Our Legal Terms & Policies
All the terms and conditions governing NuHosting products and services.
We last updated these terms on September 30, 2025.
The following Terms of service along with the “AUP” and where applicable to the service, the “Server Management” form the “Main Agreement” between you and us when you purchase services from us. By purchasing services from us you are agreeing to this “Main Agreement”.
NuHosting part of NuWeb Solutions and Operated by Atlantis NuWeb Limited (“we” or “us”) is a company registered in England and Wales under registration number 11180762. Our registered office address is 18 Lowgate Crescent, Gedney Dyke, Spalding, Lincolnshire, PE12 0AP, United Kingdom.
Some of our services are provided by third parties that have their own terms and conditions, these third-party terms are subject to changes at the third party’s own discretion. The following products have additional third-party terms:
Marketgoo
Marketgoo terms
Site Builder (Also known as Sitejet)
Sitebuilder terms of service
Acronis Backup (Also known as Acronis Cyber Protect)
Acronis en-us support
SocialBee Terms & Data Protection
Our staff cannot log in to your SocialBee account. SocialBee’s Terms of Service include provisions for the protection of your customer data, outlining how it is stored, processed and secured.
We reserve the right to withdraw or suspend access at no risk to ourselves should any issues, breaches or other events occur that could impact service integrity or data security. We also fully exempt ourselves from any liability arising from the use of SocialBee, including but not limited to service outages, data loss, or other operational issues.
For the full details, please see: SocialBee terms of service
- Defined Terms
“Main Agreement” means these “terms and conditions”, “AUP” and “EULA” which collectively form the “Main Agreement”.
“AUP” means our “acceptable usage policy” and is located here NuHosting legal acceptable usage policy.
“You/Your/Client/Customer” means the person, company or organisation who purchases services from NuHosting. - General Terms
- By subscribing to any of the Services and opening an account with us, we (“NuHosting”) and you (“the Client”) agree to be bound by these terms and conditions. They set out the basis on which we offer our services and should be read carefully.
- You must be at least 18 years of age to use our services.
- We will treat your personal details in accordance with our privacy policy and with the Data Protection Act 2018 (“DPA”) and the General Data Protection Regulation 2016 (“GDPR”).
- Are you a business customer or a consumer? In some areas you will have different rights under these terms depending on whether you are a business or consumer. You are a consumer if:
- You are an individual.
- You are buying Services from us wholly or mainly for your personal use (not for use in connection with your trade, business, craft or profession).
- If you are a business customer this is our entire agreement with you. If you are a business customer these terms constitute the entire agreement between us in relation to your purchase. You acknowledge that you have not relied on any statement, promise, representation, assurance or warranty made or given by or on behalf of us which is not set out in these terms and that you shall have no claim for innocent or negligent misrepresentation or negligent misstatement based on any statement in this agreement.
- Services
- We shall provide the Services you order from us to you on and subject to the Main Agreement.
- Customers are liable for all charges levied by their telephone service provider arising from the Customer’s use of the Services.
- From time to time us or our subcontractors need to carry out maintenance on the network, this may involve temporarily shutting parts of it down. We will give as much notice as possible and shall try to keep this work to the period specified in the notice. We accept no liability whatsoever arising from such a suspension of the service.
- The Customer agrees that they will not reassign or transfer any part of the Service without our prior consent.
- License costs of all third-party applications and software offered with our plans are subject to change without written intimation.
- You acknowledge that we do not guarantee that any services will be uninterrupted, error-free, or completely secure. There are risks inherent to the internet such as hacking, malware, DDoS etc that could result in the loss of data and/or privacy.
- We reserve the right to pass on any additional charges/price increases as a result in price changes from third party software and license vendors irrespective of the hosting cycle.
- Domain Registration, Renewals and Transfers
- You are to ensure any requested domain registration request is not made in bad faith, does not infringe on any third-party rights including and third party’s intellectual property, will not be used for any unlawful purpose or would be considered to be an abusive registration under the enom, openSRS or Nominet dispute resolution policies.
- You acknowledge that we are not obliged to accept any request to register a domain and may be unable to make a registration due to another application or prohibitive cost.
- We make no representations or warranties (expressed or implied) of any kind (and they are expressly disclaimed) with respect to availability or likelihood of registration of any requested domain.
- You acknowledge that domain registrations and renewals where successful are non-refundable.
- You acknowledge that we are unable to correct spelling mistake(s) in a domain once a domain has been successfully registered, please ensure you check before submitting the domain for registration.
- You acknowledge that domain renewal fees are subject to change at any time without notice.
- You acknowledge we cannot guarantee any domain you order will be successfully registered, only once payment has been successfully taken will we send a registration request to the registrar and only once a registration confirmation has been received from the registrar is the domain officially registered. If we are unable to register any domain name, we will provide a full refund of the domain registration fee.
