Privacy Policy

EveryHost is a UK-based managed hosting provider specialising in Magento and eCommerce platforms. When we say "we", "us", or "our" in this policy, we mean EveryHost.

If you have questions about this policy or your data, contact us at support@everyhost.co.uk or call 0333 577 6191.

We may collect the following categories of personal data:

• Enquiry and contact details: name, email address, phone number, company name, and the content of your messages when you get in touch.
• Support communications: ticket content, diagnostic information you share, and any files uploaded during a support interaction.
• Billing information: payment confirmation data, invoice references, and billing contact details. Stripe processes card payments on our behalf; we do not store card numbers.
• Website usage data: device type, browser, pages visited, interaction patterns, and IP address where logged. This is collected automatically when you browse our site.

We use the following third-party services that may process personal data on our behalf:

• Microsoft Clarity: provides session replays and heatmaps so we can understand how visitors use our site and improve the experience. Clarity may use cookies or similar technologies to collect usage data.
• Brevo: our email platform for responding to enquiries, sending service notifications, and marketing emails where you have given consent or it is otherwise permitted.
• Stripe: processes payments securely. We receive payment status and transaction identifiers from Stripe, not full card details.

We use your data for the following purposes:

• To respond to your enquiries, onboard you as a customer, and deliver our hosting services.
• To provide technical support and resolve issues with your hosting environment.
• For security monitoring, abuse prevention, and maintaining the integrity of our infrastructure.
• To improve site usability and conversion through analytics (Microsoft Clarity).
• To send service-related emails and, where permitted, marketing communications (Brevo).

Under UK GDPR, we rely on the following lawful bases:

• Contract: processing necessary to deliver our hosting services and fulfil our obligations to you.
• Legitimate interests: improving our services, securing our infrastructure, and understanding how our site is used, balanced against your rights.
• Consent: for marketing communications and any cookies that require consent under PECR. You can withdraw consent at any time.

Our website uses cookies and similar technologies. These fall into broadly two categories:

• Strictly necessary cookies: required for the site to function (e.g., session management). These do not require consent.
• Analytics cookies: used by Microsoft Clarity to collect information about how visitors interact with our site, including session replays and heatmaps. This data helps us improve usability.

You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may affect site functionality. We are committed to maintaining appropriate cookie controls in line with PECR requirements.

We share personal data only with trusted service providers who process it on our behalf:

• Stripe (payment processing)
• Brevo (email communications)
• Microsoft (Clarity analytics)

We do not sell your personal data. We may disclose data if required by law or to protect our legal rights.

Some of our processors may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses (SCCs), to protect your data in accordance with UK GDPR.

We retain data for different periods depending on purpose:

• Enquiries and contact form submissions: 12 to 24 months
• Support tickets: duration of the contract plus 24 months
• Billing and financial records: 6 years (in line with UK tax and accounting requirements)
• Security and access logs: 30 to 180 days depending on purpose

After the relevant retention period, data is securely deleted or anonymised.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Object to or restrict certain processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time (where consent is the basis)

To exercise any of these rights, contact us at support@everyhost.co.uk.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.