Privacy policy

1. Who we are

Controller: CritiCall Ops Ltd, company number 17364960, registered office 66 Paul Street, London EC2A 4NA.

2. Data we collect

• Account data: name, organisation, email, phone, billing address
• Technical data: IP addresses, server logs, SSL verification records
• Website content: files and databases you upload (you control this content)
• Communications: support emails and enquiry messages
• Payment data: processed by our payment provider; we do not store full card numbers

3. How we use it

• Providing and managing your hosting account
• Billing and account administration
• Security, abuse prevention, and troubleshooting
• Legal compliance
• Service improvements (aggregated/anonymised where possible)

Lawful bases: contract, legitimate interests (security and service operation), and legal obligation.

4. Your website visitors

For personal data processed through your hosted websites (e.g. contact forms, patient information), you are typically the controller and we act as a processor hosting that data. You are responsible for privacy notices and lawful basis on your sites.

5. Sharing and transfers

We use infrastructure providers and subprocessors necessary to operate hosting (UK/EU where possible). We do not sell personal data. We may disclose data if required by law or to protect rights and safety.

6. Retention

Account data is kept while your service is active and for a reasonable period afterwards for legal and accounting purposes. Server logs are retained for a limited period for security. You should export your content before account closure.

7. Your rights

Under UK GDPR you may have rights to access, rectify, erase, restrict, object, and data portability. Contact us to exercise these rights. You may complain to the ICO (ico.org.uk).

8. Security

We use appropriate technical and organisational measures including access controls, firewalls, and encrypted connections (HTTPS). No method of transmission over the internet is 100% secure.

9. Changes

We may update this policy. The “last updated” date will change when we do. Material changes will be communicated where appropriate.