DynHost

Privacy policy

Effective date: 2026-06-14

1. Introduction

DynHost (a trading name of DynDev Ltd) (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at dynhost.co.uk, sign up for an account, or use our hosting, domain registration, and related services (together, the “Services”).

We process your personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”).

2. Who we are

For the purposes of UK GDPR, the data controller is:

DynHost (a trading name of DynDev Ltd)
Registered office: 1 Borrowdale Close, Eastbourne, East Sussex, BN23 8HX
Company number: 17089603 (registered in England and Wales)
VAT number: Not currently VAT-registered (below the £90,000 threshold)
ICO data protection fee registration: In progress
Email: privacy@dynhost.co.uk

3. Data Protection Officer

Our Data Protection Officer (or, where we are not required to appoint one, the person responsible for data protection matters) is:

DynHost data protection lead
Email: privacy@dynhost.co.uk

4. Personal data we collect

We collect the following categories of personal data:

4.1 Data you provide directly

  • Identity and contact data: name, email address, postal address, telephone number.
  • Account credentials: username, password (stored as a cryptographic hash), two-factor authentication settings.
  • Billing data: billing address, payment-method tokens.
  • Communications: the content of any messages, support tickets, emails, or other correspondence you send us.
  • Identity verification data: where required by law or to prevent fraud.

4.2 Data collected automatically

  • Technical data: IP address, browser type and version, operating system, device identifiers.
  • Usage data: pages visited, features used, time on page, click patterns.
  • Server logs: your IP address, requested resources, response codes, and timestamps, retained for 90 days.

5. How we use your personal data

We use your personal data for the following purposes and on the following lawful bases:

  • Providing the Services: contractual necessity (UK GDPR Art. 6(b))
  • Payment processing and fraud prevention: contractual necessity and legitimate interests (UK GDPR Art. 6(b), (f))
  • Service-related communications: contractual necessity and legitimate interests (UK GDPR Art. 6(b), (f))
  • Support requests: contractual necessity and legitimate interests (UK GDPR Art. 6(b), (f))
  • Marketing communications: consent (UK GDPR Art. 6(a))
  • Legal, tax, and accounting obligations: legal obligation (UK GDPR Art. 6(c))
  • Enforcing our Terms and AUP: legitimate interests (UK GDPR Art. 6(f))

6. Who we share your personal data with

We do not sell your personal data to third parties. We share it only with:

  • Sub-processors listed at dynhost.co.uk/legal/sub-processors: Stripe (payments), Cloudflare (DNS/security), Contabo (infrastructure, UK), our email delivery provider (SMTP), Enom/Namecheap (domains) and Plausible (analytics).
  • Domain registries including Nominet and ICANN-accredited registrars.
  • Law enforcement and regulators where required by law.
  • Professional advisers (lawyers, accountants, auditors) under duties of confidentiality.
  • Successors in business in the event of a merger, acquisition, or sale of assets.

7. International data transfers

Some sub-processors are located outside the UK. Where we transfer personal data outside the UK, we rely on appropriate safeguards: UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU SCCs, or the UK-US Data Bridge. A summary is maintained at dynhost.co.uk/legal/sub-processors.

8. Data retention

  • Account data: duration of customer relationship + 6 years (tax/accounting)
  • Billing and invoice records: 6 years from transaction (HMRC requirement)
  • Server logs: 90 days
  • Support tickets: 6 years from closure
  • Backups: 30 days rolling

9. Your rights

Under the UK GDPR, you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request that we delete your data where it is no longer necessary.
  • Restriction — request that we limit processing in certain circumstances.
  • Data portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — at any time, where we rely on consent.
  • Lodge a complaint with the Information Commissioner’s Office at ico.org.uk.

To exercise any of these rights, contact us at privacy@dynhost.co.uk. We will respond within one calendar month.

10. Security

We implement appropriate technical and organisational measures including TLS 1.2+ in transit, AES-256 encryption at rest, two-factor authentication, least-privilege access controls, regular backups, and incident response procedures.

11. Changes to this Privacy Policy

We may update this policy from time to time. Material changes will be notified by email or via a prominent notice on the website at least 30 days before they take effect.

12. Contact

DynHost (a trading name of DynDev Ltd)
Company number: 17089603
Email: privacy@dynhost.co.uk