Eco Web Hosting Privacy Policy

Updated 18th January 2019

1.What Is the Purpose of This Document?

1.1 We are Enix Ltd trading as Eco Web Hosting Limited, registered office at 16-18 Barnes Wallis Road, Segensworth East, Hampshire, PO15 5TT. Throughout the rest of this document we shall be referred to as “Eco Web Hosting”.

1.2 This Privacy Policy applies to www.ecowebhosting.co.uk, your Eco Web Hosting user account, technical support and any other services we provide to you (we'll just call all this "Eco Web Hosting Services").

1.3 The purpose of this document is to inform you of exactly what information about you that we collect, store and process. To generalise we do not store any information about you that does not help us provide the services you have purchased from us. We are committed to being transparent and open and this document will outline exactly what is stored and how it is used.

2.What Do We Mean by "Personal Information"?

2.1 "Personal information" means any information that identifies you, things like your name or email address. Any information that falls outside of this is "non-personal information."

2.2 If we store your personal information with information that is non-personal, we will consider the combination as personal information. If we remove all personal information from a set of data then the remaining is non-personal information.

3.Your Data

3.1 What we collect

We collect personally identifiable information in order to provide you with a service and identify that you are the owner of the provided service. The following is the set of personally identifiable information we collect from you and the legal and practical justification for its collection.

Data	Process	Processing Basis
IP address	Security and system maintenance. Your IP address will be checked against a service that determines how likely an IP address is a proxy / VPN / bad IP using statistical analysis. If we determine your current location does not match your billing address we will contact you to confirm the order is genuine. Your IP address will also be recorded on system logs that will be used for general system maintenance.	Contract VAT MOSS, to add a single piece of information to determine place of supply legitimate interest To protect us and our users from fraudulent transactions.
Full Name	Your name determines the owner of the Eco Web Hosting Service.	Contract To create invoices and manage payments legitimate interest To recovered owed money in the event of non payment legitimate interest Relationship management, we will refer to your by your full name in technical support communications
Billing Address	We need to know your billing address to confirm your order. We may check this against your current location in order to prevent fraudulent orders. If we determine your current location does not match your billing address we will contact you to confirm the order is genuine.	Contract To create invoices and manage payments legitimate interest VAT MOSS, to add a single piece of information to determine place of supply legitimate interest To recovered owed money in the event of non payment legitimate interest To prevent fraudulent orders
Sign up location	Your sign up location will be determined from your IP address and referenced against your billing location to determine a place of supply. This is required for both VAT purposes and fraud prevention.	Contract VAT MOSS, to add a single piece of information to determine place of supply legitimate interest To protect us and our users from fraudulent transactions.
Email address	Your email address will be stored in our customer database and support system and will be used to contact you for various reason.	Contract We need to be able to contact you to provide support and information regarding your products including notification of technical issues, renewals, and information related to the continued running of your service. legitimate interest We will contact you regarding new offers and products we develop.
Telephone number	Your telephone number will be stored in our customer database.	legitimate interest Fraud prevention, in the event of a suspicious order from your account we may contact you by phone to confirm the order. legitimate interest We may contact you by phone to remind you of a missed renewal payment.
Udemy Username	We read your udemy profile page to determine what free services you are entitled to.	Contract If you would like to take advantage of the udemy student hosting offer, we require your udemy username to determine your eligibility.

3.2 What We Do Not Collect

Special category data. Special category data is personal data which the GDPR says is more sensitive, and so needs more protection. We do not collect any special categories of personal Data. For your reference these special categories are:

race
ethnic origin
politics
religion
trade union membership
genetics
biometrics (where used for ID purposes)
health
sex life
sexual orientation

3.3 How Your Data Is Collected

Your contact details, including your name, address, email address and phone number are collected via a form that you complete either on sign up or at a later date when ordering products that require it. If you do not order products that require these details they will not be collected unless you complete the contact details form voluntarily.

Your IP address is collected automatically when you sign up to the Eco Web Hosting Service or navigate pages in the Eco Web Hosting Service.

To contact you regarding your service - In order to provide your service we will need to contact you to inform you about technical problems, renewal dates and security issues.

3.4 How Your Data Is Used

Third parties: We do not provide any of your details to third parties for the purpose of marketing.
Marketing: We will provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you. You will receive marketing communications from us if you have purchased goods or services from us, taken advantage of a free hosting offer and in each case, you have not opted out of receiving that marketing.

4.Third Party Processors

The list of third party processors is maintained at Third Party Processors

5.Transferring Data out of the European Economic Area

In some instances your data will need to be transferred out of the EEA. Specifically, when registering generic top level domain names (.com .org .net) or other international domain extensions.

For more information please see the ICANN proposed interim plan (PDF)

6.Your Services

The nature of the service provided by Eco Web hosting allows you to store data. By definition this data may be personally identifiable information. You are responsible for protecting that personally identifiable information. We do not access, modify, process or analyse that data apart from the following circumstances.

6.1 Hosting Package Automatic Scanning

The data in your hosting package is scanned for malware and unusual activity that may denote compromise or abusive/fraudulent activity not limited to but including phishing, denial of service and attempts to compromise other websites.

6.2 Email Scanning

Your mail is scanned for malware and malicious action including transmitting malware and unusual activity that may denote compromise. This includes incoming and outgoing mail.

6.3 Support Requests

If you raise a support ticket requesting help with your service, we may need to access the data stored in service, or related logs in order to diagnose and provide the assistance requested.

7.Your Rights

The GDPR provides the following rights for individuals

The right to be informed: You will be informed about the collection and use of your personal data.

The right of access: You will have access to your personal data and supplementary information.
The right to rectification: You can have inaccurate personal data rectified, or completed if it is incomplete.
The right to erasure: You can have personal data erased when that erasure does not conflict with our legal obligations or security requirements.
The right to restrict processing: You have the right to request the restriction or suppression of your personal data.
The right to data portability: You can always obtain and reuse your personal data for your own purposes across different services.
The right to object: You have the right to object to data processing based on legitimate interests, direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics. Please note that objections to data processing may make it impossible for us to provide you with a service.