Privacy Policy.

Overview

Online Hosting Solution (“we”, “us” or “our”) respects your privacy. This notice explains how personal information is handled when you visit onlinehostingsolution.com, use a related application, create a client account, buy or use a service, contact support, or otherwise interact with us.

The data controller is Online Hosting Solution, operated from United Kingdom / Northern Ireland. Questions can be sent to dpo@onlinehostingsolution.com.

If you do not agree with this policy, do not submit personal information or use an account-based service. This policy should be read together with our Terms & Conditions.

Information we collect

Information you give us

Depending on the service or interaction, you may provide:

• your name, business name and email address;
• account usernames, passwords or security information;
• domain, hosting, website, application, billing and support details;
• messages, project requirements, uploaded materials and feedback;
• marketing preferences provided through the client area or another service;
• transaction information needed to complete and record an order.

Payment-card details are processed by the payment provider used at checkout, such as Stripe or PayPal. We do not need to store the complete card number or security code on this marketing website. Review the chosen provider’s privacy notice for its handling of payment information.

You must ensure information you provide is accurate, complete and current, and that you have authority to provide information about another person.

Information collected automatically

Servers and security systems may automatically record an IP address, date and time, requested page, referring page, browser, device type, operating system, approximate country, errors and security events. This information is used to deliver the site, diagnose faults, understand usage and prevent abuse. It normally does not identify you directly, but it may be personal data under applicable law.

Applications and other sources

If you use one of our mobile applications, we may receive device type, operating-system version, application version, IP address and push-notification preference. We may also receive limited information from public databases, marketing partners, domain registries, fraud-prevention services, social networks you connect, and other providers involved in delivering an authorised service.

How we use information

We use personal information where reasonably necessary to:

• create, authenticate and administer client accounts;
• respond to enquiries, quote for work and provide support;
• process, fulfil, renew, change or cancel orders and subscriptions;
• register or manage domains and deliver hosting, email, SSL, development and related services;
• send service messages, invoices, security notices and changes to terms or policies;
• protect accounts, customers and infrastructure against fraud, abuse, malware and unauthorised access;
• request feedback and, with permission, publish a testimonial;
• send marketing that you requested or that is otherwise permitted by law;
• measure and improve website, product, campaign and support performance;
• enforce our terms, resolve disputes, establish legal claims and respond to lawful requests;
• comply with tax, accounting, consumer, company and other legal obligations.

We do not sell personal information. We do not use information sent by email for unrelated advertising without a separate lawful basis.

Lawful bases

Under UK GDPR and other applicable data-protection law, processing normally relies on one or more of these bases:

• Contract: processing is needed to take steps at your request or deliver an agreed service.
• Legitimate interests: processing is reasonably needed to operate, secure and improve the business and does not override your rights.
• Legal obligation: processing is required by tax, accounting, court, law-enforcement or other applicable rules.
• Consent: you gave a clear, optional choice, such as subscribing to marketing or allowing optional cookies. Consent may be withdrawn.
• Vital interests: processing is exceptionally necessary to protect someone’s life or safety.

When information is shared

Information is shared only when there is a valid reason and appropriate protection. Recipients may include:

• hosting, infrastructure, backup, monitoring and security providers;
• domain registries and registrars needed to register or manage a domain;
• payment, invoicing and accounting providers, including Stripe or PayPal where selected;
• email delivery, support and customer-service providers;
• developers, designers, lawyers or other contractors working under confidentiality obligations;
• analytics or advertising providers, but only when deployed and allowed by your cookie choice where consent is required;
• professional advisers, insurers, auditors and potential business purchasers;
• courts, regulators, law enforcement or another authority where disclosure is legally required or reasonably necessary to protect rights and safety.

A provider may use information only for the contracted purpose or under its own lawful responsibilities. We may transfer information during a merger, financing, sale or acquisition, subject to appropriate confidentiality and notice requirements.

The previous website listed integrations including Google services, Mailchimp, Tawk.to, social-login tools and advertising networks. Those providers are not loaded by the redesigned front end unless they are separately configured. If any are enabled at launch, this notice and the consent controls must be updated accordingly.

Cookies and similar technologies

Cookies are small values stored by a browser. The redesigned public website does not use a PHP session or contact-form cookie. Account and checkout services in the separate client area may use essential cookies under their own service requirements.

The cookie banner stores your choice in the browser’s local storage under ohs_cookie_choice. Local storage stays on the device until cleared and is used only to remember whether you selected essential-only or allowed optional analytics.

No third-party analytics script is included in this package. Selecting “Allow analytics” records the preference but does not transmit data until an analytics tool is deliberately added. Before adding one, configure it to load only after valid consent where required, name it in this notice and explain its retention.

You can reopen cookie settings from the footer. You can also remove cookies and local storage through browser settings.

Some browsers send a Do Not Track signal. There is no single, universally adopted standard for responding to that signal. The redesigned site’s optional tracking remains off unless allowed through its own preference control.

How long information is kept

We keep information only as long as reasonably needed for the purpose collected, including the time required to provide a service, manage an account, answer a dispute and comply with tax, accounting and legal obligations.

Account and transaction records may need to be kept for the statutory period that applies to financial and contractual records. Support and project communications are reviewed and deleted or anonymised when no longer needed. Marketing information is kept until you unsubscribe or the list is cleaned.

When active use ends, information is deleted or anonymised. If immediate deletion is not possible because it remains in a protected backup, it is isolated from normal use until the backup is overwritten.

How information is protected

We use technical and organisational safeguards designed for the sensitivity of the information. These may include encryption in transit, access controls, least-privilege administration, authentication, software updates, malware controls, logging, backups, staff confidentiality and incident response.

No internet transmission or storage system can be guaranteed completely secure. Use a secure environment, protect account credentials, enable available multi-factor authentication and notify us promptly if you suspect compromise.

Children

The site and commercial services are not directed to children. We do not knowingly collect personal information from a child under 13 or allow a person under 18 to create a service account without appropriate parent or guardian involvement. If you believe a child’s information has been submitted, contact the Data Protection Officer so it can be investigated and removed where required.

Your privacy rights

Depending on your location and the circumstances, you may have the right to:

• ask whether we process your personal information and receive a copy;
• correct incomplete or inaccurate information;
• request deletion where there is no lawful reason to keep processing;
• restrict processing while an issue is investigated;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable, machine-readable format;
• withdraw consent without affecting earlier lawful processing;
• complain to a data-protection authority.

To exercise a right, email dpo@onlinehostingsolution.com. We may ask for proportionate proof of identity and clarification needed to find the information. In the UK, you may also complain to the Information Commissioner’s Office at ico.org.uk.

You can opt out of marketing at any time using the unsubscribe link in an email or by contacting us. Service, security and billing messages may still be sent while an account or contract remains active.

International transfers and location-specific rights

Some service providers may process information outside the United Kingdom. Where data is transferred to a country without an adequacy decision, we use an appropriate safeguard such as approved contractual clauses and assess the protection available.

Residents of California and certain other jurisdictions may have additional access, deletion, correction, opt-out or disclosure rights. We do not sell personal information. Contact the Data Protection Officer with your location and request so the applicable right can be assessed.

Updates to this notice

We may update this notice when services, providers, technology or legal requirements change. The revised date will be shown at the top. A material change may also be highlighted on the site or communicated directly where appropriate.

Contact the Data Protection Officer