Privacy policy

Igor Build LTD, trading as SonateHost, is the controller for account, sales and support information described here.

This policy explains how SonateHost uses personal information when you browse sonatehost.com, create an account, purchase VPS services or contact us. Privacy requests: support@sonatehost.com.

Information we process

We process account and contact details, billing information, order history, support messages and technical information needed to operate and protect the service, such as IP addresses and security logs. Only provide information needed for your request.

Why we use information

We use information to create and secure accounts, process orders, supply services, respond to support requests, prevent abuse and meet applicable accounting and legal obligations. Where required, optional activities rely on your consent. Providing service-related details may be necessary to perform your contract.

Legal bases where applicable

Account creation and service delivery rely on performance of the contract; invoicing and mandatory recordkeeping rely on legal obligations. Security, fraud prevention and responding to general enquiries may rely on legitimate interests, subject to your rights and the necessary balancing assessment. Optional marketing or non-essential tracking requires the appropriate legal basis, including consent where required. We do not use this theme to make solely automated decisions with legal or similarly significant effects.

Payments and service providers

Orders are handled through WooCommerce. The payment provider selected at checkout processes payment information under its own privacy notice. Hosting, payment, email and support providers may process information necessary to perform their roles. We may disclose information when legally required or necessary to protect the service and its users.

Stripe payments

When you choose a payment method provided through Stripe, Stripe processes the payment details, transaction information and fraud-prevention signals under its own roles and privacy notice. Card information is collected through the payment provider’s secure interface; this theme and core plugin do not collect or store full card numbers or security codes. We receive payment status, transaction references and limited payment-method information needed to administer the order. Learn more in Stripe’s Privacy Policy.

Retention and security

Information is kept for as long as needed for the relevant service, dispute handling or applicable legal retention obligations. Account deletion may not remove records that must be retained by law. Access to information should be limited to authorised purposes; no internet service can guarantee absolute security.

UK data protection

For processing covered by UK law, your rights are governed by the UK GDPR and Data Protection Act 2018, as amended. You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. You may contact us first, but you do not have to do so before approaching the regulator.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. You may withdraw consent where processing relies on consent and raise concerns with a competent supervisory authority. Contact support@sonatehost.com; we may need to verify your identity before handling a request.

Operational privacy details

Orders, invoices, payment references and supporting accounting records are retained for six years from the end of the last company financial year to which they relate. Records are retained longer where required, including for transactions spanning accounting periods, late tax returns, HMRC compliance checks or other applicable legal preservation duties. After the applicable period, records are reviewed and securely deleted or anonymised when no continuing legal requirement applies. This accounting retention period does not set the retention period for VPS backups: daily VPS backups retain 14 days by default, or the longer period selected in the order. Other personal information is retained only for as long as needed for the stated service, support, security or legal purpose.

Igor Build LTD operates the SonateHost website. The website is hosted directly on a server in Amsterdam, Netherlands, supplied by VDsina.com. VDsina.com provides the hosting infrastructure for the website. Customer support at support@sonatehost.com is handled by the SonateHost support team within Igor Build LTD. Payments made through Stripe are processed by Stripe. The Amsterdam hosting location does not mean that all processing by payment or infrastructure providers takes place in the Netherlands; their processing locations and applicable safeguards are governed by the relevant service agreements and privacy notices.

Data hosted on your VPS

You determine the purposes for data that you upload to your server. Where we process personal information on your behalf, an appropriate data processing agreement is required. Contact us to agree processing instructions, subprocessors, locations, security arrangements and deletion or return procedures before storing such data. Account and billing data are handled separately under this policy.

International processing and updates

If information is processed outside your country, the safeguards required by applicable law must apply. Material changes to this policy will be published on this page. See our Cookie policy for browser storage information.