Privacy Policy

Last updated: 19 August 2026

This Privacy Policy explains how Orbi Hosting Ltd ("we", "us", "our") collects and uses your personal data, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data described here. You can contact us about privacy at [Company Email].

1. The data we collect

  • Account & contact data: name, email address, postal/billing address, phone number and account credentials.
  • Order & billing data: the Services you buy, invoices, and payment details. Card details are handled by our payment processor; we do not store full card numbers.
  • Technical data: IP address, browser and device information, and log data generated when you use our sites and Services.
  • Support data: the content of tickets, emails and other communications with us.
  • Usage & cookie data: see our Cookie Policy.

2. How and why we use it (lawful bases)

PurposeLawful basis
Providing and provisioning the Services you orderPerformance of a contract
Billing, taking payment and preventing fraudContract / legal obligation / legitimate interests
Providing customer supportContract / legitimate interests
Keeping accounting and tax recordsLegal obligation
Securing our systems and investigating abuseLegitimate interests
Sending service and administrative messagesContract / legitimate interests
Sending marketing (where you have opted in)Consent
Analytics cookiesConsent

3. Who we share it with

We share personal data with service providers who help us deliver the Services, acting as our processors or as separate controllers, including: payment processors (for example Stripe); domain registries and registrars; certificate authorities; hosting, control-panel and game-panel providers; email and communications providers; and analytics providers. We may also disclose data where required by law, to enforce our terms, or in connection with a business sale or reorganisation. We do not sell your personal data.

4. International transfers

Some providers may process data outside the UK. Where they do, we rely on an adequacy decision or appropriate safeguards (such as the International Data Transfer Agreement or Standard Contractual Clauses) to protect your data.

5. How long we keep it

We keep personal data for as long as your account is active and as needed to provide the Services. After that we retain data only as long as necessary for legal, accounting, tax or dispute-resolution purposes (for example, financial records are generally kept for at least six years), then delete or anonymise it.

6. Your rights

Subject to conditions, you have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent at any time (without affecting processing already carried out). To exercise any right, contact [Company Email]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to help first.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and monitoring. No system is completely secure, so we cannot guarantee absolute security.

8. Children

Our Services are not directed at children, and we do not knowingly collect personal data from anyone under 18.

9. Changes

We may update this policy from time to time; the "last updated" date above shows the latest version. Material changes will be notified to you where appropriate.

10. Contact

Orbi Hosting Ltd, [Company Registered Address]. Email: [Company Email].