Privacy Policy.

1. Who we are

This Privacy Policy explains how Jack Evans, trading as Tigon Hosting (“Tigon Hosting”, “we”, “us” or “our”) handles personal information. Tigon Hosting is a UK-based hosting business operated by Jack Evans as a sole trader. It is not a limited company.

For the purposes of applicable data protection law, Jack Evans is the data controller for personal information processed in connection with the Tigon Hosting website, client area, sales and hosting services, except where a third-party provider acts as an independent controller for its own processing.

Contact: privacy@tigonhosting.com or admin@tigonhosting.com.

Correspondence address:
Jack Evans, trading as Tigon Hosting
Suite 886
80A Ruskin Ave
Welling
DA16 3QQ
United Kingdom

2. Personal information we collect

The information we collect depends on how you interact with us. It may include:

• Identity and contact details: name, email address, billing address, postal address and telephone number.
• Account information: client-area username, account identifiers, authentication data and account preferences. Passwords should be stored in protected form; we do not need your plain-text password.
• Order and service information: products ordered, service configuration, server details, support requests, communications and account activity.
• Payment and billing information: transaction references, payment status, invoices, amounts, currency and limited payment-method details supplied by payment providers. Card and PayPal payment details are handled by the relevant payment processor; we do not intend to store full card security details.
• Technical and usage information: IP address, device and browser type, operating system, referring pages, approximate location derived from IP, pages viewed, dates and times of visits, and diagnostic or security logs.
• Marketing preferences: whether you have opted in or out of promotional communications and your related preferences.

Please do not send us sensitive personal information unless it is genuinely necessary for a support or legal request.

3. Where information comes from

Most information is provided directly by you when you create an account, place an order, make a payment, contact support or use our services. Some technical information is collected automatically when you use the website or client area. We may also receive payment status and transaction details from PayPal or Stripe, and technical or advertising measurement information from providers such as Google, subject to your choices and applicable law.

4. How and why we use information

We use personal information for the following purposes:

• To create and manage your account, authenticate you and provide access to the client area and services.
• To supply hosting services, provision and maintain services, respond to support requests and communicate service or security notices.
• To take and reconcile payments, issue invoices, manage renewals, refunds and billing queries.
• To protect the business and our customers, detect fraud, investigate abuse, secure infrastructure, enforce our Terms of Service and maintain service records.
• To meet legal obligations, including applicable tax, accounting, regulatory and law-enforcement requirements.
• To understand and improve the website using analytics, and to measure advertising or display advertisements through Google services, where the relevant technologies are permitted and your choices allow them.
• To send marketing communications where permitted. You can opt out at any time; essential account and service messages will still be sent.

5. Our lawful bases

Data protection law requires us to have a lawful basis for each purpose. Depending on the activity, we rely on:

• Contract: where processing is necessary to set up an account, provide hosting, manage orders, take payment or provide customer support under our agreement with you.
• Legal obligation: where we must retain or disclose information to comply with tax, accounting, regulatory or other legal requirements.
• Legitimate interests: where necessary to operate, secure and improve our business and services, prevent fraud and handle queries. We consider these interests against your rights and expectations.
• Consent: where required for non-essential cookies or similar technologies, certain analytics and advertising technologies, or marketing communications where consent is the appropriate basis. You can withdraw consent at any time.

The lawful basis depends on the specific processing. We do not treat one basis as applying automatically to every use of information.

6. Who we share information with

We do not sell your personal information. We share it only where reasonably necessary for the purposes described in this Policy, including with:

• PayPal and Stripe to process payments, refunds and billing-related transactions. These providers handle payment information under their own privacy terms.
• Google in connection with Google Analytics and Google AdSense. Depending on your settings and consent, Google may use cookies or similar technologies to measure site use, personalise or serve advertising and report performance.
• Infrastructure and service suppliers such as data-centre, network, software, security, email and hosting providers who help us operate and support the services.
• Professional advisers and authorities where needed for legal, accounting, regulatory or law-enforcement purposes.

Service providers are given access only to information reasonably needed for their role. Some providers may process information under their own privacy policies and may act as independent controllers for particular activities.

