This policy explains what personal information Havenswift Hosting collects, why we collect it, who else sees it, how long we keep it and what your rights are. It covers this website, our client area at havenswift-hosting.co.uk/clients/, and the services you buy from us. If something is not described here, we are not collecting it.
Havenswift Hosting Ltd is the data controller for the information described in this policy. We are registered in England and Wales under company number 12358615, and with the Information Commissioner’s Office under registration number ZA872175.
Data protection contact
Email: [email protected]
Post: Data Protection Contact, Havenswift Hosting Ltd, 71-75 Shelton Street, London, WC2H 9JQ
You can also raise a support ticket from your client area.
UK data protection law requires a legal reason for each use of your information. The reason is shown in brackets.
Your account details. Your name, company name, postal address, email address, phone number and VAT number if you give one. We use these to set up and run your services, send invoices and keep licence records. (Needed to fulfil our contract with you.)
Orders and payments. What you have bought, what you have been invoiced for and what you have paid. You can pay by card or by bank transfer. Card payments are handled by Stripe, and we never see or store your full card number. When you save a card, Stripe holds it and gives us a token that can only be used by us to charge you. We keep the last four digits and the expiry date so you can tell your cards apart. For bank transfers we record the payment against your invoice. (Contract, and a legal obligation to keep financial records.)
Support tickets. What you write to us and anything you attach, such as error messages, logs or access details you choose to give us so we can fix a problem. (Contract.)
Fraud checks on orders. Your name, email address, billing address, IP address and order details are checked by FraudLabs Pro (see section 3). (Our legitimate interest in preventing fraud, which also protects you.)
Server and website logs. When you visit this website or use our servers, your IP address, browser type and the pages or files requested are logged automatically. We use this to keep our network secure, block attacks and investigate faults. (Legitimate interests.)
Website visitor statistics. We use Cloudflare Web Analytics to count visits and see which pages are read. It uses no cookies and does not identify you or follow you across other websites. (Legitimate interests.)
Blog comments. If you comment on an article, we keep your name, email address, website if you give one, IP address and the comment itself. Your email address is never published. Comments are checked for spam on our own server. If you have a Gravatar account, a scrambled version of your email address is sent to Gravatar (run by Automattic) so your picture can be shown. (Legitimate interests.)
Marketing email. If you are a customer, we may occasionally email you about our own similar services. You can say no when you sign up, and every email has an unsubscribe link. (Legitimate interests.)
We send all our emails, including invoices and notices, from our own servers. We do not use a third-party mailing service.
When you place an order, FraudLabs Pro checks the details against known fraud patterns and gives the order a risk score. If the score is high, the order is held automatically instead of being processed straight away. If that happens and you think the decision is wrong, raise a ticket or email us and a member of staff will review it.
We do not sell your information, and we do not pass it to anybody for their own marketing. We share only what each of these needs for its job:
We will also disclose information when the law requires it, for example to the police with a valid legal request.
Some of these providers process information outside the UK. Where they do, it stays protected:
The websites, databases and mailboxes we host for you belong to you, and you are the data controller for any personal information in them. We process that information only on your behalf and under our hosting agreement. We do not look at it except where we need to fix a fault you have reported, remove malware or keep our servers secure. Automated malware scanning runs across all hosted accounts.
Connections to this website and the client area are encrypted. Our servers are protected by firewalls and malware scanning, and staff only access your account when they are dealing with something for you. If a breach puts your information at risk, we will report it to the ICO within 72 hours where the law requires it, and tell you directly if it is likely to cause you serious harm.
This website uses no advertising or tracking cookies, and our visitor statistics use none at all. The only cookies set are ones the site needs to work:
The law does not require consent for cookies that are strictly necessary like these. If we ever add optional cookies, we will ask first. You can block cookies in your browser settings, but the client area and checkout will not work without them.
Every marketing email has an unsubscribe link, and unsubscribing takes effect straight away. You can also change your email preferences in your client area, or raise a ticket with the subject “No Marketing”.
Service emails, such as invoices, renewal reminders and fault notices, are part of your account working and are not marketing. You will keep getting them while you have services with us.
You have the right to:
There is no charge. Email or write to us using the details in section 1. We will reply within one month, or tell you within that month if a complex request needs up to two more months.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
This policy covers only our own website and services. Websites we link to have their own privacy policies.
We will update this page when our practices change, and tell customers by email about any significant change.
Last updated 17 September 2026.