Last updated: 15 October 2026
This policy explains what personal information MyWebsiteHost collects, why, who we share it with and what rights you have. We keep it as short as we can.
Who we are
MyWebsiteHost is a trading name of Graeme Preston, a sole trader based in Fiskerton, Southwell, Nottinghamshire, United Kingdom. We are the data controller for the information described here.
Contact: email sales@mywebsitehost.co.uk or open a support ticket.
What we collect
- Account details: your name, company name, email address, postal address and phone number.
- Billing details: your invoices and payment history. Card payments are handled by Stripe; we never see or store your full card number.
- Domain registrant details: the contact details registries require for each domain you register.
- Support records: your support tickets and our replies.
- Technical data: IP addresses, login times and server logs, used for security and to run the service.
- Website usage: how visitors use our website, through Google Analytics. See our Cookie Policy.
- Content you host with us: the files, databases and email on your services. We only access these when you ask us to, or when we need to for security or to fix a fault.
Why we use it, and our lawful basis
- To provide the services you've ordered, including setup, billing, renewals, support and domain registration. Lawful basis: contract.
- To keep accounting and tax records. Lawful basis: legal obligation.
- To prevent fraud and protect our servers and other customers. Lawful basis: legitimate interests.
- To send service notices, such as maintenance, security alerts and changes to our terms. Lawful basis: contract and legitimate interests.
- To send occasional news and offers, only if you've agreed or are an existing customer, and you can unsubscribe at any time. Lawful basis: consent or legitimate interests.
- To understand how our website is used. Lawful basis: consent.
We don't sell your information, and we don't use it for automated decision-making that has legal effects on you.
Who we share it with
We only share what each provider needs to do its job, and they may only use it on our instructions:
- WHMCS (WebPros): our billing and client area platform.
- OVHcloud: our hosting servers, in a London data centre.
- Stripe: card payments.
- MaxMind: fraud checks on new orders.
- ResellerClub and the domain registries: registering and managing domains. Registrant details are shared with the registry for each domain (for example Nominet for .uk), and some may appear in public WHOIS records depending on the registry's rules.
- Open-Xchange: Professional Email mailboxes.
- Providers of the add-on services you choose, such as SSL certificate authorities, SiteLock, CodeGuard and Weebly, through WHMCS MarketConnect.
- Google: website analytics, and "Sign in with Google" if you choose to use it.
- Mailchimp: email newsletters, if you've subscribed.
- IRIS KashFlow: our accounting records.
We may also disclose information when the law requires it, for example to the police or a court.
Transfers outside the UK
Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework) or by the ICO's approved international data transfer agreement or addendum.
How long we keep it
- Account and support records are kept while you're a customer and for up to two years afterwards, so we can deal with any questions.
- Invoices and payment records are kept for as long as HMRC requires, currently at least five years after the 31 January tax return deadline for the year they relate to.
- Hosting data is deleted when the service is terminated. Backup copies are overwritten in the normal backup cycle.
Your rights
You can ask us to:
- give you a copy of the information we hold about you;
- correct anything that's wrong;
- delete your information, where we don't need to keep it for a contract or by law;
- restrict or object to how we use it, including stopping marketing at any time;
- send your information to you or another provider in a portable format.
Where we rely on your consent, you can withdraw it at any time. To use any of these rights, open a ticket or email us. We'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office. If you're in the European Union, you can complain to the data protection authority in your country.
Security
Our website and client area use encrypted connections, card details are handled only by Stripe, and access to customer data is limited to the people who need it to run the service.
Changes
We'll update this page if anything changes, and tell you by email about any significant change.
