1. Overview
Traxio is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
2. Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, billing address, phone number
- Payment data: processed securely via our payment provider — we do not store card details
- Domain registration data: required by domain registries (WHOIS)
- Usage data: server logs, IP addresses, browser type (for security and service operation)
- Support data: communications submitted via tickets or contact forms
3. How We Use Your Data
- To provision and manage your hosting and domain services
- To process billing and send invoices
- To respond to support requests
- To send service-related notices (maintenance, renewals, policy updates)
- To comply with legal obligations
- To detect and prevent fraud or abuse
4. Legal Basis for Processing
We process your data on the basis of contract performance (to deliver services you've purchased), legitimate interests (security, fraud prevention), legal obligation (tax records, domain registry requirements), and where applicable, your consent.
5. Data Sharing
We share personal data only where necessary:
- Enom: domain registration data is passed to Enom as the registrar
- Payment processors: billing data is handled by our payment provider
- Hosting infrastructure providers: server infrastructure operators
- We do not sell your personal data to third parties
6. Data Retention
We retain account data for as long as your account is active and for a period of up to 7 years after closure for legal and accounting purposes. Server logs are typically retained for 30–90 days. You may request deletion of personal data subject to legal retention requirements.
7. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Request erasure (subject to legal obligations)
- Object to processing or request restriction
- Data portability
- Withdraw consent where consent is the legal basis
To exercise any of these rights, contact us via your client area or the contact page. You also have the right to lodge a complaint with the ICO (ico.org.uk).
8. Cookies
We use essential cookies for account sessions and security. Please see our Cookie Policy for full details.
8a. International Data Transfers
Traxio is a UK company but our hosting servers are located in Montreal, Canada. By using our services, your account data (files, emails, databases) is stored on servers in Canada. Canada is recognised as providing an adequate level of data protection for the purposes of UK GDPR. We take appropriate measures to ensure your data is handled securely regardless of its physical location.
9. Security
We implement appropriate technical and organisational measures to protect your personal data. All data is transmitted over encrypted HTTPS connections. Payment data is handled by PCI-compliant processors.
10. Contact
For privacy-related enquiries, contact us via the contact page. We will respond within 30 days.