Privacy Policy.

Introduction

At Kitwick, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how Kitwick collects, uses, stores and protects personal information when you visit our website, create an account, purchase or use our hosting and domain services, contact us, or otherwise interact with us.

We aim to be clear about what information we collect, why we collect it, how we use it, and the choices and rights available to you.

About This Privacy Policy

This Privacy Policy applies to information collected through:

• the Kitwick website;
• your Kitwick account;
• web hosting and WordPress hosting services;
• domain registration and domain transfer services;
• customer support;
• contact and enquiry forms;
• billing and payment processes;
• emails and other communications with Kitwick; and
• other services or interactions where this Privacy Policy is made available.

For the purposes of applicable UK data protection legislation, the organisation responsible for your personal information is:

Information We Collect

The information we collect depends on how you interact with Kitwick.

3.1 Information You Provide to Us

When you create an account, purchase a service, contact us or otherwise interact with Kitwick, we may collect:

• Your name.
• Business or organisation name.
• Email address.
• Telephone number.
• Billing address.
• Service address.
• Postal address.
• Account login information.
• Domain name information.
• Information relating to your hosting services.
• Payment and transaction information.
• Support requests and communications.
• Information you provide through forms.
• Information provided during website migration.
• Information required for domain registration or transfer.
• Any other information you voluntarily provide to us.

We only request information that is reasonably necessary for the relevant purpose.

3.2 Information Collected Automatically

When you visit our website or use our services, certain technical information may be collected automatically, such as:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Approximate location derived from technical information.
• Pages visited.
• Referring website.
• Date and time of visits.
• Website interaction information.
• Error and diagnostic information.
• Other technical information generated when using our website or services.

This information may be used to operate, secure, maintain and improve our website and services.

How We Use Your Information

We may use personal information for the following purposes.

Providing Our Services

We use your information to:

• Create and manage your Kitwick account.
• Provide web hosting and WordPress hosting.
• Register and transfer domains.
• Configure and manage your services.
• Process orders.
• Manage subscriptions and renewals.
• Provide website migration services.
• Provide SSL certificates and related services.
• Provide customer support.
• Respond to enquiries.
• Communicate with you about your services.

Account and Service Management

We may use your information to:

• Authenticate your account.
• Manage account access.
• Send service notifications.
• Send renewal reminders.
• Send invoices and payment-related communications.
• Notify you about service changes.
• Investigate technical problems.
• Maintain records relating to your account.

Security and Fraud Prevention

We may process information to:

• Protect our systems.
• Detect suspicious activity.
• Investigate security incidents.
• Prevent fraud or abuse.
• Protect customers and our infrastructure.
• Enforce our Terms of Service.

Improving Our Services

We may use technical and usage information to understand how our website and services are used and to improve:

• Website performance.
• Customer experience.
• Hosting services.
• Support processes.
• Security.
• Our products and services.

Marketing

Where permitted by law, we may use your contact information to send information about Kitwick services, offers, updates or other communications that may be relevant to you.

Where consent is required, we will ask for it.

You can unsubscribe from marketing communications at any time.

Our Lawful Bases for Processing

We will only process personal information where we have a lawful basis to do so.

Depending on the circumstances, the lawful basis may include:

Contract

We may process information where it is necessary to enter into or perform a contract with you.

For example, this may include processing information to create your account, provide hosting services, register or transfer a domain, process an order, provide customer support, or manage payments and renewals.

Legal Obligation

We may process information where necessary to comply with legal or regulatory obligations.

For example, this may include maintaining appropriate financial, accounting or business records.

Legitimate Interests

We may process information where necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.

These interests may include:

• Operating and improving our services.
• Maintaining website and network security.
• Preventing fraud and abuse.
• Managing customer relationships.
• Responding to enquiries.
• Protecting our business and customers.
• Understanding how our services are used.

Consent

In some circumstances, we may rely on your consent.

For example, this may apply to certain marketing communications or non-essential cookies.

Where we rely on consent, you can withdraw your consent at any time.

Withdrawal of consent does not affect processing that took place before consent was withdrawn.

Information Required to Provide Our Services

Some information is necessary for us to provide the services you request.