- All domains registered through us are registered via our partners TuCows/openSRS and are subject to openSRS’s terms and conditions located at Opensrs resources documentation.
- Where you wish to register a domain in a foreign jurisdiction, you acknowledge that your registration is subject to all relevant laws and terms and conditions.
- You will at all times comply with the terms and conditions (from time to time subsisting) applying to the registration of domain names published by the relevant naming authority (including the domain dispute resolution policy of that authority) and any other authority having similar force.
- You agree and acknowledge that we will make registration information in relation to the requested domain available to ICANN, openSRS, Nominet or any other appropriate registration authority.
- You acknowledge that you are obligated to provide accurate domain registration details, and that those details will be published to the WHOIS directory with respect to the chosen domain name, as required by ICANN & Nominet.
- We will endeavour to automatically renew your domain 30 days prior to expiry unless:
- We are unable to take payment for the renewal.
- You choose to opt out of auto-renewal through the client area
- The domain has been transferred to another registrar or tag holder
- Some domains are auto-renew only, this means that auto-renewal must be turned on prior to the “Auto-renew by” date, this is anything up to 15 days prior to the expiry date. It is your responsibility to ensure the auto-renewal is turned on if relevant. If the auto-renew setting is disabled at the auto-renew deadline then the registrant will lose the domain name, despite how much time remains on the registration.
- We will contact you 30 days in advance of your expiry, if auto renewal is not turned on then you should ensure you do this a minimum of 15 days prior to the expiry date as failure to do so may result in the loss of the domain.
- Auto renew domains include but are not limited to the following extensions:
- .ac, .at, .be, .ch, .co.au, .com.pe, .com.pl, .com.sg, .de, .fr, .info.pl, .io, .it, .jobs, .jp, .li, .net.au, .net.pe, .org.au, .org.pe, .org.pl, .pl,.sg, .sh, .tk, .tm
- You may not transfer away the domain from us to another registrar during the first sixty (60) days following the registration or transfer of a domain.
- We will not accept any transfer request for a domain that is due to expire within 7 days.
- We will not transfer ownership of a domain to another registrar until all fees attributable to the domain registration, renewal or transfer have been paid.
- The following additional renewal terms apply to gTLD domains:
- If a domain name is not renewed before its renewal date, the domain name will automatically enter an automated domain selection service. You may reclaim the domain name post its expiry date subject to:
- Renewal cost plus a one-off admin fee of £10+VAT and other applicable taxes within 7 days post expiry.
- Beyond 7 days and up to 30 days, your domain name will enter a redemption period, for renewal of domain name during this period you will be charged a redemption fee of £100 + VAT and other applicable taxes plus the domain name renewal costs.
- After 30 days, the domain selection service may enter your domain name into a public auction service, where the highest bidder is able to purchase this domain name, you will be able to bid on the domain name alongside other bidders, the domain name will remain on public auction with a reserve set by the domain selection service until sold. The domain selection service may not claim the domain name and this is subject to discretion, if the domain name is not chosen by the service it will be released back to general public availability after 45 to 90 days post 30 days of redemption period.
- If a domain name is not renewed before its renewal date, the domain name will automatically enter an automated domain selection service. You may reclaim the domain name post its expiry date subject to:
- You undertake to comply with the content standards set out in our Acceptable Use Policy in respect of any material posted on or associated with any Domain.
- Where ICANN and/or Whois, or any replacement body of the same (or where the Domain is registered with a registrar in a different jurisdiction, any equivalent body or registrar), makes any complaint in respect of the use of the domain name including but not limited to ‘cybersquatting’, We reserve the right to immediately cancel this service and no refunds shall be made. You will co-operate with us in respect of any complaint.
- Due to a legal agreement between ENOM INC, one of our domain registrar, and LegitScript, customers should be aware that the domains purchased with the intent of selling prescription drugs, via a company not properly licensed in the destination country, could be frozen pending a legal appeal. We have no control over this process and disputes will need to be handled through the proper legal channels in the disputed country.
- We reserve the right to change the registrar that a domain is held with, at its own discretion and without notice.
- If you are registering a domain on behalf of a third party you are obligated to ensure the domain owner is made aware of and adheres to these terms and conditions.
- Acceptable Use, Content and Behaviour
- You agree to abide by our acceptable use policy (AUP) located at the link NuHosting legal acceptable usage policy
- You agree to abide by any EULA applicable in respect to the Services.
- You shall procure at your cost, install and maintain, and comply with all licensing requirements in respect of, all required enabling software and third-party software used via the Services. You acknowledge that a failure to do so may impact your use of the Services.
- We may request that you provide evidence of the licensing status of any software used by you on the Services.
- You agree and understand that any attempts to undermine or cause harm to any of our servers is strictly prohibited.
- If you abuse the resources we provide in any way, we reserve the unqualified right to immediately deactivate your Account without refund.
