1. Introduction

Cloudcore (“we,” “us,” or “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services, including domain registration, shared hosting, VPS, and dedicated server services through cloudcore.co.

This policy complies with the UK General Data Protection Regulation (UK GDPR), EU GDPR where applicable, and other relevant data protection laws.

2. Data Controller Information

Cloudcore
Company Registration: [Insert Companies House Number]
Registered Address: [Insert UK Registered Address]
Email: [Insert Privacy Email]
Website: cloudcore.co

3. Information We Collect

3.1 Personal Information You Provide

• Account Information: Name, email address, phone number, billing address
• Payment Information: Credit card details, billing information (processed securely through payment processors)
• Identity Verification: Government ID, proof of address (for certain services)
• Domain Registration: Registrant contact information as required by registry policies
• Support Communications: Information provided during customer support interactions

3.2 Technical Information We Collect Automatically

• Website Usage Data: IP addresses, browser type, device information, pages visited
• Service Usage: Server logs, bandwidth usage, resource consumption
• Cookies and Tracking: As detailed in our Cookie Policy
• Performance Data: Uptime monitoring, error logs, system performance metrics

3.3 Information from Third Parties

• Payment Processors: Transaction confirmations and fraud prevention data
• Domain Registries: Registry confirmation data and WHOIS information
• Security Services: Threat intelligence and security scanning results

4. Legal Basis for Processing

We process your personal data under the following legal bases:

4.1 Contract Performance

• Providing hosting and domain services
• Processing payments and billing
• Customer support and service delivery

4.2 Legitimate Interests

• Fraud prevention and security
• Service improvement and optimization
• Marketing to existing customers (with opt-out options)
• System administration and technical support

4.3 Legal Obligations

• Domain registry requirements
• Tax and accounting obligations
• Law enforcement requests
• Regulatory compliance

4.4 Consent

• Marketing communications (where required)
• Optional cookies and tracking
• Additional data uses beyond core services

5. How We Use Your Information

5.1 Service Provision

• Creating and managing your account
• Provisioning hosting services and domains
• Processing payments and billing
• Providing technical support

5.2 Communication

• Service-related notifications
• Account updates and security alerts
• Marketing communications (with consent/opt-out)
• Response to inquiries and support requests

5.3 Business Operations

• Fraud prevention and security monitoring
• Service improvement and development
• Legal compliance and regulatory requirements
• Business analytics and reporting

5.4 Marketing

• Promotional emails about our services (with opt-out)
• Customer satisfaction surveys
• Service recommendations based on usage

6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

We may share your data with:

• Payment Processors: Stripe, PayPal, etc. for payment processing
• Domain Registries: For domain registration and management
• Cloud Infrastructure: AWS, Google Cloud, etc. for service hosting
• Support Tools: Customer service platforms and communication tools
• Security Services: For fraud prevention and security monitoring

6.2 Legal Requirements

We may disclose your information when required by:

• Court orders or legal process
• Law enforcement agencies
• Regulatory authorities
• Protection of our rights and property

6.3 Business Transfers

In the event of merger, acquisition, or sale, your information may be transferred as part of business assets.

6.4 Domain WHOIS Information

Domain registration information is published in WHOIS databases as required by registry policies, unless privacy protection is purchased.

7. International Data Transfers

7.1 Transfer Safeguards

As we serve customers worldwide and use international service providers, your data may be transferred outside the UK/EU. We ensure appropriate safeguards through:

• Adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Other approved transfer mechanisms

7.2 Data Locations

Your data may be processed in:

• United Kingdom
• European Union
• United States (with appropriate safeguards)
• Other countries where our service providers operate

8. Data Retention

8.1 Account Data

• Active accounts: Retained while account is active
• Closed accounts: Deleted within 30 days unless legal obligations require retention
• Billing records: Retained for 7 years for tax and accounting purposes

