MevoHost Ltd ("MevoHost", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.
1. Who We Are
MevoHost Ltd is a company registered in England and Wales. Our registered address is available upon request. We act as the data controller for personal data collected through our website and services.
2. Data We Collect
Account & Billing Data
When you create an account or make a purchase, we collect your name, email address, billing address, and payment method details. Payment card data is handled directly by our PCI-DSS-compliant payment processor and is never stored on our servers.
Technical & Usage Data
We automatically collect IP addresses, browser type, operating system, referring URLs, pages visited, and timestamps when you interact with our website. This data is used to maintain security, prevent fraud, and improve our services.
Support Communications
When you contact our support team, we retain records of those communications — including ticket content, attachments, and chat logs — to resolve your issue and improve service quality.
Cookies
We use cookies and similar tracking technologies as described in our Cookie Policy.
3. How We Use Your Data
- To provide, maintain, and improve our hosting services
- To process payments and send billing notifications
- To respond to support requests and communicate with you
- To send service announcements and security alerts (these cannot be opted out of)
- To send marketing emails where you have given consent (you may opt out at any time)
- To detect and prevent fraud, abuse, and security threats
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
For users in the UK and European Economic Area, our legal bases for processing personal data are:
- Contract: Processing necessary to deliver the services you have purchased
- Legitimate interests: Security monitoring, fraud prevention, and service improvement
- Consent: Marketing communications and non-essential cookies
- Legal obligation: Compliance with applicable laws and regulations
5. Data Sharing
We do not sell your personal data. We share data only with:
- Payment processors (Stripe, PayPal) to handle billing
- Infrastructure providers who host our services under strict data processing agreements
- Support tools (e.g. ticketing software) necessary to provide customer support
- Law enforcement when required by valid legal process
6. Data Retention
We retain account data for the duration of your subscription plus 90 days after account closure, unless a longer retention period is required by law. Billing records are retained for 7 years for accounting purposes. Support records are retained for 3 years.
7. Your Rights
Under UK GDPR and applicable data protection laws, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten"), subject to legal retention obligations
- Object to or restrict certain processing activities
- Request a portable copy of your data
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at privacy@mevohost.com. We will respond within 30 days.
8. Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, access controls, and regular security audits. No system is perfectly secure; we encourage you to use a strong, unique password and enable two-factor authentication on your account.
9. International Transfers
Our primary data centres are located in the UK and EU. Where data is transferred outside these regions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO or European Commission.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered customers of material changes by email at least 14 days before they take effect. Continued use of our services after that date constitutes acceptance.
11. Contact
For privacy enquiries, contact our Data Protection Officer at privacy@mevohost.com or by post to our registered address.