- We reserve the right to disable/delete any feature or application provided on shared hosting service without notification if that feature/application is found to be detrimental and/or is hampering the web server’s’ overall health and performance.
- If you are abusive towards any member of our staff we have full right to terminate your account with us without any refund.
- Account Security
- You are responsible for any misuse of your account and you must take steps to ensure that others do not gain unauthorised access to your account. You may not use your account to breach the security of another account or attempt to gain unauthorised access to another network or server.
- Your password provides access to your account, it is your responsibility to keep your password secure.
- Sharing your password and account access with unauthorised users is strictly prohibited. You must take care and prevent others from using your account since you will be responsible for the consequences.
- Attempting to obtain another user’s account password is strictly prohibited, and will result in termination of service.
- You must adopt adequate security measures to prevent or minimise unauthorised use of your account.
- You may not attempt to circumvent user authentication or security of any host, network or account. This includes, but is not limited to, accessing data not intended for you, logging into or making use of a server or account you are not expressly authorised to access, or probing the security of other networks. Use or distribution of tools designed for compromising security is prohibited. Examples of these tools include, but are not limited to, password guessing programs, cracking tools or network probing tools.
- You may not attempt to interfere with service to any user, host or network or carry out DOS attacks. This includes, but is not limited to, “flooding” of networks, deliberate attempts to overload a service, and attempts to “crash” a host.
- You agree and understand that users who violate systems or network security may incur criminal or civil liability. We will cooperate fully with investigations of violations of systems or network security at other sites, including cooperating with law enforcement authorities in the investigation of suspected criminal violations.
- You agree to complete your own tests for computer viruses in accordance with best computing practice.
- Data Protection (GDPR)
- In this section, the terms “Personal Data”, “Controller”, “Processor”, “Data Subject”, “Processing”, “Data Protection Impact Assessments” and “Personal Data Breach” have the meanings given in the GDPR.
- In this section, the term “Applicable Data Protection Law” means all applicable data protection legislation in force from time to time including the DPA and the GDPR.
- The parties acknowledge that the factual arrangement between them dictates the classification of each party as either a Controller or Processor under Applicable Data Protection Law. Notwithstanding the foregoing, the parties acknowledge that:
- where Personal Data is not accessible or likely to be accessible by NuHosting, NuHosting will not be a Processor, and therefore, in either case, the obligations of paragraphs 7.4 to 7.7 shall not apply.
- Subject to paragraph 7.3, with respect to the party’s rights and obligations under the Agreement, the party’s agree that you are the Controller and that NuHosting is the Processor.
- Where NuHosting processes Personal Data as a Processor on your behalf, it shall:
- Process the Personal Data only in accordance with instructions from you (which may be specific instructions or instructions of a general nature as set out in the Agreement or as otherwise notified by you to NuHosting during the term of the Agreement);
- take reasonable steps to ensure the reliability of any NuHosting staff who have access to the Personal Data, and ensure such staff are trained in the care and handling of Personal Data and have given appropriate binding undertakings of confidentiality;
- notify you without undue delay and, in any event, within five business days, if it receives:
- a request from a Data Subject to have access to that person’s Personal Data; or
- a complaint or request relating to your obligations under Applicable Data Protection Law;
- taking into account the nature of the Processing, assist and cooperate with you (including by using appropriate technical and organisational measures, in so far as this is possible), to respond to complaints or requests from Data Subjects exercising their rights under Applicable Data Protection Law, including by:
- promptly providing you with full details of a complaint or request received by NuHosting; and
- upon your request, promptly providing information which you require in order to comply with a request from a Data Subject exercising their rights under Applicable Data Protection Law (including a ‘subject access request’) provided that NuHosting shall, unless otherwise agreed, be reimbursed any incremental costs incurred as a result of complying with this paragraph.
- permit, at your own expense, you or your representatives access to any location where NuHosting processes Personal Data during normal business hours to inspect and audit, on reasonable prior notice, NuHosting’s data Processing activities and comply with all reasonable requests or directions by you to enable you to verify and/or procure that NuHosting is in full compliance with its obligations under this paragraph 7. You or your representative shall be required to adhere to any applicable NuHosting site and security policies in the performance of such an audit or inspection;
- All costs in relation to the audit incurred by NuHosting or partners will be passed onto the client.