8.2 Domain Data

• Domain registration data: Retained as required by registry policies
• Domain history: May be retained for dispute resolution

8.3 Technical Data

• Server logs: Retained for 90 days for security and troubleshooting
• Backup data: Retained according to our backup retention policies
• Support communications: Retained for 2 years

9. Your Rights Under Data Protection Law

9.1 Access Rights

• Right to request copies of your personal data
• Right to information about how your data is processed

9.2 Rectification Rights

• Right to correct inaccurate personal data
• Right to complete incomplete data

9.3 Erasure Rights (“Right to be Forgotten”)

• Right to deletion in certain circumstances
• Subject to legal obligations and legitimate interests

9.4 Restriction Rights

• Right to restrict processing in certain circumstances
• Right to object to processing based on legitimate interests

9.5 Portability Rights

• Right to receive your data in a structured format
• Right to transfer data to another service provider

9.6 Objection Rights

• Right to object to direct marketing
• Right to object to processing based on legitimate interests

10. Exercising Your Rights

To exercise your data protection rights:

• Email: [Insert Privacy Email]
• Subject Line: “Data Protection Request”
• Include: Your account details and specific request

We will respond within one month of receiving your request.

11. Data Security

11.1 Technical Measures

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive data
• Regular security assessments and penetration testing
• Access controls and authentication systems

11.2 Organizational Measures

• Staff training on data protection
• Data processing agreements with third parties
• Incident response procedures
• Regular policy reviews and updates

11.3 Breach Notification

We will notify relevant authorities and affected individuals of data breaches as required by law, typically within 72 hours of discovery.

12. Cookies and Tracking

12.1 Cookie Types

• Essential Cookies: Required for website functionality
• Analytics Cookies: Google Analytics and similar services
• Marketing Cookies: For advertising and retargeting
• Preference Cookies: To remember your settings

12.2 Cookie Management

You can manage cookies through:

• Browser settings
• Our cookie consent banner
• Opt-out tools provided by advertising networks

13. Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

14. Marketing Communications

14.1 Opt-In/Opt-Out

• Service-related emails are necessary for account management
• Marketing emails require consent or legitimate interest
• You can unsubscribe at any time using links in emails

14.2 Communication Preferences

Manage your preferences through:

• Account settings
• Unsubscribe links
• Contacting our support team

15. Third-Party Links and Services

Our website may contain links to third-party websites. This Privacy Policy does not apply to external sites, and we are not responsible for their privacy practices.

16. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities and regularly review our data processing practices.

17. Complaints and Supervisory Authority

17.1 Complaints to Cloudcore

Contact us first to resolve any privacy concerns:

• Email: [Insert Privacy Email]
• We will investigate and respond promptly

17.2 Regulatory Complaints

You have the right to lodge complaints with:

• UK: Information Commissioner’s Office (ICO) – ico.org.uk
• EU: Your local data protection authority

18. Policy Updates

18.1 Change Notifications

We may update this Privacy Policy to reflect:

• Changes in our services
• Legal or regulatory requirements
• Best practice developments

18.2 Notice Period

• Material changes: 30 days advance notice
• Minor updates: Posted with updated date
• Continued use constitutes acceptance

19. Contact Information

For privacy-related questions or requests:

Data Protection Officer
Email: [Insert Privacy Email]
Address: [Insert UK Registered Address]
Phone: [Insert Phone Number]

General Inquiries
Website: cloudcore.co
Email: [Insert General Email]

20. Specific Service Privacy Information

20.1 Domain Registration

• Contact information published in WHOIS databases
• Registry policies may require data retention
• Privacy protection services available

20.2 Hosting Services

• Technical logs for security and performance
• Backup data for service continuity
• Customer content remains your property

20.3 VPS and Dedicated Servers

• Administrative access logs
• Security monitoring data
• Performance metrics

---

This Privacy Policy was last updated on September 14 -2025. Please review it regularly for any changes.