Privacy Policy

Last updated: 30.09.2025

Who we are

HafodHost (“we”, “us”) provides domain registration and hosting services.

Registered address: Hafod Y Werin, Llanboidy, Whitland, Carmarthenshire SA34 0ET UK.
Contact: support@hafodhost.co.uk.

What we collect

Account & order data: name, address, email, phone; order history; invoices.
Domain registrant data (when you register domains): registrant/administrative/technical contacts; nameservers.
Payment data: processed by our payment provider (we don’t store full card details).
Support data: messages, tickets, attachments, call notes.
Technical data: IP addresses, device/browser info, cookies, usage logs for security and diagnostics.

Why we use your data (GDPR legal bases)

To provide services & fulfil contracts (Art. 6(1)(b)): create your account, process orders, register/renew domains, deliver hosting, provide support.
To comply with legal/regulatory duties (Art. 6(1)(c)): tax/audit record‑keeping; responding to lawful requests; registry/ICANN obligations.
Legitimate interests (Art. 6(1)(f)): account security, fraud prevention, prevent abuse, service improvement, non‑intrusive service messages.
Consent (Art. 6(1)(a)): optional marketing emails (you can withdraw any time).

Sharing your data

We share only what’s necessary with:

Domain registries / registrars (e.g., Nominet for .UK; other TLD registries; our registrar partner 20i) to create/manage your domains.
Payment processors (e.g., Stripe) to take payments and prevent fraud.
Infrastructure & support vendors (e.g., hosting control panel, email delivery, ticketing). Each acts as our processor under a data‑processing agreement.
Law enforcement or regulators where required by law.

International transfers

Some partners may be outside the UK/EEA. Where that’s the case, we rely on adequacy regulations, Standard Contractual Clauses or equivalent safeguards.

Retention

Account, invoice and order records: 6 years (UK tax rules), then securely deleted/anonymised.
Support tickets: typically 3 years from closure.
Domain data: kept for the life of the domain and a short period after expiry per registry rules.

Your rights

You have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent for marketing. To exercise these, email support@hafodhost.co.uk. You can also complain to the UK ICO.

Cookies

We use cookies for cart/checkout (WooCommerce), login sessions, and security. See our separate Cookie Policy for details and choices.

Contact

For privacy queries: support@hafodhost.co.uk.
Postal: Hafod Y Werin, Llanboidy, Whitland, Carmarthenshire SA34 0ET