- provide a written description of the technical and organisational methods employed by NuHosting for Processing Personal Data (within the timescales reasonably required by you);
- be entitled to engage sub-Processors (as a subcontractor), subject to
- the relevant subcontractor being engaged by way of a written contract which imposes obligations on the subcontractor which are at least equivalent to the obligations imposed on NuHosting pursuant to this paragraph 7.5; and
- the relevant subcontractor providing sufficient guarantees to NuHosting in terms of expert knowledge, reliability and resources to implement technical and organisational measures which will meet the requirements of Applicable Data Protection Law, and all sub-Processors engaged by NuHosting as at the effective date of this Agreement shall be deemed authorised;
- in addition to the sub-Processors engaged pursuant to paragraph 7.5.7, be entitled to engage additional or replacement sub-Processors (as a subcontractor), subject to:
- the provisions of paragraph 7.5.7.1 and 7.5.7.2 being applied; and
- NuHosting notifying you of the additional or replacement sub-Processor, and where you object to the additional or replacement Processor, the parties shall discuss the objection in good faith;
- save where such countries have been deemed by the European Commission to be providing an adequate level of protection pursuant to the relevant provisions of Applicable Data Protection Law not Process Personal Data outside the European Economic Area without the prior written consent of you and, where you consent to a transfer, to comply with any reasonable instructions notified to it by you. Notwithstanding the foregoing:
- we are expressly permitted and instructed by you that it may transfer Personal Data to any NuHostingsubsidiary and any NuHosting subcontractor, subject to first ensuring that adequate protections are in place to protect the Personal Data consistent with the requirements of Applicable Data Protection Law;
- we are expressly permitted to transfer Personal Data to ESDS Software Solution PVT. Ltd. in respect of the provision of support services subject to there being adequate protections in place to protect the Personal Data consistent with the requirements of Applicable Data Protection Law.
- we are expressly permitted to transfer Personal Data to Microsoft Corporation in respect of the provision of services subject to there being adequate protections in place to protect the Personal Data consistent with the requirements of Applicable Data Protection Law.
- at your cost and taking into account the nature of the Data Processing and the information available to NuHosting, assist you in ensuring your compliance with your obligations to:
- ensure the security of the Processing;
- notify Personal Data Breaches to the ICO;
- notify Personal Data Breaches to the Data Subjects;
- carry out Data Protection Impact Assessments; and
- consult the ICO in respect of Data Protection Impact Assessments, pursuant to Articles 32 to 36 of the GDPR (respectively); and
- notify you without undue delay upon becoming aware of a Personal Data Breach.
- Taking into account the state of the art, the costs of implementation and the nature, scope, context and purpose of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, you and NuHosting will take, implement and maintain such technical and organisational measures as are appropriate to protect the Personal Data against unauthorised or unlawful Processing and against accidental loss, destruction, damage, alteration or disclosure.
- Each party shall comply always with Applicable Data Protection Law and shall not perform its obligations under the Agreement in such a way as to cause the other to breach any of its applicable obligations under Applicable Data Protection Law.
- Each party shall comply with its obligations set out in the Data Protection Specification.
- To the extent that NuHosting‘s performance of its obligations under the Agreement involves the Processing of Personal Data on your behalf, you shall ensure:
- you are not subject to any prohibition or restriction which would prevent or restrict you from disclosing or transferring such Personal Data to NuHosting, as required under the Agreement; and
- you have lawful grounds for Processing such Personal Data, including (if applicable) the consent of the individual to whom such Personal Data relates (and that such consent shall be valid under Applicable Data Protection Law).
- Where under Applicable Data Protection Law (including without limitation Article 82 of the GDPR and any applicable Law where you and the NuHosting may incur joint and several liability as Controller and Processor with any other person) NuHosting incurs any costs liability damages claims or expenses (other than for damage caused by Processing only where it has not complied with obligations of applicable DPA Regulation specifically directed to Data Processors or where it has acted outside or contrary to your lawful instructions under the Agreement), you shall indemnify NuHosting on demand against all such costs liability damages claims or expenses, save for such liability as corresponds directly to NuHosting’s part of the responsibility for the damage caused by NuHosting’s breach of the obligations of Applicable Data Protection Law or the Agreement.
- International clients. You acknowledge and agree that if you are a business located in a territory outside the European Union (EU), it is your responsibility to ensure compliance with Applicable Data Protection Law (or equivalent) in relation to transfers of your personal data from NuHosting to you.
- PCI DSS Requirements. In accordance with best practice as described in the Payment Card Industry Data Security Standard (PCI DSS) scheme to safeguard sensitive credit and/or debit card data, should you use the Services to store, process or transmit credit or debit card information you will:
- inform us in writing as soon as practicable and, in any event, before you do so;
- comply with the PCI DSS requirements; and
- you will take all necessary steps to ensure you are properly advised by your card acquirer or a PCI DSS Qualified Security Assessor (QSA) with regards to your obligations and appropriateness of your Service.
- Business Continuity. NuHosting warrants that it has and will undertake to maintain a business continuity plan for its operations that is consistent with the international standards ISO 27001:2013. While NuHosting takes all steps provided in the Agreement to protect your data, this does not constitute an absolute guarantee that a third party will not try to access, interrupt, delete or compromise your data. You are therefore responsible for determining the ultimate safety and integrity of your data.
