Privacy policy

Last updated: May 2026

WebsiteServers.co.uk (trading name of CreativeWP Ltd) respects your privacy. This policy explains how we collect, use, store, and protect personal data when you use edinburgh.websiteservers.co.uk, our client portal, checkout, and related services.

1. Who we are

Data controller: CreativeWP Ltd trading as WebsiteServers.co.uk.
Contact: support@websiteservers.co.uk

2. Data we collect

• Identity & contact: name, email, organisation, billing address, phone where you provide them.
• Account & service: portal activity, domains, hosting configuration, support tickets, invoices, and agreement acceptances.
• Payment: billing references and transaction IDs from our payment provider (we do not store full card numbers).
• Technical: IP address, browser type, server logs, security events, and cookie/consent preferences (see our Cookie policy).
• Communications: emails and messages you send to support or sales.

3. How we use data

We process personal data to provide and bill for services, operate the portal, respond to enquiries, prevent fraud and abuse, meet legal and tax obligations, improve our platform, and—where permitted—send service or marketing communications. You can opt out of marketing email at any time.

4. Legal basis (UK GDPR)

• Contract — delivering the services you order.
• Legitimate interests — security, fraud prevention, service improvement, and proportionate B2B marketing.
• Legal obligation — tax, accounting, and regulatory requirements.
• Consent — non-essential cookies, optional marketing, and other choices you make in the cookie banner or forms.

5. Sharing & processors

We use trusted suppliers for hosting infrastructure, domain registries, email delivery (e.g. Resend), payments (Stripe), and professional advice. They process data only on our instructions and under appropriate contracts. We do not sell personal data.

6. International transfers

Some suppliers may process data outside the UK. Where they do, we rely on UK adequacy decisions, standard contractual clauses, or equivalent safeguards.

7. Retention

We keep account and billing records for as long as needed to provide services and meet legal retention periods (typically up to six years for financial records), then delete or anonymise data where it is no longer required.

8. Security

We apply access controls, encryption in transit, monitoring, and staff training appropriate to a hosting provider. No method of transmission over the internet is completely secure; please use strong passwords and report suspected incidents promptly.

9. Your rights

You may request access, correction, erasure, restriction, portability, or object to processing where applicable. Contact support@websiteservers.co.uk. We respond within one month in most cases. You may complain to the Information Commissioner's Office (ICO).

10. Children

Our services are aimed at businesses and adults. We do not knowingly collect data from children under 16.

11. Changes

We may update this policy. The "last updated" date will change and material updates will be highlighted on this page or by email where appropriate.