Privacy policy | Rampage Hosting

# Privacy Policy

Rampage Hosting is a trading name of John Lamb, a sole trader in the United Kingdom. We are the "controller" of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018).
Contact: [email protected] · Address: [BUSINESS ADDRESS]

Last updated: [DATE]

1. What we collect

Account and billing details: name, email address, postal address, phone number (if given), and your order and invoice history.
Payment details: card payments are processed by Stripe. We do not see or store your full card number.
Service data: your server settings, files you upload, server logs and IP addresses used to connect to our panel and servers.
Support: messages you send us by ticket, email or Discord.
Website data: basic technical data (IP address, browser type) in server logs, and essential cookies needed for logging in and checkout.

2. Why we use it (and our legal basis)

| Purpose | Legal basis |
|---|---|
| Setting up and running your servers, billing and support | Performing our contract with you |
| Keeping accounts and tax records | Legal obligation |
| Preventing fraud, abuse and attacks; securing our systems | Legitimate interests |
| Sending service emails (invoices, renewal reminders, outages) | Performing our contract |
| Marketing emails | Only with your consent; you can unsubscribe at any time |

3. Who we share it with

We only share what is needed with these providers, who act on our instructions:
- Stripe: card payments (Stripe may process data outside the UK under approved safeguards)
- Resend: sending our emails
- Cloudflare: DNS, security and email routing
- Our data centre and hosting providers: where our servers and billing system run
We also share data where required by law (for example with HMRC or the police with a valid request). We never sell your data.

4. International transfers

Some providers above may process data outside the UK. Where they do, they use legal safeguards approved under UK law, such as the UK International Data Transfer Agreement or adequacy regulations.

5. How long we keep it

Billing and invoice records: 6 years after the end of the tax year, as required by HMRC.
Account data: while your account is active, then up to 2 years after your last service ends, unless you ask us to delete it sooner (except records we must keep by law).
Server files: deleted when your service is terminated (backups expire on their normal schedule).
Support tickets: up to 2 years after closing.

6. Your rights

You can ask us to access, correct, delete, restrict or transfer your data, and you can object to processing based on legitimate interests. Email [email protected]. We will reply within one month. If you are unhappy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

7. Cookies

We use only essential cookies needed for logging in, keeping your cart and securing the site. We do not use advertising cookies. If this changes, we will ask for your consent first.

8. Security

We use encryption (HTTPS), restricted access, strong passwords and regular updates to protect your data. No system is completely secure, so please use a strong, unique password for your account.

9. Children

Our services are not aimed at children under 13, and we do not knowingly collect their data.

10. Changes

We may update this policy. Significant changes will be shown on our website or emailed to you.