1. Introduction
Welcome to xHosts UK ("we", "our", "us"). xHosts UK is operated as a sole trader business based in the United Kingdom. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, services, and support.
By using our services, you agree to the practices outlined in this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
xHosts UK
United Kingdom
Sole Trader Business
3. Information We Collect
We may collect and process the following types of data:
a) Information You Provide to Us
- Account Information – Name, email address, phone number, billing address, and payment details when you register for our services.
- Support & Communication – Information you provide when contacting us for support or inquiries.
b) Information We Collect Automatically
- Usage Data – IP address, browser type, operating system, device information, and access times when you visit our website or services.
- Cookies & Tracking Technologies – We use cookies and similar technologies to enhance user experience, maintain sessions, and analyse website traffic.
- Identity Verification Data – Verification status and reference identifiers received from third-party identity verification providers where verification is required.
c) Third-Party Information
We may receive data from third-party providers, including payment processors, fraud prevention services, identity verification providers, and business partners.
4. How We Use Your Information
We use your personal data for the following purposes:
- Service Delivery – To provide, operate, manage, and improve our hosting services.
- Billing & Payments – To process transactions and manage billing.
- Security & Fraud Prevention – To detect and prevent fraud, abuse, or unauthorised access.
- Customer Support – To respond to inquiries and provide technical assistance.
- Marketing & Communication – To send service updates or promotional communications where consent has been provided.
- Legal Compliance – To comply with legal obligations and enforce our Terms of Service.
5. Legal Basis for Processing
We process personal data based on the following lawful bases:
- Contractual necessity – To provide and maintain our services.
- Legal obligations – To comply with UK laws and regulatory requirements.
- Legitimate interests – To maintain network security, prevent fraud, improve services, and protect our business.
- Consent – Where required, such as for marketing communications.
6. How We Share Your Information
We do not sell your personal data. However, we may share information with:
- Service Providers – Third-party vendors assisting with payment processing, infrastructure, fraud prevention, identity verification, hosting, and security.
- Legal Authorities – Where required by law, regulation, or to enforce our legal rights.
- Business Transfers – In the event of a merger, acquisition, restructuring, or transfer of business assets.
In certain circumstances, we may require identity verification to protect our platform, prevent abuse, comply with legal obligations, and safeguard our network, customers, and upstream providers.
Where identity verification is required, xHosts UK may use a secure third-party verification provider, including Stripe Identity, to process verification checks.
xHosts UK does not receive, store, or retain copies of identity documents or biometric data. We only receive verification status and reference identifiers required for security, compliance, and audit purposes.
Identity verification data is processed by the verification provider in accordance with applicable data protection laws, including the UK GDPR. Data is retained only for as long as necessary to fulfil verification, security, and compliance requirements.
7. International Data Transfers
Some of our service providers may process personal data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including adequacy decisions, data protection agreements, or standard contractual clauses, to protect your data.
8. Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this policy, to comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer required, it is securely deleted or anonymised.
9. Data Security
We implement appropriate technical and organisational security measures designed to protect personal data against loss, theft, unauthorised access, disclosure, alteration, or destruction.
10. Automated Decision-Making
We may use automated systems to detect fraud, abuse, or security risks. These systems do not make decisions that have a legal or similarly significant effect on you without human review.
11. Your Rights Under UK GDPR
You have the following rights under UK GDPR:
- Right to Access – Request a copy of your personal data.
- Right to Rectification – Correct inaccurate or incomplete data.
- Right to Erasure – Request deletion of your data (subject to legal obligations).
- Right to Restrict Processing – Limit how your data is used.
- Right to Data Portability – Receive your data in a machine-readable format.
- Right to Object – Object to certain processing activities including marketing.
- Right to Withdraw Consent – Withdraw consent at any time where processing relies on consent.
To exercise your rights, please contact us via the client portal at https://my.xhosts.uk.
12. Marketing Preferences
You may opt out of marketing communications at any time by updating your preferences in the client portal or by contacting support.
13. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to enhance functionality, improve performance, and analyse usage. Additional details may be provided in our Cookie Policy.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage users to review their privacy policies.
15. Complaints
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
Website: https://ico.org.uk
Telephone: 0303 123 1113
16. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes may be communicated via email, announcements, or notices on our website.
17. Contact Us
For any questions regarding this Privacy Policy or to exercise your
data protection rights, please contact us via:
https://my.xhosts.uk
Last Updated - 8 March 2026