Personal Data and General Confidentiality Agreement

Privacy Policy & Data Protection

Last Updated: December 2025

At ErkmenHost Ltd. ("we", "us", "our"), we are committed to protecting and respecting your privacy. As a UK-based company operating servers in the EU (France and Poland), we adhere to the UK Data Protection Act 2018 (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

1. Information We Collect

We collect only the data necessary to provide our hosting, VPS, and dedicated server services effectively. This includes:

• Identity Data: First name, last name, username, and company name (if applicable).
• Contact Data: Billing address, email address, and telephone numbers.
• Technical Data: IP addresses, login data, browser type, and version used to access our Client Area or DirectAdmin panels.
• Transaction Data: Details about payments to and from you and other details of services you have purchased from us.

2. How We Use Your Information

We process your personal data under the following legal bases:

• Performance of Contract: To process your orders, register domains, set up VPS/Dedicated servers, and provide technical support.
• Legal Obligation: To comply with tax laws (HMRC) and fraud prevention regulations.
• Legitimate Interests: To improve our infrastructure security, prevent DDoS attacks, and enhance our service offerings.

3. Payment Security (PCI-DSS)

We take the security of your financial data seriously. We do not store your full credit card or debit card numbers on our servers.

All transactions are processed through secure, PCI-DSS compliant third-party payment gateways. Your payment data is encrypted using 256-bit SSL technology during transmission. We only retain the necessary tokens to process renewals or verify ownership, which are meaningless to unauthorized parties.

4. Data Sharing and Third Parties

We do not sell your data to advertisers. However, to provide our services, we may share specific data with trusted third-party processors:

• Infrastructure Providers: OVHcloud (France/Poland) for server hosting.
• Domain Registrars: To register domain names on your behalf (e.g., ICANN, Nominet, Trabis). WHOIS privacy protection is available where applicable.
• Payment Processors: To securely handle your transactions.
• Legal Authorities: If required by law (e.g., a court order), we may disclose information to law enforcement agencies in the UK or the jurisdiction where the server is located.

5. Data Retention and Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. This includes firewalls, access controls, and regular security audits.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6. Your Legal Rights

Under data protection laws, you have rights including:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): Ask us to delete your data where there is no good reason for us to continue processing it (unless we are required to keep it for tax/legal records).
• Right to Correction: Request correction of inaccurate data via your Client Area.

7. Contact Us

If you have any questions about this privacy policy or our data practices, please contact our Data Protection Officer:

Email: hello@erkmenhost.com
Company: ErkmenHost Ltd.
Registered Office: United Kingdom