Privacy Policy
This Privacy Policy explains how Garage Tech Ltd ("we", "us") handles personal data in connection with Surf Host and the website https://surfhost.tech (the "Website").
1. Who we are
Surf Host is operated by Garage Tech Ltd, a company registered in England and Wales with its registered office at Stoney Works, 8 Stoney Lane, London, England, SE19 3BD. We are the data controller for the personal data described in this policy.
For any privacy question or request, write to legal@surfhost.tech.
2. Data we collect
When you use Surf Host, we collect:
- Email address. Used to create your account, send server access details and send service messages.
- Billing details. The information needed to issue invoices, such as your name and country.
- Payment history. The date, amount, plan, status and transaction reference of each payment.
- Service configuration. Your plan, operating system and the IP addresses assigned to your server.
- Control panel logs. The IP address, time and actions taken when you sign in to the control panel.
- Support correspondence. The messages you send us and our replies.
Our website hosting provider may briefly process technical request data, such as IP address and browser type, to deliver the Website and protect it against abuse.
3. Data we do not collect
We do not look at the content you store or run on your server, unless you ask us to in a support request or the law requires us to. We do not collect data for advertising, we do not build marketing profiles and we do not sell personal data.
4. How we use your data and our legal bases
We use personal data only for the following purposes:
- To provide the service and manage your account. Legal basis: performance of our contract with you.
- To answer your support requests. Legal basis: performance of a contract, or our legitimate interest in replying to people who contact us.
- To keep accounting and tax records. Legal basis: compliance with our legal obligations.
- To keep the service secure and prevent fraud and abuse. Legal basis: our legitimate interest in protecting the service and its users.
We do not use your data for automated decision-making that has legal or similarly significant effects on you.
5. Payments
We take orders by email. When you order, we send payment instructions to your email address. Payments are processed by third-party payment providers. Depending on the method you choose, this may include card payments, bank transfers and other payment methods. We do not receive or store your full card number or card security code. We receive a confirmation of the payment, its amount, date and a transaction reference.
6. Who we share data with
We share personal data only where needed, and only with:
- payment providers, to process payments and refunds;
- hosting and infrastructure providers that run our systems;
- email delivery providers, to send you service messages;
- professional advisers such as accountants and lawyers;
- courts, regulators and law enforcement authorities, where the law requires us to.
These providers act on our instructions or under their own legal duties. We do not sell personal data and we do not share it for advertising.
7. International transfers
Some of our providers may process data outside the United Kingdom and the European Economic Area. When this happens, we rely on a lawful transfer mechanism, such as adequacy regulations, the UK International Data Transfer Agreement or standard contractual clauses with the UK Addendum.
8. How long we keep data
| Data | Retention period |
|---|---|
| Account data | Deleted 30 days after your account is closed |
| Payment records | 6 years, as required by UK tax and accounting rules |
| Control panel logs | 90 days |
| Support correspondence | 2 years from the last message |
| Data stored on your server | Deleted after the service ends, as described in the Terms of Service |
When a retention period ends, we delete the data or make it anonymous.
9. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- ask for a copy of your personal data;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, write to legal@surfhost.tech. We reply within one month. We may ask you to confirm your identity before we act on a request.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at https://ico.org.uk.
10. Users in the European Economic Area
If you are in the European Economic Area, the EU General Data Protection Regulation also applies to how we handle your data. You have the same rights as listed above, and you may complain to the data protection authority in your country of residence.
11. Cookies
The Website uses only cookies and similar technologies that are strictly necessary for it to work. We do not use analytics cookies, advertising cookies or tracking pixels. Because we use only strictly necessary cookies, we do not show a cookie consent banner.
12. Age
Surf Host is intended for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has given us personal data, write to legal@surfhost.tech and we will delete it.
13. Security
We use technical and organisational measures to protect personal data, including encryption in transit, access controls and limiting access to staff who need it. No system is completely secure, and we cannot guarantee absolute security.
14. Changes to this policy
We may update this policy. We will publish the new version on this page and change the date at the top. If a change is significant, we will tell account holders by email before it takes effect.
15. Contact
Garage Tech Ltd
Registered in England and Wales
Registered office: Stoney Works, 8 Stoney Lane, London, England, SE19 3BD
Support: support@surfhost.tech
Legal and privacy requests: legal@surfhost.tech