- Pricing and Billing
- The pricing for the Services will be set out in your order for the Services and detailed in your Account.
- All pricing unless otherwise stated include VAT
- While we make every effort to ensure pricing on our website is accurate there may be instances where mistakes are made, in these instances we will inform you and;
- Where you have been charged higher than the correct amount we will provide you with a refund for the difference.
- Where you have been charged less than the correct amount we will provide you with the opportunity to either cancel your order or to pay the difference.
- We accept payments done through Credit & Debit card, PayPal and bank transfer.
- Bank Transfers
- Payments from within the UK will take up to 3 working days to be applied. A working day is classified as Monday – Friday excluding UK bank holidays.
- Payments from outside of the UK can potentially take longer than 7 working days dependant on the transfer method used. Please contact your payment provider for more details of timeframes.
- Payments must be made in GBP (Great British Pound), you are responsible for any fees incurred by your bank for conversion from your local currency.
- If a payment is received in any currency other than GBP we will convert your payment at the current exchange rate and deduct any fees incurred by our bank, this may result in your payment failing to cover the full amount due, if this happens, we will inform you that we require a further payment to cover the outstanding balance.
- You are responsible for all charges imposed by both the sending and receiving bank, it is your responsibility to include any additional amount to cover these charges, please check with your bank before making any transfer if you are unsure.
- You must include your invoice number as a reference on all bank transfers, failure to do so may prevent us from being able to locate the associated account which may result in suspension of your account for non-payment.
- If multiple invoices are outstanding we will apply the transfer starting with the oldest first, any excess amount will be applied to the next oldest and so forth, if the amount is to be applied to a specific invoice you must also include the invoice(s) reference.
- If the transferred amount exceeds the total due on your account the excess will be converted into service credit and applied to your account.
- Invoices are generated 5 days before the official due date. Payment must be made by the due date to avoid the suspension of your account. If no payment is received, your account will be suspended 5 days after the official due date and a £5 late payment fee added to outstanding invoice. If no attempt is made within 19 days past official due date to pay due invoice(s), we reserve the right to permanently terminate your account and delete all data held. In total 19 days from the official due date will pass before we permanently terminate your account.
- For any change in contact details, billing cycle changes, account upgrades / downgrades, cancellation or termination of hosting services, written authorisation is mandatory and to be submitted using the client area. Requests on our live-chat would not be accepted. It is important for us to establish the authenticity of the customer before carrying out such requests. All email communications must be done from the registered email address.
- Account renewal reminders will be sent 5 (Five) days before the renewal / due date for monthly, annual & biannual billing cycles. This is done to ensure that our clients get enough time to make payment(s). A second reminder will be sent before the due date and the third & final reminder would be sent on the day of renewal.
- A grace period of 5 (Five) days will be given to all unpaid accounts past the renewal / due date. The hosting service will be suspended on the 6th (Sixth) day of the account being past due and a notification email would be sent informing about the suspension of service. Backup, if purchased / applicable, will be provided only after the dues are paid during the suspension period, i.e. between 6th and 18th days (both days inclusive) of account being past due.
- We allow up to 5 (Five) days after the account has been suspended, for the renewal fee / dues to be paid. The account will be terminated permanently once this period of additional 14 days is over. After your account has been terminated, we can no longer guarantee the recovery of your data. Although all best efforts will be made to recover data past this point if invoices are paid, there is no guarantee that data can be successfully restored.
- We do have an automatic payment facility. You can store your credit or debit card details via our payment provider and your card will be charged every month on the due date of the invoice. You can select what services are automatically paid from the client area.
- For further enquiries or clarifications, please contact the billing department.
- VAT Policy
- If you are an individual located outside of the EU then you may qualify for VAT exemption. Individuals outside the EU must provide proof of address and identity. Accepted documents include passports, ID cards and recent utility bills.
- If you are a business located outside the EU then you may qualify for VAT exemption. To apply you must email or fax us details of their incorporation along with business trading status. The documents must show the location of the business.
- EU VAT registered businesses will be required to provide their VAT registration number which will be validated against the European Commission database. The number will also be re-checked at regular intervals. Any change of VAT status or VAT registration number must be notified to us immediately.
- Upon sign-up we must charge VAT on your first invoice; if eligibility for VAT exemption is proved however then the VAT charged on this invoice will be refunded in the form of a credit to your billing account and future invoices will be issued without the addition of VAT.
- Cancellations & Refunds
- All cancellation requests must be made by clicking the cancellation link found within the product details section of the client area. Please contact our customer services team for more information.
- Cancellation requests will not be accepted by email or live chat.
- 7 working days’ notice is required for all cancellation requests. A working day is classified as Monday – Friday excluding UK bank holidays.
- Cancellation requests are processed Monday to Friday, 8am to 6pm excluding UK bank holidays.