For example, we may need certain information to:

• Create your account.
• Process an order.
• Register a domain.
• Transfer a domain.
• Provide hosting.
• Process payments.
• Verify account ownership.
• Provide support.
• Comply with legal obligations.

If you do not provide information that is necessary for these purposes, we may not be able to provide the relevant service.

Domain Registration Information

When you register or transfer a domain through Kitwick, we may need to collect and process information required by the relevant domain registry, registrar or other service provider.

This may include:

• Domain holder information.
• Name.
• Organisation.
• Address.
• Email address.
• Telephone number.
• Technical or administrative contact information.

The information required varies depending on the domain extension.

Some domain registration information may be shared with the relevant domain registry or registrar where necessary to provide the domain service.

Hosting Account Information

When you use Kitwick hosting services, we may process information relating to your hosting account and services.

This may include:

• Domain names.
• Hosting account information.
• Server information.
• Account usage information.
• Technical configuration information.
• Support information.
• Security logs.
• Information required to manage or troubleshoot your hosting service.

We use this information to provide, maintain, secure and support your hosting services.

Website Content and Customer Data

If you use Kitwick hosting services to operate your own website, you may store personal information belonging to your website visitors, customers or users on our infrastructure.

In these circumstances, Kitwick generally acts as a hosting or infrastructure provider rather than the organisation determining why that information is collected.

You remain responsible for ensuring that your own website and services comply with applicable data protection and privacy requirements.

This may include having your own appropriate privacy policy, cookie information and lawful basis for processing information collected through your website.

Payments

Payments for Kitwick services may be processed through third-party payment providers.

Depending on the payment method you use, we may receive information such as:

• Payment status.
• Transaction reference.
• Payment date.
• Amount paid.
• Limited payment information.

Payment card details may be processed directly by the relevant payment provider rather than being stored by Kitwick.

We may retain transaction and billing records where necessary for accounting, legal, fraud prevention and business purposes.

Customer Support

When you contact Kitwick for support, we may retain information relating to your request.

This may include:

• Your name.
• Email address.
• Account information.
• Service information.
• Support messages.
• Attachments you provide.
• Technical information.
• Records of communications between you and Kitwick.

We use this information to respond to your request, troubleshoot issues and maintain an appropriate record of customer support.

Website Forms and Enquiries

If you submit information through a Kitwick contact, enquiry or other website form, we may collect the information you provide.

This may include:

• Name.
• Email address.
• Telephone number.
• Company name.
• Message content.
• Any other information included in your submission.

We use this information to respond to your enquiry and provide the requested information or service.

Cookies and Similar Technologies

Kitwick may use cookies and similar technologies on its website.

Cookies may be used for purposes such as:

• Keeping you logged into your account.
• Remembering preferences.
• Maintaining shopping carts or order information.
• Website functionality.
• Security.
• Understanding website usage.
• Improving website performance.

Some cookies may be strictly necessary for the website or services to operate.

Where applicable, we will seek consent before placing non-essential cookies on your device.

Analytics

We may use analytics tools to understand how visitors use the Kitwick website.

Analytics information may include:

• Pages visited.
• Approximate location.
• Device type.
• Browser information.
• Traffic sources.
• Interactions with the website.
• General usage patterns.

Where an analytics service involves personal information or non-essential cookies, we will use the appropriate legal basis and consent mechanism where required.

Who We Share Information With

We may share personal information with organisations that help us operate Kitwick and provide our services.

These may include:

• Hosting and infrastructure providers.
• Domain registries and registrars.
• Payment providers.
• Email and communication providers.
• Customer support systems.
• Website and analytics providers.
• Security and fraud prevention providers.
• Professional advisers.
• Accounting and financial service providers.
• IT and software service providers.
• Legal or regulatory authorities where required.

We only share information where there is an appropriate reason and lawful basis for doing so.

Where third parties process personal information on our behalf, we take appropriate steps to ensure that suitable contractual and security arrangements are in place.

International Transfers

Some of our service providers or technology providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection requirements.

Depending on the circumstances, this may include relying on an adequacy decision or appropriate contractual or other safeguards.

