Privacy Policy

Your privacy and the security of your data matter to us. This policy explains what personal information Hostwoody collects when you visit hostwoody.uk, buy our services or contact us, how we use it, and the rights you have.

1. Who we are

hostwoody.uk is operated by Sky Web, based in Rajasthan, India. For the personal data described in this policy we are the data controller. Contact us about privacy at hello@hostwoody.uk.

2. Information we collect

Information you give us

When you create an account, place an order, contact us or use our services, we may collect your name, company name, postal address, email address, telephone number, billing details and the content of your messages. We only ask for what we need to provide the service you request.

Information collected automatically

Like most websites, our servers log visits. Logs may include your IP address, browser type, internet service provider, time zone, date and time, referring and exit pages, and pages viewed. We use this to run and secure the website and to understand how it is used. If you accept optional cookies, Google Analytics also collects information about how you use our site.

Domain registration data

When you register a domain, registries require contact details for the registrant. Depending on the domain extension, some details may be published in public WHOIS databases unless privacy protection applies.

3. How and why we use your information

To provide, bill for and support the services you buy — necessary to perform our contract with you.
To register and manage domain names with registries — necessary to perform our contract.
To send service messages such as renewal reminders, maintenance notices and security alerts — necessary to perform our contract.
To answer enquiries sent through our contact form or by email — our legitimate interest in responding to you.
To keep our website and services secure and prevent fraud and abuse — our legitimate interests and legal obligations.
To keep accounting and tax records — our legal obligations.
To send marketing emails, only where you have agreed — your consent, which you can withdraw at any time using the unsubscribe link.
To measure website usage with analytics cookies — your consent.

We do not sell, trade or rent your personal information. We share it only where needed to provide our services, where the law requires it, or to protect our rights. The main organisations we share data with are:

20i Ltd — our UK hosting infrastructure provider, which hosts your services and operates our ordering and control panel platform as our data processor.
Payment processors such as Stripe and PayPal — to take payments.
Domain registries and registrars, such as Nominet and Tucows (OpenSRS) — to register and manage domain names.
Certificate authorities such as GeoTrust — when you buy a premium SSL certificate.
Google Analytics — website analytics, only if you accept optional cookies.
Cloudflare — website delivery and security.
Our professional advisers, and law enforcement or regulators where we are legally required to share information.

Each of these organisations has its own privacy policy and must protect your data appropriately, for example:

5. International transfers

We are based in India, our websites are hosted in the United Kingdom, and some suppliers process data in other countries such as the United States. Where personal data from the UK or European Economic Area is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum or the EU Standard Contractual Clauses.

6. Cookies

We use essential cookies to make the website work, for example to protect forms against misuse and remember your cookie choice. With your consent we also use analytics cookies to understand how the site is used. You can accept or reject non-essential cookies using the banner on our site and change your mind at any time by clearing your browser’s site data. You can also block cookies in your browser settings.

7. How long we keep information

We keep personal information only for as long as necessary. Account and billing records are generally kept for as long as you are a customer and then for up to six years to meet tax and legal obligations. Enquiries that do not lead to a contract are kept for up to two years. Hosted data is deleted when a service is cancelled, as described in our Terms and Conditions. Passwords are stored as one-way hashes and cannot be read by us.

8. How we protect information

We use commercially reasonable technical and organisational measures to protect personal information against loss, theft and unauthorised access, including encrypted connections, access controls, two-factor authentication and security monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Depending on where you live — including under UK GDPR, EU GDPR and India’s Digital Personal Data Protection Act 2023 — you may have the right to:

ask for a copy of the personal information we hold about you
ask us to correct inaccurate or incomplete information
ask us to delete your information, where there is no reason for us to keep it
object to, or ask us to restrict, how we use your information
ask us to transfer information you gave us to another organisation
withdraw consent at any time, where we rely on consent

To exercise any of these rights, email hello@hostwoody.uk. We will respond within one month. If you are unhappy with how we handle your information, you can complain to your local data protection authority — for example, the Information Commissioner’s Office (ico.org.uk) in the UK, or the Data Protection Board of India.

10. Children

Our services are not intended for anyone under 18, and we do not knowingly collect information from children.

11. Other websites

Our website links to third-party websites that we do not control. Their privacy practices are their own responsibility, so please read their privacy policies.

12. Business transfers

If our business or its assets are sold or transferred, customer information may be transferred to the new owner, who must continue to use it in line with this policy.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.