows it to use your information to provide our Services.
- Domain registries and registrars, such as Nominet for .uk domains, which need registrant details to register your domain. Some registrant details may appear in public WHOIS records, depending on the registry's rules.
- Stripe, our payment provider, to process card payments securely. Stripe handles your card details under its own privacy policy.
- Professional advisers, such as our accountant, and authorities where the law requires us to.
We don't sell your personal information.
5. International transfers
Our hosting platform is based in the UK. Some registries and service providers may process data outside the UK. Where that happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contract clauses.
6. How long we keep it
We keep your account information for as long as you're a customer, and for up to 6 years afterwards so we can meet our tax and accounting obligations and deal with any claims. Support messages and technical logs are kept for shorter periods, unless we need them for longer to deal with a security issue or dispute.
7. Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that's wrong;
- ask us to delete your information, where we don't need to keep it;
- object to or ask us to restrict how we use it;
- ask us to transfer it to you or another provider;
- withdraw your consent, where we rely on it.
To use any of these rights, email contact@korhost.co.uk. We'll respond within one month.
If you're not happy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.
8. Security
We use appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS) across our website and control panel. Please keep your account password secure and don't share it.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we'll let customers know by email.