Privacy policy

Who is responsible for your data

VESOPA EPOS LTD, 1 High Street, Pontardawe, Swansea, SA8 4HU, is the data controller for the personal data described here. Contact us at hosting@vesopaepos.com about anything in this policy.

What we collect, and why

Account and billing details

Your name, email address, postal address, phone number and company name. We need these to provide the service, to invoice you, and — for domain registrations — because the registry requires a real registrant. Legal basis: performance of a contract.

Payment information

We never see or store your card number. Payments are handled by our payment provider on their own systems; we receive only a reference and the last four digits.

Technical logs

Server logs record IP addresses, requests and timestamps. We use them to keep the service running, to investigate faults and to detect abuse. Legal basis: our legitimate interest in operating a secure service. Retained for 90 days.

Support correspondence

Tickets and emails you send us, kept so that the next person to help you can see what has already been tried.

Your customers' data

Whatever you store on your hosting account is yours. We do not access it except when you ask us to, when we must to fix a fault or investigate abuse, or when legally required. In respect of that data you are the controller and we are your processor.

What we do not do

• We do not sell your personal data. Not to anyone, for any price.
• We do not run advertising trackers on this website. There is no analytics cookie, no pixel and no third-party script.
• We do not read your email or your site's database for any purpose of our own.

Cookies

This site sets a small number of strictly necessary cookies: one to keep you signed in, one to protect forms against cross-site request forgery, one for your basket, and a short-lived one to carry a status message across a page redirect. There are no analytics or advertising cookies, which is why you have not been shown a consent banner — none is required for cookies that are strictly necessary.

Who we share it with

• Domain registries and our registrar — registrant details, because registration cannot happen otherwise.
• Our payment provider — to take payment.
• Microsoft Azure — our servers are hosted there, in a UK region.
• Law enforcement or a court — where we are legally obliged.

Where your data is held

Hosting infrastructure and backups are in the United Kingdom. Some suppliers may process limited data outside the UK; where they do, we rely on adequacy regulations or standard contractual clauses.

How long we keep it

• Account records — for as long as you are a customer, then 7 years, because HMRC requires it of business records.
• Site data and backups — deleted 30 days after a service ends.
• Server logs — 90 days.
• Support tickets — 3 years.

Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, and to receive it in a portable form. Email us and we will respond within one month.

If you think we have handled your data badly, please tell us first — but you are entitled to complain directly to the Information Commissioner's Office at ico.org.uk.

Security

Passwords are stored hashed with bcrypt and are never recoverable in plain text, including by us. Traffic to this site and to your control panel is encrypted. Accounts on our servers are isolated from one another. We patch on a schedule rather than in response to incidents.

---

Questions about this document? Email hosting@vesopaepos.com or write to VESOPA EPOS LTD, 1 High Street, Pontardawe, Swansea, SA8 4HU.