- In case of shared hosting account cancellation, the charges for free domain will be deducted from the amount to be refunded (if any). Domain will be free only for the initial first year in case of gTLDs and 1 year in case of .uk TLDs. Renewal charges will have to be paid as applicable at the time of renewal. Applicable TLDs covered under free domain registration/transfer offer are .com, .net, .org, .biz, .info, .eu, .co.uk, .org.uk, .me.uk.
- Should you cancel your hosting before the renewal date or wish to transfer your domain name to another service provider during its registration period, domain registration/transfer charges will be payable before such action is completed and we will notify you of these following your request to cancel.
- SSL certificates, domain name registrations, software licenses and WHOIS protection are not eligible for refunds.
- Pro-rata refunds are not available. This means that if you cancel your service before the end of the billing period, you will not receive a refund for the unused portion.
- Refunds will only be processed to the originating payment media (e.g. bank transfer, debit card, PayPal)
- Refunds can take up to 5 working days to be processed, the time for the funds to reach you is purely dependant on the payment type.
- If a refund which is requested by the Customer is to an international bank account outside of the United Kingdom, the Customer agrees to bear all charges incurred to us for the payment transfer. The amount which the Customer owes us shall be deducted from the total refund amount.
- Money Back Guarantee
- All subscribers of shared hosting plans, carry a 30-day unconditional money back guarantee. If you find the services to be deficient or unsatisfactory, you are entitled to a full refund of the base service cost (excluding software licenses, domain registration fees, domain transfer fees and domain renewal fees) within the first 30 days of the date of account set-up.
- Reseller, VPS, Dedicated Servers, Firewalls, and Backup Plans are not included under the 30-day money back guarantee policy.
- The 30-Day Money Back Guarantee Period is only applicable for first-time signups. Second time & subsequent sign-ups are not eligible.
- Software licenses, domain registration fees, domain transfer fees and domain renewal fees are excluded from the 30-day money back guarantee.
- Client Data & Backups
- We backup all shared hosting platforms daily for which the following applies:
- While we will make every effort to protect and backup data for clients on a regular basis, we do not guarantee the existence, accuracy, or regularity of its backup, therefore, you are solely responsible for making backup files in connection with your use of the Services.
- We do not backup VPS or dedicated servers unless you specifically purchase a backup plan from us for the chosen service.
- For backup services purchased from us including but not limited to “R1Soft backup”, “Acronis” and “Veeam” you acknowledge the following:
- If your backups exceed the amount of purchased storage space then backups will be suspended until you either reduce your usage or you purchase additional storage space.
- Some backup services are client configurable, we take no responsibility for changes you make to your backup settings that result in either the failure of your backups or the inability to recover your data. If you are unsure how to configure your backups correctly please contact support.
- You acknowledge that use of any of our backup services is at your own risk, although we will make all reasonable attempts to make the service accessible, secure and free from corruption, backups services are sold strictly as is and without warranty, we will not be liable for any loss, claim or damage which is caused by a failed backup.
- We have no knowledge of the data you store on your hosting package including its value and quantity. While our services are designed to be resilient and we do offer services designed to mitigate against data loss, we accept no liability for the loss of data and associated revenue, contracts or business.
- We backup all shared hosting platforms daily for which the following applies:
- Bandwidth
- If your service has a bandwidth limit and exceeds this limit, we will inform you. If you do not wish to purchase extra bandwidth or upgrade your services and continue to exceed the limit, the service shall be suspended until you demonstrate to us that you have taken measures to ensure that the limit won’t be exceeded again or upgrade your account, whichever is earlier. The service will be reactivated in the following month when your bandwidth allocation refreshes.
- Some plans are provided with unmetered bandwidth. Unmetered means that we do not accurately record and then enforce the bandwidth usage of your plan unless it is deemed to be using an excessive amount. An excessive amount is classed as either using more than 15% of the total bandwidth available to the physical server or that your usage is such that it is affecting the performance of the server to the detriment of other clients as determined by our engineers. When such events occur, we reserve the right to immediately suspend service if the level of use is at risk of causing a disruption to other users. In other cases, we will attempt to communicate with you to discuss said usage. We reserve the right to charge additional fees if the normal usage of your site frequently exceeds this usage. If said charges are not acceptable to you, we will attempt to provide a reasonable time frame for you to move services.
- Uptime Service Level Agreement
For the specific products and services listed below, we offer an uptime SLA. The purpose of this SLA is to provide an availability framework against which uptime for a product or service is measured. It is not an absolute guarantee of service uptime but a set of availability targets that we aim to deliver. In cases where we have been unable to meet these targets, we may offer you service credits subject to the provisions/exclusions below.- We shall endeavour to ensure the Network Availability and/or Power Availability for our service as follows:
cPanel Shared Hosting: 99.9% Network Availability
Business Shared Web Hosting: 100% Network Availability
Linux Reseller hosting: 99.9% Network Availability
Email Hosting: 99.9% Network Availability
Virtual Private Servers (VPS): 99.9% Network & Power Availability
Dedicated Servers: 99.9% Network & Power Availabilit - Network unavailability is defined as a complete loss of network connectivity to the switch port(s) that your service is connected to.
