Privacy policy
Version 1.3, in force from 10 November 2026.
Who is responsible
THOST, a sole trader based in the United Kingdom, is the data controller for the information described here. Contact support@t-host.co.uk; we will give you a postal address on request.
What we collect
Your name, email address, postal address, telephone number and any company name you give us when ordering. Your domain names. Records of your invoices and payments. Your support messages. Server logs, which include the IP addresses of people who visit your website or connect to your server. When you sign up we also note how you found us (see Cookies below), the IP address you signed up from and your browser type.
Why we hold it, and on what basis
- To provide the hosting you bought and to support it — because we need it to perform our contract with you.
- To take payment and issue invoices — contract, and our legal duty to keep accounting records.
- To learn which of our marketing works, by recording how each new customer found us — our legitimate interest in running and improving our business. We use it only in aggregate and to understand our own sign-ups; we never sell it or share it with advertisers.
- To keep the service secure and working, including server logs and spam filtering — our legitimate interest in running a safe service.
- To email you about your service, such as activation, invoices and outages — contract. Apart from a single one-off email asking for a review a week after your first service starts, which you are free to ignore, we do not send marketing email.
Card details
We never see or store your card number. Card payments are handled by Stripe, who process them as a controller in their own right.
Who else is involved
Stripe for card payments, SMTP2GO for delivering our outgoing email, and Anthropic, whose Claude AI helps us answer support tickets. For each ticket message we send Anthropic the text of the ticket, your first name and a short summary of your orders and unpaid invoices, so it can draft a reply; we never send your email address, postal address, telephone number or passwords. Anthropic processes this on our behalf and does not use it to train its AI models. We do not sell your data and we do not share it for marketing. We disclose data only where the law requires it.
Where it is held
On our own servers in the United Kingdom. The three suppliers named above may process limited data outside the UK under the safeguards required by data protection law.
How long we keep it
Account and billing records: seven years, to meet accounting requirements. Website server logs: about 10 days. Backups of your site: the three most recent daily copies. When you close your account the hosted data is deleted; billing records are kept for the period above.
Unused accounts
If your account has no services and you have not signed in for 30 days, we email you. If you still have not signed in 14 days after that email, the account is archived, and signing in at any point in the following 30 days restores it. After that it is deleted. If the account ever paid an invoice, we keep those invoices for the accounting period above and remove everything else, including your login. Accounts that still have a service, or credit on them, are never removed this way.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it where we are not required to keep it, ask us to restrict or object to how we use it, and ask for it in a portable form. Email support@t-host.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
Your own website visitors and users
If you host a website with us, or run a VPS, Storage Box or game server with us, you are the data controller for the data of your visitors, players and users, and we process it on your behalf as your processor, under our contract with you.
Cookies
Our client area and control panel set cookies that are strictly necessary to keep you signed in. If you arrive through a customer's referral link, our website also sets a cookie called thost_ref holding that customer's referral code for 30 days, so the referral discount and credit can be applied when you sign up. Our website and client area also set a cookie called thost_src, kept for 90 days, recording how you first reached us and how you most recently arrived from somewhere else: the address of the site or search engine that linked to you (not your search terms, unless a link carries them), any campaign tags in that link, and the first page you saw. It stays on your device until you sign up, when it is saved with your account so we know which of our marketing works. It is our own cookie, read only by us. If your browser sends a Global Privacy Control or Do Not Track signal we do not set it, and you can also block or delete it in your browser at any time without affecting anything else on the site. We do not use advertising cookies or third-party analytics.
Questions about this page? Email support@t-host.co.uk.