Legal

Privacy Policy

Last updated: April 2025

Who we are

Monkhost is a web hosting business operating at monkhost.co.uk. When we refer to “we”, “us”, or “Monkhost” in this policy, we mean the individual or entity operating this service. If you have questions about your data, contact us at hello@monkhost.co.uk.

What data we collect

We collect the following personal data when you use our services:

  • Name and email address — when you sign up for hosting or register a domain
  • Billing information — processed securely via 20i HostShop; we do not store card details
  • Domain registrant details — required by registry rules (name, address, email, phone) when registering a domain
  • Technical data — IP address and browser type collected automatically when you visit our site

How we use your data

  • To provision and manage your hosting package and domain registrations
  • To send service-related communications (renewal reminders, outage notices)
  • To respond to support requests
  • To comply with legal obligations, including domain registry requirements

We do not sell your data to third parties. We do not use your data for advertising.

Legal basis for processing

We process your data under the following bases (UK GDPR):

  • Contract — processing is necessary to provide the hosting or domain service you have purchased
  • Legal obligation — domain registrant data must be provided to registries
  • Legitimate interests — sending renewal reminders and maintaining service security

Third parties

We share data with the following third parties only as necessary to deliver our service:

  • 20i — our infrastructure provider. Your domain registrant details and hosting account data are held on 20i's systems. See 20i's privacy policy.
  • Supabase — used to store customer account records securely
  • Domain registries — registrant details are passed to the relevant registry (e.g. Nominet for .co.uk)

Data retention

We retain your personal data for as long as your account is active and for up to 6 years after it closes, in line with UK tax and legal requirements. Domain registrant data may be retained by registries independently of us.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (subject to legal obligations)
  • Object to or restrict processing
  • Data portability

To exercise any of these rights, email hello@monkhost.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Cookies

We use a single session cookie (admin_session) for the internal admin area only. We do not use tracking cookies, analytics cookies, or third-party advertising cookies on the public site.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to active customers. Continued use of the service after changes constitutes acceptance.