- Power unavailability is defined as the complete loss of power to your service due to failure with the incoming power feeds or physical hardware failure.
- If we fail to meet the agreed Network Availability and/or Power Availability in any calendar month, subject to exclusions, you may request a credit.
- The Network Availability and Power Availability calculation shall exclude periods when outages arise from, or are otherwise indirectly caused by:
- Scheduled or emergency maintenance.
- Misconfiguration or Negligence by the Client.
- Service loss due to incoming or outgoing denial-of-service attacks.
- Network issues that are out of our direct control, for example, outages at internet exchange points, content delivery networks or any related infrastructure.
- Actions taken by our staff due to abuse complaints or breaches of our AUP.
- Actions taken by our staff to ensure the continued availability, performance, and stability of our wider infrastructure and networks.
- Requests for credit under the SLA must be made within 14 days of the outage by raising a support ticket from your client area.
- For requests that meet the required criteria we shall credit you 0.5 days of service credit for each hour the service is unavailable rounded to the nearest hour and subject to a maximum credit of 50% of the monthly fee for the contracted service.
- The credit shall be made for the element of the Service(s) that were unavailable, it will not be made for the whole service and specifically excludes service addons, software licensing and backups.
- You shall not be entitled to any credits under this SLA if any payment for the Service(s) is overdue under the terms of this Agreement.
- You shall not be entitled to any credits under this SLA for any outage period during which service is suspended.
- You agree that service credits due under this SLA are the sole remedy against us for any non-availability of your services.
- We shall endeavour to ensure the Network Availability and/or Power Availability for our service as follows:
- Termination
- Exercising your right to change your mind if you are a consumer (Consumer Contracts Regulations 2013). If you are a consumer then for most products bought online you have a legal right to change your mind within 14 days and receive a refund. The right will end once we start to provide you with the Services.
- We reserve the right to refuse, terminate, or suspend your access to the Services for any reason at our sole discretion.
- We may suspend your Account immediately upon breach by you of any of the terms and conditions herein, including, without limitation, late or non-payment of monies due.
- Effect of Termination
- On termination or expiry of your Account for whatever reason you shall pay immediately all sums outstanding pending on your Account to us within 14 working days.
- You are responsible for all domain renewals after termination and we will provide you with such reasonable information upon request.
- Our responsibility for loss or damage suffered by you if you are a consumer
- We are responsible to you for foreseeable loss and damage caused by us. If we fail to comply with these terms, we are responsible for loss or damage you suffer that is a foreseeable result of our breaking this contract or our failing to use reasonable care and skill, but we are not responsible for any loss or damage that is not foreseeable (including but not limited to loss or corruption of data). Loss or damage is foreseeable if either it is obvious that it will happen or if, at the time the contract was made, both we and you knew it might happen, for example, if you discussed it with us during the sales process.
- We do not exclude or limit in any way our liability to you where it would be unlawful to do so. This includes liability for death or personal injury caused by our negligence or the negligence of our employees, agents or subcontractors; for fraud or fraudulent misrepresentation; for breach of your legal rights in relation to the products.
- When we are liable for damage caused by defective digital content. If defective digital content which we have supplied damages a device or digital content belonging to you and this is caused by our failure to use reasonable care and skill we will either repair the damage or pay you compensation. However, we will not be liable for damage which you could have avoided by following our advice to apply an update offered to you free of charge or for damage which was caused by you failing to correctly follow installation instructions or to have in place the minimum system requirements advised by us.
- Third party material and content. We exclude all liability of any kind in respect of any material on the internet posted by the Customer by means of the Services and we are not responsible in any way for any goods (including software) or services provided by third parties advertised, sold or otherwise made available by means of the Services or on the internet, the accuracy, completeness or suitability for any purpose of any website content and the acts or omissions of other providers of telecommunications or internet services (including domain name registration authorities) or for faults in or failures of their equipment.
- We are not liable for business losses. If you are a consumer we only supply the products to you for domestic and private use. If you use the products for any commercial, business or re-sale purpose our liability to you will be limited as set out in the clause below.
- Our responsibility for loss or damage suffered by you if you are a business
- Nothing in these terms shall limit or exclude our liability for:
- death or personal injury caused by our negligence, or the negligence of our employees, agents or subcontractors (as applicable);
- fraud or fraudulent misrepresentation;
- breach of the terms implied by section 12 of the Sale of Goods Act 1979 or section 2 of the Supply of Goods and Services Act 1982; or
- any matter in respect of which it would be unlawful for us to exclude or restrict liability.