7. International transfers

Tigon Hosting serves customers internationally, and some suppliers may process information in countries outside the United Kingdom. Where a restricted international transfer takes place, we will rely on an applicable adequacy regulation or decision, or an appropriate safeguard permitted by data protection law, such as an approved contractual protection. You can contact us to ask for further information about the safeguards relevant to a particular transfer.

8. Cookies, analytics and advertising

Our website may use cookies and similar technologies. Some are necessary for core website or client-area functions. We also use Google Analytics to understand how visitors use the website and Google AdSense to support advertising.

Analytics and advertising technologies may collect information such as device identifiers, IP address, browser details, pages visited and interactions with the website. Google may use cookies or similar technologies to measure activity and, depending on configuration and your choices, serve or personalise advertisements.

Where the law requires consent for non-essential cookies or similar technologies, those technologies should only be enabled after you have made the relevant choice. You can change your preferences through any cookie preference tool presented on the website and can also manage or delete cookies through your browser. Blocking some cookies may affect website features. For more information about Google’s practices, see Google’s Privacy Policy and Google’s advertising information.

Browser settings alone may not provide a complete way to manage every third-party advertising or analytics preference. We will respect the choices available through our website’s consent controls where implemented.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, resolve disputes, enforce agreements and meet legal obligations.

• Account and service information is generally retained while an account or service is active and for a period afterwards where needed for support, dispute resolution, security or legal claims.
• Invoices and relevant transaction records may be retained for the periods required by tax and accounting law.
• Security and diagnostic logs are retained for as long as reasonably needed to monitor, investigate and protect the services.
• Marketing preferences are retained so we can respect opt-outs and demonstrate consent where relevant.

Retention periods can vary by record type and circumstance. When information is no longer needed, we will delete it or securely anonymise it where reasonably practicable. Backups may retain residual copies until they are overwritten or expire under the backup cycle.

10. How we protect information

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, authentication, secure communications, system monitoring and limiting access to people and suppliers who need it.

No internet transmission or storage system can be guaranteed completely secure. You should use a strong, unique password, keep account credentials confidential and contact us promptly if you suspect unauthorised access to your account.

11. Your privacy rights

Depending on the circumstances and the lawful basis we rely on, you may have the right to:

• request access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• request erasure of information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests, including an absolute right to object to direct marketing;
• receive certain information in a portable format where the right applies; and
• withdraw consent where processing is based on consent. Withdrawal does not affect processing carried out before withdrawal.

These rights are not absolute and may be subject to legal conditions or exemptions. To exercise a right, email privacy@tigonhosting.com. We may need to verify your identity before responding.

You also have the right to complain to the UK Information Commissioner’s Office (ICO). See ico.org.uk/make-a-complaint.

12. Marketing and service messages

We may send service-related messages that are necessary to administer your account, provide hosting, communicate security or maintenance matters, or deal with billing. These are not promotional messages.

Where we send direct marketing by email, we will do so in accordance with applicable marketing and privacy rules. You can unsubscribe using the link in a marketing email or contact us. Opting out of marketing will not stop essential service communications.

13. Children

Tigon Hosting provides web hosting and game server hosting services that may be used by individuals of different ages, including teenagers.

We recognise the importance of protecting children's personal information. We do not knowingly collect more personal information from children than is necessary to provide our services, and we handle all personal information in accordance with applicable data protection laws.

Under UK data protection law, individuals aged 13 and over may provide their own consent to the processing of their personal information for online services where consent is the applicable lawful basis.

For children under 13, where we rely on consent to process personal information, consent must be provided or authorised by a parent or guardian.

Where appropriate, we may ask a parent or guardian to assist with an account, purchase or other contractual arrangement.

If you believe a child has provided personal information in circumstances where this was not appropriate, please contact us so that we can review the matter.

14. Changes to this Policy

We may update this Policy to reflect changes to our services, suppliers, data practices or legal requirements. The latest version will be published on this page with a revised date. If a change is significant, we may also provide a notice through the website or by email where appropriate.

15. Contact us

For questions about this Policy or to make a privacy request, contact:

Jack Evans, trading as Tigon Hosting
Email: privacy@tigonhosting.com
Alternative email: admin@tigonhosting.com

Correspondence address
Suite 886
80A Ruskin Ave
Welling
DA16 3QQ
United Kingdom