Where required, further information about applicable safeguards can be requested from us.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

• Provide services.
• Maintain business and customer records.
• Comply with legal obligations.
• Resolve disputes.
• Enforce agreements.
• Prevent fraud or abuse.
• Protect our legitimate business interests.

Different types of information may therefore be retained for different periods.

For example, financial and transaction records may need to be retained for longer than ordinary website enquiry information.

When information is no longer required, we will take appropriate steps to securely delete, anonymise or otherwise dispose of it.

How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access.
• Accidental loss.
• Destruction.
• Misuse.
• Alteration.
• Unauthorised disclosure.

Security measures may include:

• Access controls.
• Account authentication.
• Security monitoring.
• Server security measures.
• Encryption where appropriate.
• Backups.
• Malware and security monitoring.
• Restricted access to personal information.

However, no online service can guarantee that information will always be completely secure.

Your Data Protection Rights

Depending on the circumstances and the lawful basis for processing, you may have rights under applicable data protection law.

These may include the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information.
• Request restriction of processing.
• Object to certain processing.
• Request portability of certain information.
• Withdraw consent where processing is based on consent.
• Complain to the Information Commissioner's Office.

These rights are not absolute and may depend on the circumstances and the lawful basis we rely upon.

How to Exercise Your Rights

If you would like to exercise a data protection right or ask a question about how we use your information, please contact us.

Please provide enough information for us to identify you and understand your request.

We may need to verify your identity before responding to certain requests.

We will handle requests in accordance with applicable data protection requirements.

Marketing Communications

If you receive marketing communications from Kitwick, you can unsubscribe at any time.

You can usually do this by:

• Using the unsubscribe option included in the communication.
• Contacting us directly.

Please note that opting out of marketing communications does not necessarily stop essential service communications.

For example, we may still need to send:

• Invoices.
• Payment notifications.
• Domain renewal notices.
• Service notifications.
• Security alerts.
• Account-related communications.
• Other messages necessary to provide services you have purchased.

Children's Information

Kitwick's services are primarily intended for businesses, organisations and individuals who are able to enter into contracts for the relevant services.

We do not knowingly collect personal information from children for marketing purposes.

If you believe that a child has provided personal information to us unnecessarily, please contact us so that we can investigate and take appropriate action.

Third-Party Websites

Our website may contain links to websites operated by third parties.

Those websites have their own privacy policies and terms.

Kitwick is not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

Third-Party Services

Kitwick may use third-party services to help provide our website and services.

Examples may include:

• Payment processing.
• Domain registration.
• Hosting infrastructure.
• Email delivery.
• Customer support.
• Security.
• Analytics.
• Communications.
• Other business or technical services.

These providers may process information on our behalf or independently where appropriate.

Where they process information on our behalf, we take appropriate steps to ensure that the processing is properly governed.

Account Security

You are responsible for keeping your Kitwick account credentials secure.

You should:

• Use a strong password.
• Avoid sharing your password.
• Keep account recovery information secure.
• Use additional security features where available.
• Notify us promptly if you believe your account has been compromised.

If we detect suspicious activity or a security issue affecting your account, we may contact you using the information associated with your account.

Data Breaches and Security Incidents

If we become aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable data protection requirements.

Where notification is legally required, we will notify the relevant authority and/or affected individuals as required.

Changes to Your Personal Information

You should keep your Kitwick account information accurate and up to date.

You can contact us if information associated with your account needs to be corrected or updated.

Keeping your information accurate helps us provide services, communicate with you and manage your account correctly.

Automated Decision-Making and Profiling

Kitwick does not currently intend to make decisions about individuals using solely automated processing that produces legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide any information required by applicable data protection law.

Complaints

If you have concerns about how Kitwick handles your personal information, we encourage you to contact us first so that we can investigate your concern.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office

The Information Commissioner's Office (ICO) is the UK's independent authority responsible for upholding information rights.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be necessary because of:

• Changes to our services.
• Changes to the way we process information.
• Changes to technology.
• Changes to legal or regulatory requirements.
• Improvements to our privacy practices.

When we make changes, we will update the Last updated date at the top of this Privacy Policy.

Where appropriate, we may provide additional notice of significant changes.

We recommend checking this page periodically for the latest version.