Who we are
Calibour Limited is the controller of the data in this notice: we decide what happens to it, and we answer for it. Company number 17007176, 17 King Edwards Road, Ruislip HA4 7AE. Anything at all about your data: privacy@calibour.com.
What we collect, and why
Your account and billing details, the technical setup of whatever we run for you, registrant details for domains, our correspondence, technical logs, and any abuse reports about your service. Your full card number never reaches us.
We use it to run your account and take payment, which is our contract with you; to keep the network working and deal with abuse, which is our legitimate interest; and to keep tax records, because the law says so. You can object to anything we base on legitimate interests.
We send no marketing, sell nothing, and make no automated decisions about you. Everything we send is about a service you hold.
Logs
We never store a full IP address. Every address is truncated before it is written down (IPv4 to the /24, IPv6 to the /56), so what we keep is the network an address sits in, not the address itself.
Beyond that, access logs record the time and the request, and flow data records ports, protocols and volumes, never payloads. We do not inspect customer traffic, and we do not read data on customer servers unless we are chasing a specific, credible report.
Who we share with
Our payment processor; domain registries, where their rules require it; and our accountants and lawyers. That is the whole list, and everyone on it is under a written contract limiting them to what we instruct.
We will not sell you to a new owner, so your data will never change hands because the business did. And where we register a domain in our own name for you, nothing about you reaches the registry or the public WHOIS.
How long we keep it
Access logs 24 hours, flow data 7 days, contact form messages 14 days, backups 30 days, support correspondence 90 days, billing records 3 years because company law says so, and account details for the life of the account plus 30 days.
Your content
If you run a service on our infrastructure, data about your users is yours: you are the controller, we are your processor, and we act on your instructions. Their requests belong with you, and we pass on anything that reaches us. The Terms of Service set out what we owe you as processor.
Your data, your call
It is your data and you are in charge of it. Ask for a copy and we will send it. Tell us something is wrong and we will fix it. Ask us to delete it and we will, unless it is a billing record we still have to keep, and we will say so if that is the case. You can also have it in a portable format, tell us to stop anything we base on legitimate interests, or take back a consent you gave us earlier.
Email privacy@calibour.com. No particular wording, no charge, and an answer within a month.
If we get something wrong, tell us and we will put it right. You can also take it to the ICO in the UK, or your own data protection authority in the EEA, whether or not you come to us first.