1. Introduction

This policy (together with any ancillary documents referred to in it) outlines how Giraffe Hosting Limited ("we" or "us") processes personal data collected from you or provided by you. Please read the following carefully to understand how we handle and treat your personal data.

2. About Us

Giraffe Hosting Limited is a registered company in England & Wales (Company number 09775671) with a registered address at Hawthorn House, Southwell Road West, Mansfield, Nottinghamshire, NG21 0HJ. We may act as both a data controller and data processor of personal data. We have a designated Data Protection Officer who can be contacted at our registered address.

3. What Information We Collect

We collect the following types of personal information:

• Information provided by you when filling in forms on our website, such as during account registration, service purchases, or requests for further services.
• Records of correspondence if you contact us by letter or email.
• Telephone conversations may be recorded for training purposes.
• Details of transactions and orders placed through our site.
• Technical data, including operating system, browser type, referring/exiting pages and URLs, number of clicks, domain names, and pages viewed in our server logs, used for marketing and security purposes.
• If you provide us with personal data about a third party (e.g., when registering a domain on their behalf), you warrant that you have obtained their express consent for the disclosure and use of their personal data.

4. How We Use Personal Data

We use personal data for the following purposes:

• To register a customer account.
• To process orders placed with us.
• Handling customer service and career inquiries.
• Ensuring content on our site is presented effectively.
• Providing information, products, or services requested by you.
• Carrying out obligations arising from contracts between you and us.
• Allowing participation in interactive features of our service.
• Notifying you about service changes.
• Conducting marketing and statistical analysis. We never sell your personal data to third parties.

5. Automatic Decision Making

We may use the provided information to make automatic decisions regarding order acceptance, primarily for fraud prevention purposes. This information remains within our network.

6. Where We Store Your Personal Data

We store personal data on servers located within the European Economic Area ("EEA"). Occasionally, we may transfer personal data outside of the EEA, such as domain registration data sent to our domain registrar. By submitting your personal data, you agree to such transfers, storage, or processing outside the EEA. We take reasonable steps to ensure data security and GDPR compliance.

7. Data Retention

We retain personal data for as long as necessary to fulfill the collection purposes, unless required by law. Data is retained and used as necessary to comply with legal obligations, resolve disputes, and enforce agreements, including but not limited to:

• Invoice data (minimum of 6 years as required under UK Law).
• Log files (rotated every 12 weeks, anonymized data may be kept longer).
• Giraffe Hosting infrastructure backups (kept for 12 months), and web hosting data (kept for 30 days).
• In case of rare backup restorations containing personal information post-deletion, we make every reasonable effort to ensure data is removed within 180 days unless additional retention obligations apply.

8. Your Rights

Unless exempt under the GDPR, you have the following rights regarding your personal data:

• The right to request a copy of your personal data held by us.
• The right to request correction of inaccurate or outdated personal data (you can also edit and remove personal data through the Giraffe Hosting control panel).
• The right to object to our use of your personal data and request its erasure when no longer necessary (right to be forgotten), unless legal reasons require data retention.
• The right to object to processing for marketing purposes (you can exercise this right through Unsubscribe links, contacting Customer Services, or writing to us).
• The right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Who We Share Your Information With

By entering into this agreement, you agree to data processing by the following third parties. We will update this policy at least 30 days before a new third party processes data.

10. How We Use Cookies

We use cookies to gather information about general Internet usage, improve our site, and provide a personalized service. Cookies enable us to:

• Estimate audience size and usage patterns.
• Store information about your preferences to customize our site.
• Speed up searches.
• Recognize you upon your return to our site.
• Conduct remarketing to remind you of our products (excluding existing customers).

You may refuse to accept cookies through your browser settings. However, this may limit access to certain parts of our site.

11. Third Party Links

Our site may contain links to partner networks, advertisers, and affiliates. These websites have their privacy policies, and we accept no responsibility or liability for their policies. Please review these policies before submitting personal data to them.

12. Changes to this Policy

We regularly review our privacy policy and post updates on this web page. The last update was made on 10th May 2018.

13. How to Contact Us

If you have questions about our privacy policy or the information we hold about you, please contact us via our contact form, by submitting a ticket within your control panel or by writing to our registered address: Giraffe Hosting Limited, 85 Great Portland Street, London, W1W 7LT.