Privacy Policy

Last updated: 2 November 2026

This policy explains what personal information MyWebsiteHost collects, why, who we share it with and what rights you have. We keep it as short as we can.

Who we are

MyWebsiteHost is a trading name of Graeme Preston, a sole trader based in Fiskerton, Southwell, Nottinghamshire, United Kingdom. We are the data controller for the information described here.

Contact: our support page.

What we collect

Account details: your name, company name, email address, postal address and phone number.
Billing details: your invoices and payment history. Card payments are handled by Stripe; we never see or store your full card number.
Domain registrant details: the contact details registries require for each domain you register.
Support records: your support tickets and our replies.
Support chats: what you type to the assistant on our support page or send us on WhatsApp (and your WhatsApp number). Anything that looks like a password or card number is removed before it's stored.
Technical data: IP addresses, login times and server logs, used for security and to run the service.
Website usage: how visitors use our website, through Google Analytics, and, only if you agree, whether a visit that started with one of our Google adverts led to an enquiry. See our Cookie Policy.
Content you host with us: the files, databases and email on your services. We only access these when you ask us to, or when we need to for security or to fix a fault.

Why we use it, and our lawful basis

To provide the services you've ordered, including setup, billing, renewals, support and domain registration. Lawful basis: contract.
To keep accounting and tax records. Lawful basis: legal obligation.
To prevent fraud and protect our servers and other customers. Lawful basis: legitimate interests.
To send service notices, such as maintenance, security alerts and changes to our terms. Lawful basis: contract and legitimate interests.
To send occasional news and offers, only if you've agreed or are an existing customer, and you can unsubscribe at any time. Lawful basis: consent or legitimate interests.
To understand how our website is used. We use Google Analytics only to produce statistics about our website so we can improve it. It runs unless you switch it off, which you can do at any time (see our Cookie Policy). Lawful basis: legitimate interests.
To see whether our adverts work. If you agree to advertising cookies on our main website, Google Ads tells us when someone who clicked one of our adverts goes on to send us a website brief. We don't use it to show you adverts or to build advertising audiences. Lawful basis: consent, which you can withdraw at any time (see our Cookie Policy).

We don't sell your information, and we don't use it for automated decision-making that has legal effects on you.

We only share what each provider needs to do its job, and they may only use it on our instructions:

WHMCS (WebPros): our billing and client area platform.
OVHcloud: our hosting servers, in a London data centre.
Stripe: card payments.
MaxMind: fraud checks on new orders.
ResellerClub and the domain registries: registering and managing domains. Registrant details are shared with the registry for each domain (for example Nominet for .uk), and some may appear in public WHOIS records depending on the registry's rules.
Open-Xchange: Professional Email mailboxes.
Anthropic: the AI (Claude) that answers support chats on our website and WhatsApp. It sees the conversation but not your account, and under its commercial terms Anthropic doesn't use it to train its models.
Meta (WhatsApp): messages you send us on WhatsApp travel through Meta's WhatsApp Business platform.
Slack: alerts to our team when a chat is passed to them.
Providers of the add-on services you choose, such as SSL certificate authorities, SiteLock, CodeGuard and Weebly, through WHMCS MarketConnect.
Google: website analytics, advertising measurement (only if you agree to advertising cookies), and "Sign in with Google" if you choose to use it.
Mailchimp: email newsletters, if you've subscribed.
IRIS KashFlow: our accounting records.

We may also disclose information when the law requires it, for example to the police or a court.

Transfers outside the UK

Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework) or by the ICO's approved international data transfer agreement or addendum.

How long we keep it

Support chats are deleted after 90 days; a chat passed to our team becomes part of your support ticket.
Account and support records are kept while you're a customer and for up to two years afterwards, so we can deal with any questions.
Invoices and payment records are kept for as long as HMRC requires, currently at least five years after the 31 January tax return deadline for the year they relate to.
Hosting data is deleted when the service is terminated. Backup copies are overwritten in the normal backup cycle.

Your rights

You can ask us to:

give you a copy of the information we hold about you;
correct anything that's wrong;
delete your information, where we don't need to keep it for a contract or by law;
restrict or object to how we use it, including stopping marketing at any time;
send your information to you or another provider in a portable format.

Where we rely on your consent, you can withdraw it at any time. To use any of these rights, open a ticket or email us. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office. If you're in the European Union, you can complain to the data protection authority in your country.

Security

Our website and client area use encrypted connections, card details are handled only by Stripe, and access to customer data is limited to the people who need it to run the service.

Changes

We'll update this page if anything changes, and tell you by email about any significant change.