Privacy notice
How Zentrix uses the personal data of its customers and website visitors.
Last updated: [date]. This notice is written for UK GDPR and the Data Protection Act 2018.
Who we are
My Company ("Zentrix", "we") is the data controller for the personal data described here. [Registered address]. ICO registration number [number]. Data protection contact: .
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, email address, phone number, postal address | Your account, your orders and invoices, and the registrant details a domain name must carry | Contract; legal obligation (accounting records, UK VAT) |
| Domain names, hosting plans and servers you order, their DNS records, mailbox addresses and SSH public keys | Setting up and running the services you buy | Contract |
| Payment details | Taking payment. Card details go to our payment provider and are never stored by us | Contract |
| Login, IP address and the pages you visit when signed in | Keeping your account secure and our service running | Legitimate interests (security) |
| Service emails: order confirmations, invoices, renewal and expiry reminders, suspension notices | Telling you about the services you have with us | Contract |
We do not send marketing email unless you have asked for it, and every marketing email has an unsubscribe link.
Who we share it with
To provide the services we pass the data each one needs to the infrastructure suppliers that run them on our behalf: a domain registrar, a web hosting and email platform and a virtual server provider. They act as our processors or, for domain registration, as independent controllers bound by the registry's rules. Your registrant details are protected by WHOIS privacy where the registry allows it. We also share data with our payment provider, our accountants and, where the law requires, with HMRC or other authorities. We never sell your data.
Some suppliers process data outside the UK, in the European Economic Area or the United States. Those transfers rely on the UK adequacy regulations or the International Data Transfer Agreement.
How long we keep it
- Account and service details: while you have an account with us.
- Records of a cancelled service (DNS records, mailboxes, provider references): [365] days after cancellation, then deleted automatically.
- Invoices and payment records: 6 years after the end of the financial year, as UK tax law requires.
- Logs: [90] days.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to the data protection contact above. We answer within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use the cookies needed to sign you in and keep your basket, and no others unless you accept them in the cookie banner.