Privacy Policy
Last updated: July 30, 2026
1. Who holds responsibility for your data
The data controller is Fairdeal Renovations Limited, a company registered in England and Wales, whose company number is 15026869, registered office The Workspace Basildon, 7 High Pavement, Basildon, England, SS14 1EA. HostingAlly is a trading name of Fairdeal Renovations Limited.
On any matter touching your personal data, including the exercise of any right listed in section 7, email info@hostingally.comand be sure to put “Data protection” in the subject line.
Our establishment is in the United Kingdom, and we sell to customers all over the world, which is why this policy has been written to satisfy the UK GDPR and the EU GDPR alike.
2. What we collect
- Account and billing details — your name, your email address, your billing address, together with the invoices raised against your account.
- Payment details — handled by Stripe. What comes back to us is a payment token plus the last four digits of your card. The full card number and the security code never reach us, and we store neither.
- Support correspondence — tickets, emails, and anything at all that you decide to include in them.
- Domain registrant details — the contact details that a registry demands before it will register any domain in your name.
- Technical logs — IP addresses, request data, and the error logs generated while you are using the platform.
- Your site's content — the files, databases and mailboxes you keep on our hosting. We do not look inside them, save for two situations: where you ask us to as part of support, or where a specific abuse or security report obliges us to investigate.
3. What we use it for, and on what lawful basis
Every purpose needs a lawful basis under data protection law. Rather than summarise, we have set ours out in full below, so you can check them yourself.
| Purpose | Lawful basis | What it covers |
|---|---|---|
| Providing the service you ordered | Contract | Setting up your account, provisioning hosting, registering domains, raising invoices and collecting payment. |
| Answering your support requests | Contract | Dealing with tickets and correspondence, along with whatever you decide to tell us inside them. |
| Keeping the platform secure | Legitimate interests | Server logs, IP addresses, investigating abuse and preventing fraud. The interest at stake is keeping the platform free of abuse, and we judge that proportionate because the data involved is limited and kept only briefly. |
| Service notices you cannot opt out of | Contract | Reminders about renewals, invoices, maintenance windows and incident notices. These count as service communications rather than marketing. |
| Marketing email | Consent | Only where you have opted in, and withdrawal is open to you at any moment through the unsubscribe link or an email to us. |
| Analytics | Consent | Measurement and advertising tags. These are requested only after you accept the matching category in our cookie banner, and consent can be withdrawn from the footer whenever you choose. |
| Keeping accounting records | Legal obligation | Records of transactions must be kept for a set period, because UK tax law says so. |
Your personal data is not sold by us, and it is not used to train machine-learning models either.
4. Cookies and analytics
We set just a handful of necessary cookies that keep the site working: they remember which currency your prices appear in, and they record your cookie choice so the banner stops asking. Consent is not required for these.
Past that point, nothing loads until you allow it. Not one analytics or advertising tag is configured on this deployment, which means nothing in those categories runs at all, even for a visitor who accepts every category. That decision can be changed or withdrawn whenever you like, through the cookie settings link in our footer, which reopens the banner with your current answers already showing. See our cookie policy for the detail tag by tag, covering which cookies each one sets and how long those cookies last.
Up until August 2026 this section claimed our analytics was cookieless and that we ran no advertising trackers. That was true of tooling we have since replaced. Rather than leave the wording to age quietly, we have rewritten it to describe what the site actually loads today.
5. Which other parties process your data
The circle stays small here. Every party listed below either acts on our instructions under a contract, or acts as an independent controller where the nature of the service demands it. A domain registry, to take one example, holds registrant records in its own right.
| Who | What they do | Where |
|---|---|---|
| Vercel | Hosts this website and serves its pages | US / global edge |
| 20i | Hosting platform, plus the server that runs our billing system | United Kingdom |
| Stripe | Processes card payments and stores card details | US / Ireland |
| Namecheap | Registers and renews most domain extensions | United States |
| PKNIC | Official registry for .pk domains | Pakistan |
| Domain registries | Holds the registrant records for any domain you register | Varies by extension |
| Pexels | Serves a few illustrative images, which sends your IP to their CDN | Global CDN |
Disclosure may also happen where the law requires it of us, or in order to establish or defend a legal claim.
6. Sending data beyond the UK and EEA
Several of the providers listed above sit outside the UK and the European Economic Area, which means your data may travel internationally. Wherever that occurs, an appropriate safeguard carries the transfer: a UK adequacy decision covering the destination country, the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses.
The hosting account you hold, and its data, sit in a London datacentre. Ask us at info@hostingally.com if you want to know exactly which safeguard applies to any particular transfer of yours.
7. Your rights
The rights set out below apply to your personal data. To exercise any one of them, email info@hostingally.com. We will respond within one month, and there is no charge to you for it.
- Access — Request a copy of whatever personal data we currently hold on you.
- Rectification — Have inaccurate or incomplete data corrected.
- Erasure — Request deletion of your data, provided that no overriding obligation requires us to keep it.
- Restriction — Ask for processing to be paused while any dispute over accuracy or legitimacy gets resolved.
- Portability — Take back the data you supplied, in a structured and machine-readable format.
- Objection — Raise an objection to processing carried out under legitimate interests.
- Withdraw consent — Pull your consent whenever you like, leaving processing already carried out unaffected.
Before we act, we may need to verify who you are, so that your data does not end up disclosed to somebody else entirely.
Unhappy with the way we have handled your data? A complaint can be made to the UK's Information Commissioner's Office at ico.org.uk. Anyone in the EU may instead complain to the supervisory authority in their own country. We would welcome the chance to put things right first, though you are under no obligation to approach us before going to a regulator.
8. How long the data stays with us
- Account and billing records — throughout the time your account stays open, and then for a further six years following your final transaction, that being the retention period UK tax law demands of us.
- Support tickets — three years measured from closure, which leaves us the history should a related problem come back.
- Server and access logs — usually 30 to 90 days, the exception being a log held for longer as part of an active security or abuse investigation.
- Your hosted content — for as long as the service remains active, and inside backups for a short spell following cancellation, at which point it is deleted together with the account.
- Marketing consent records — up to the point you withdraw consent, together with a record of that withdrawal so we can honour it.
9. WHOIS privacy on domains
To register a domain we have to pass your contact details across to the registry. Where the registry allows it, we switch on free WHOIS privacy so your personal details stay off the public lookup. Certain extensions do not permit that, country-code ones in particular, and where that applies your details may show up in a public record. If that matters to you, ask us before we register anything.
10. Children
Children are not the audience for our services, and we do not knowingly collect data from anyone under 16. Believe a child has handed us personal data? Get in touch with us and we will delete it straight away.
11. Changes to this policy
Should we make a change that materially affects the way we handle your data, notice will reach you by email or in your client area before it takes effect. The date printed at the top of this page always shows which version is current. Any questions? Email info@hostingally.com.