Summary
- We collect the data we need to sell, provide, bill and support your hosting, and to answer your enquiries.
- We do not sell your personal data and we do not use it for advertising profiles.
- Our servers are in London, United Kingdom. Where a supplier processes data outside the UK, we use approved safeguards.
- For data you store on your hosting account (for example, your shop's customers), you are the controller and we act as your processor.
- You can access, correct or delete your data and object to certain uses. Email privacy@getradi.eu.
1. Who we are
1.1 This Privacy Policy explains how Getradi Ltd ("Getradi", "we", "us") uses personal data. We are a company registered in England and Wales (company number 16034527) with our registered office at Suite 4.06, 86 Leonard Street, London EC2A 4RH, United Kingdom.
1.2 We are the controller of the personal data described in this policy. We are registered with the Information Commissioner's Office (ICO) under registration number ZB874512.
1.3 We comply with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 ("PECR").
1.4 For any privacy question or request, contact us at privacy@getradi.eu or write to: Data Protection, Getradi Ltd, Suite 4.06, 86 Leonard Street, London EC2A 4RH, United Kingdom. We have not appointed a statutory Data Protection Officer because we are not required to, but our privacy contact is responsible for data protection matters.
2. Who this policy covers
2.1 This policy applies to:
- visitors to getradi.eu;
- people who contact us by email, phone, contact form or support ticket;
- customers and prospective customers, and the people who use or manage customer accounts; and
- people whose details are given to us as a contact for a customer account (for example, a billing or technical contact).
2.2 Data you host with us. When you store personal data on your hosting account (for example, website users, shop customers or mailbox contents), you decide how that data is used and you are the controller. We process it only on your instructions as your processor, under our Data Processing Agreement. This Privacy Policy does not cover that data. If you are a visitor to a website hosted on our platform, please read that website's own privacy notice.
3. The personal data we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact data | Name, company name, email address, phone number, postal address and country | You, when you fill in our order form or contact form, or contact us by email or phone |
| Order data | The plan and billing period you choose, the domain name you will use, whether you want us to migrate an existing website, VAT number and any notes you add to the order form | You, through our order form at getradi.eu/order/ |
| Account data | Hosting account username, encrypted passwords, security settings and account preferences | You and our systems |
| Billing and transaction data | Billing address, VAT number, invoices, payments, refunds, last four digits and expiry date of a card (we never see or store full card numbers) | You and our payment processor |
| Service data | Plans ordered, domains you point to our servers, resource usage, server and access logs (including IP addresses), security and malware scan results | Our systems |
| Support and communication data | Contents of support tickets, emails, contact form messages and notes from phone calls | You and our team |
| Website usage data | IP address, browser type, pages visited, referring page and campaign parameters (such as utm codes), cookie consent choices | Your browser and our web server; see our Cookie Policy |
| Marketing preferences | Whether you have agreed to receive marketing emails, and your unsubscribe history | You |
3.2 We do not intentionally collect special category data (such as health information) about you. Please do not include it in support tickets.
3.3 If you do not provide the data we need to set up your account or take payment, we will not be able to provide the Services.
4. How we use your data and our lawful bases
4.1 We only use personal data when the law allows it. The table below sets out each purpose and the lawful basis we rely on under Article 6 of the UK GDPR.
| Purpose | Lawful basis |
|---|---|
| Processing your order form, checking your order and sending your order confirmation and invoice | Steps taken at your request before entering into a contract; performance of a contract |
| Creating and managing your account, providing and renewing the Services | Performance of a contract |
| Taking payment, issuing invoices and sending renewal reminders | Performance of a contract; legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Answering enquiries and providing technical support | Performance of a contract, or steps taken at your request before entering into one; legitimate interests (answering general enquiries) |
| Sending important service messages (maintenance, security incidents, changes to terms or prices) | Performance of a contract; legal obligation |
| Protecting our network, preventing fraud and abuse, enforcing our Acceptable Use Policy | Legitimate interests (keeping our services and customers secure) |
| Improving our website and Services using aggregated information | Legitimate interests; consent where cookies or similar technologies are used for analytics |
| Sending marketing emails about our own similar services to existing customers | Legitimate interests and the PECR "soft opt-in" — you can opt out at any time |
| Sending marketing emails to people who are not customers | Consent |
| Responding to legal claims and requests from authorities | Legal obligation; legitimate interests (establishing, exercising or defending legal claims) |
4.2 Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You can ask us for more information about this balancing exercise.
