Legal
Privacy Policy
Last updated: 7 May 2026
1. Who we are
This Privacy Policy explains how Eazyhosting (“we”, “us”, “our”) collects, uses and protects your personal information when you use our website at www.eazyhosting.uk and when you purchase or use our services.
Eazyhosting is a trading name of Franky Smith trading as EazyHosting UK, a sole trader based in England. Our address is 7 Buckby Drive, Burton Latimer, Kettering, NN15 5FU, United Kingdom.
We have assessed our data processing activities and determined that we currently fall within an exemption from ICO registration under the UK GDPR. We will keep this assessment under review as our business grows. For data protection enquiries, please contact us using the details in Section 2.
For the purposes of UK data protection law, Eazyhosting is the data controller for the personal information described in this policy.
2. Contact details
If you have any questions about this policy or how we handle your personal data, please contact us:
- Email: sales@eazyhosting.uk
- Phone: +44 7584 048 875
- Post: Eazyhosting, 7 Buckby Drive, Burton Latimer, Kettering, NN15 5FU
3. What personal information we collect
We may collect and process the following categories of personal information:
- Identity data: name, username or similar identifier.
- Contact data: email address, telephone number, billing address.
- Account data: login credentials (passwords are stored in hashed form and are not accessible to us), account preferences.
- Transaction data: details of services you have purchased and payment records.
- Technical data: IP address, browser type and version, time zone, operating system, and other technology identifiers on the devices you use to access our website.
- Usage data: information about how you use our website and services, collected via Google Analytics (see Section 9).
- Communications data: content of support requests, emails and other communications you send us.
- Domain registration data: WHOIS contact details required by domain registries (registrant name, address, email, phone number).
We do not intentionally collect sensitive personal data (sometimes called special category data under UK GDPR). Please do not send us sensitive personal information unless specifically requested.
We do not collect personal information from children under 13. Our services are not directed at children.
4. How we collect it
We collect personal information in the following ways:
- Directly from you when you create an account, place an order, complete a contact form, or communicate with us by email or phone.
- Automatically as you navigate our website, through cookies and similar technologies (see Section 9).
- From third parties, including our payment processor (Stripe) and our infrastructure provider (20i Ltd), where relevant to the services you have purchased.
5. Why we use it and our lawful bases
We use your personal information for the following purposes. Under UK GDPR, we are required to identify a lawful basis for each use.
| Purpose | Lawful basis |
|---|---|
| Providing the services you have purchased (hosting, domains, SSL) | Contract |
| Processing payments and managing your account | Contract |
| Registering domain names on your behalf (requires WHOIS data) | Contract; legal obligation (registry rules) |
| Responding to support requests and enquiries | Contract; legitimate interests |
| Sending service-related notices (renewals, expiry warnings, downtime) | Contract; legitimate interests |
| Preventing fraud and ensuring security | Legitimate interests; legal obligation |
| Complying with legal and regulatory obligations | Legal obligation |
| Improving our website using anonymised analytics data | Legitimate interests |
6. Hosting, domain and email service data
When you use our hosting or domain services, data you store on your hosting account (including website files, databases, and email content) is held on servers provided and managed by our infrastructure partner, 20i Ltd, based in the United Kingdom. We do not routinely access content stored in your hosting account unless required to do so to provide support or investigate a security or abuse issue.
Email content handled through email hosting accounts is processed on our infrastructure and is not routinely read by us. Standard email is not an inherently secure communication channel; we recommend using encrypted means for sensitive information.
7. Payment and billing data
Payments are processed by Stripe (Stripe’s privacy policy). We do not store full card numbers on our systems. Stripe handles card data in accordance with PCI DSS requirements. We retain billing records including invoice totals, payment dates and partial card identifiers as required for accounting purposes.
8. Support ticket data
When you contact us for support, we collect the content of your messages and any information you provide to help us resolve your issue. Support records are retained for 2 years after your last interaction.
9. Cookies and similar technologies
Our website and client portal use a small number of cookies that are strictly necessary for the site to function. We do not use advertising cookies, tracking cookies, or analytics cookies.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Session cookie | EazyHosting / 20i | Maintains your login session and shopping basket in the client portal | Session (deleted when browser closes) |
__stripe_mid |
Stripe | Fraud prevention during payment processing | 1 year |
__stripe_sid |
Stripe | Fraud prevention during payment processing | 30 minutes |
Because all cookies we use are strictly necessary for the operation of the service, we do not display a cookie consent banner. By using this website and client portal you acknowledge that these cookies will be set.
If we add analytics or other non-essential cookies in future, we will update this section and implement a consent mechanism before those cookies are set.
10. Sharing your data with third parties
We do not sell your personal information. We share it only where necessary to provide our services or to comply with the law, including with:
- 20i Ltd — our hosting infrastructure and reseller platform provider. Your account data and hosting content is processed on their systems. 20i is based in the United Kingdom.
- Domain registries and registrars — your WHOIS contact information is submitted to the relevant domain registry (e.g. Nominet for .co.uk domains, Verisign for .com) as required by registry rules. Domain Privacy, where purchased, limits public exposure of this data.
- Stripe — processes card payments on our behalf. Stripe is certified to PCI DSS standards.
- Google LLC — provides Google Analytics. Data is anonymised before transmission where possible.
- HMRC and other regulatory bodies — where required by law.
- Professional advisers — accountants, solicitors and insurers, under confidentiality obligations.
11. International transfers
Our primary infrastructure is hosted in the United Kingdom by 20i Ltd. Certain third-party services we use involve transfers of data outside the UK:
- Google Analytics — data may be transferred to the United States. Google LLC participates in the UK Extension to the EU–US Data Privacy Framework and uses standard contractual clauses approved by the ICO as an additional safeguard.
- Stripe — Stripe’s European operations are managed by Stripe Payments Europe Ltd, based in Ireland. Data transferred outside the UK/EEA is protected by standard contractual clauses.
- Domain registries — WHOIS data submitted to international domain registries (e.g. for .com, .net domains) may be processed by organisations outside the UK in accordance with their applicable data protection rules.
12. How long we keep your data
We retain your personal information for as long as necessary to provide services to you and to comply with our legal obligations. Our standard retention periods are:
- Active account data: retained for the duration of your account.
- Account data after closure: retained for 6 years to meet accounting, tax and legal requirements.
- Billing and transaction records: 6 years from the date of transaction, as required by HMRC.
- Support correspondence: 2 years from last interaction.
- Domain WHOIS data: subject to registry rules; typically retained by the registry for a period after expiry.
When data is no longer required, it is securely deleted or anonymised.
13. Your rights
Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have the following rights:
- Right of access — to request a copy of the personal information we hold about you.
- Right to rectification — to ask us to correct inaccurate or incomplete information.
- Right to erasure — to ask us to delete your personal information in certain circumstances.
- Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, machine-readable format where technically feasible.
- Right to object — to object to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making — we do not use fully automated decision-making that produces legal or similarly significant effects on individuals.
To exercise any of these rights, please contact us at sales@eazyhosting.uk. We will respond within one calendar month. We may need to verify your identity before processing a request.
14. How to complain
If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Last updated: 7 May 2026 | This policy is subject to change. We will post updates on this page.
Back to Top