Privacy policy

1. Who we are

This website and the WillowHost hosting service are operated by Willow Host, a sole trader based in Belfast, Northern Ireland (the "we", "us" or "our" in this policy). We are registered with the Information Commissioner's Office under registration number ZC143767.

For data protection purposes, we act as a data controller for the personal data of our own enquirers and customers, and as a data processor when we host websites on behalf of our customers and process personal data contained in those sites on their instructions.

2. What data we collect

We collect only what we need to run the service:

• Enquiry details — your name, email address, and anything you choose to tell us when you get in touch.
• Customer details — contact and billing information needed to provide and invoice for your service.
• Technical data — limited information needed to operate, secure and back up the hosting.
• Website analytics — privacy-respecting analytics that do not track visitors across the web. Confirm provider once analytics is added

3. Why we use it

We use your data to respond to enquiries, provide and maintain your website and hosting, take payment, provide support, and meet our legal and tax obligations. We do not sell your data, and we do not use it for advertising.

4. Legal basis

We rely on contract (to provide the service you've asked for), legitimate interests (to run and secure the business), and legal obligation (for tax and accounting records). Where we rely on consent — for example any future marketing — you can withdraw it at any time.

5. Who we share it with

We rely on a small number of carefully chosen sub-processors to deliver the service, all within the UK, EU or Switzerland — there is no US cloud in the chain. A current list, with locations and purposes, is available on request. Finalise the sub-processor list We do not share your data with anyone else except where required by law.

6. Where your data lives

Client websites are hosted in the United Kingdom (Manchester). Our supporting services sit within the UK, EU or Switzerland. Backups are encrypted, and for customer sites the encryption key is held by you — meaning we store the backup but cannot read its contents. Confirm UWH data centre location and Bunny EU-only routing

7. How long we keep it

We keep enquiry data only as long as needed to deal with your enquiry, customer data for the life of your account, and financial records for as long as tax law requires (currently six years). When data is no longer needed, we delete it securely. Confirm exact retention periods

8. Your rights

Under UK GDPR you have the right to access your data, correct it, ask us to delete it, restrict or object to its use, and request a portable copy. You also have the right to complain to the Information Commissioner's Office (ico.org.uk). To exercise any of these, just contact us.

9. How to contact us

For anything to do with your data, email hello@willowhost.co.uk. Our postal address is SERVICE ADDRESS TBC.