4.3 Every marketing email includes an unsubscribe link. You can also opt out by emailing privacy@getradi.eu. Opting out of marketing does not stop service messages that we need to send you.
5. Who we share your data with
5.1 We do not sell your personal data. We share it only with the following recipients, and only as needed for the purposes above:
- Payment processors that handle card and other payments securely on our behalf, in line with the Payment Card Industry Data Security Standard (PCI DSS);
- Our data centre provider in London, United Kingdom, which supplies the physical facilities, power and network for our servers;
- Email delivery providers that send transactional emails such as invoices, reminders and ticket notifications;
- Helpdesk and communication tools we use to manage support tickets and calls;
- Professional advisers such as accountants, auditors, lawyers and insurers, under duties of confidentiality;
- Authorities and regulators, such as HM Revenue & Customs, the police or courts, where the law requires it or to protect our rights or the safety of others; and
- A buyer or successor, if we sell or restructure our business, subject to equivalent protection for your data.
5.2 Our suppliers act as our processors under written contracts that require them to keep your data secure and use it only on our instructions.
6. International transfers
6.1 Our hosting servers, and the data stored on them, are in London, United Kingdom.
6.2 Some of our suppliers (for example, payment or email delivery providers) may process personal data outside the UK. When this happens, we make sure the transfer is protected by one of the following:
- the country has been found by the UK Government to provide an adequate level of protection (for example, countries in the European Economic Area);
- the UK International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment; or
- another safeguard permitted by UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework for certified US recipients.
6.3 You can ask us for a copy of the relevant safeguards by emailing privacy@getradi.eu.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Account and contact data | While your account is open, then 2 years after your last Service ends (to deal with queries and re-activations) |
| Invoices, payments and accounting records | 6 years from the end of the financial year they relate to, as required by HMRC and the Companies Act 2006 |
| Support tickets and emails | 3 years after the ticket is closed |
| Server, access and security logs | Up to 90 days, or longer if needed to investigate a specific security incident or abuse report |
| Hosted account content after a Service ends | Deleted 14 days after the Service ends (see our Terms) |
| Contact form enquiries from non-customers | 12 months after our last reply |
| Marketing preferences and suppression list | As long as needed to respect your choice not to receive marketing |
| Cookie consent choices | 12 months, or until you clear your browser storage |
7.2 We may keep data for longer if we need it to establish, exercise or defend a legal claim.
8. How we protect your data
8.1 We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), hashed passwords, two-factor authentication for staff systems, role-based access controls, a firewall and brute-force login protection on our servers, logging and monitoring, and confidentiality obligations for everyone who works for us.
8.2 No system is completely secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it and, where the risk is high, tell you without undue delay.
9. Your rights
9.1 Under UK data protection law you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data erased in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to processing based on legitimate interests, and to direct marketing at any time;
- data portability — receive data you gave us in a structured, machine-readable format, or ask us to send it to another organisation; and
- withdraw consent at any time where we rely on consent, without affecting processing before you withdrew it.
9.2 To exercise any of these rights, email privacy@getradi.eu. We will respond within one month. If your request is complex, we may extend this by up to two further months and will tell you why. We may need to confirm your identity before we act. We do not usually charge a fee.
9.3 Some rights have exceptions. For example, we cannot delete invoices we are legally required to keep. If we cannot meet your request in full, we will explain why.
10. Automated decision-making
10.1 We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Our systems automatically flag suspected fraud or resource abuse, but a member of our team reviews any decision to refuse an order or terminate a Service.
11. Children
11.1 Our Services are intended for adults. You must be at least 18 to open an account. We do not knowingly collect personal data from children through our website.
12. Cookies
12.1 We use only strictly necessary cookies and similar storage unless you agree to more. Our Cookie Policy explains what we use and how to change your choices.
13. Complaints to the ICO
13.1 If you are unhappy with how we have used your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
14. Changes to this policy
14.1 We may update this Privacy Policy from time to time. The "last updated" date at the top of this page shows when it last changed. If we make significant changes, we will tell customers by email before they take effect.