SurfNode Ltd ("we", "us", "our") is the data controller for personal information processed through our website and hosting services. This policy explains what we collect, why we collect it, and the rights you have under the UK GDPR and the Data Protection Act 2018.
1. Information We Collect
- Account data: name, email address, billing address, phone number.
- Payment data: processed by our PCI-DSS compliant payment providers; we do not store full card numbers.
- Service data: server configurations, IP addresses, support tickets.
- Technical data: browser, device, IP address, and analytics events when you visit our website.
2. Lawful Basis
We process your personal data on the following bases:
- Contract: to provide the services you have purchased.
- Legal obligation: tax, accounting, and law-enforcement requests.
- Legitimate interests: network security, fraud prevention, and product improvement.
- Consent: marketing communications and non-essential cookies.
3. How We Use Your Data
We use your data to deliver services, take payment, provide support, secure our network, comply with legal obligations, and (with your consent) send product updates.
4. Sharing
We share data with carefully selected processors including payment providers, email delivery services, datacentre partners, and DDoS mitigation providers. All processors are bound by contracts that meet UK GDPR requirements.
5. International Transfers
Where we transfer personal data outside the UK, we rely on adequacy decisions or the UK International Data Transfer Agreement to protect your information.
6. Retention
Account and billing records are retained for 7 years to meet UK tax law. Server logs are kept for up to 90 days unless required for an active investigation.
7. Your Rights
- Access a copy of your personal data.
- Rectify inaccurate data.
- Request erasure (subject to legal retention obligations).
- Object to or restrict processing.
- Withdraw consent at any time.
- Lodge a complaint with the Information Commissioner's Office (ico.org.uk).
8. Cookies
We use essential cookies to operate the site and analytics cookies (with your consent) to understand how it is used. You can change your preferences at any time via the cookie banner.
9. Security
We protect your data using TLS encryption, hardened infrastructure, role-based access control, and routine security reviews.
10. Contact
Privacy questions or rights requests: privacy@surfnode.co.uk.