- All terms implied by sections 13 to 15 of the Sale of Goods Act 1979 and sections 3 to 5 of the Supply of Goods and Services Act 1982 are excluded.
- Subject to clause 1 above:
- we shall not be liable to you, whether in contract, tort (including negligence), breach of statutory duty, or otherwise, for any loss of profit, or any indirect or consequential loss arising under or in connection with any contract between us (including but not limited to loss or corruption of data and loss of profit); and
- our total liability to you for all other losses arising under or in connection with any contract between us, whether in contract, tort (including negligence), breach of statutory duty, or otherwise, shall be limited to the annual fees paid by you in the twelve months in which the liability arose.
- We exclude all liability of any kind in respect of any material on the internet posted by the Customer by means of the Services and we are not responsible in any way for any goods (including software) or services provided by third parties advertised, sold or otherwise made available by means of the Services or on the internet, the accuracy, completeness or suitability for any purpose of any website content and the acts or omissions of other providers of telecommunications or internet services (including domain name registration authorities) or for faults in or failures of their equipment.
- Nothing in these terms shall limit or exclude our liability for:
- Delays
- We will not be liable for failure or delay in performing our obligations if such failure or delay is due to circumstances beyond its reasonable control, including but not limited to acts of any governmental body, act of God, war, insurrection, sabotage, embargo, fire, flood, malicious damage, pandemic, epidemic, strike or other labour disturbance, interruption of or delay in transportation, unavailability of, interruption or delay in telecommunications or third party services (including DNS propagation), failure of third party software or hardware or inability to obtain raw materials, supplies or power used in or equipment needed for provision of the Services.
- Indemnity
- The client agrees that it shall defend, indemnify, save and hold us harmless from any and all demands, liabilities, losses, costs and claims, including reasonable legal fees asserted against us, its agents, its customers, officers and employees, that may arise or result from any acts or omissions of the Customer, its agents, employees or assigns in connection with their use of the Services.
- Law
- This Agreement will be governed by and construed and interpreted in accordance with the law of England and Wales and the parties submit to the exclusive jurisdiction of the English Courts.
- The Customer and us both agree that a court may strike out or override any part of these terms and conditions if it considers them to be illegal, unenforceable or unfair and in such cases enforce only the terms and conditions as if the offending clause or clauses had never been contained in them.
- Modification of Terms of Service
- We reserve the right to modify or change these terms of service at any time. All customers are bound by the latest terms of service published on this website.
1. Introduction
This policy explains when, why and how we collect personal information from the people who visit our website, sign up or purchase any of our services or request or contact us in any other manner. The policy also details the conditions under which we may disclose the information to others and how we keep it secure.
While we encourage clients to read our privacy policy in full, we do have a number of guiding principles we operate our company by:
- We will never sell your data on.
- We will never share your data for marketing to by any third parties.
- We will always keep your personal data secure using strong encryption, abiding by data protection rules and by implementing good security practice.
- We will never send you direct email marketing without your consent, our newsletter requires you to explicitly opt-in, you can opt-out at any time using the unsubscribe link contained within the email or through your client area under you profile.
If you are ever concerned or have question about how your personal data is collected or used, please contact us at contact@mynuweb.co.uk.
You can read our full privacy policy below.
2. About us
NuHosting is part of the NuWeb Solutions group which is operated by Atlantis NuWeb Limited and is registered at the following address:
18 Lowgate Crescent,
Gedney Dyke,
Spalding,
Lincolnshire,
PE12 0AP,
United Kingdom
Company number: 11180762
This policy (together with our terms of use Terms and Conditions and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Act 2018 (the Act) and GDPR (General Data Protection Regulation), the data controller is Atlantis NuWeb Limited, a company registered in England and Wales under company number 11180762 and with Our registered office at 18 Lowgate Crescent, Gedney Dyke, Spalding, Lincolnshire, PE12 0AP, United Kingdom.
Our nominated representative for the purpose of the Act is Mr. Juan Arroyo.
3. When do we collect your personal data
We may collect data about you in the following ways:
- By filling in forms on any of our websites, this includes information provided at the time of registering to use our websites, subscribing to any of our services, posting material or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by us or if you report a problem with our site.
- If you contact us, we may keep a record of that correspondence.
- We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
- Details of transactions you carry out through our site and of the fulfilment of your orders.
- Visiting our sites, including, but not limited to, traffic data, location data and other communication data required for our own security, diagnostic, authentication and billing.
4. What personal data do we collect
If you are simply viewing our website then we will collect the following information within our logs:
- IP Address (See cookies and IP addresses)
If you sign up to use our services we will then collect the following information:
- Name
- Address
- Email Address(s)
- Telephone number(s)
- IP address
- Payment details
While not actively collected we may store any other personal information that you may disclose during live chat, tickets or emails.
5. Cookies and IP Addresses
IP Addresses
We collect IP address information for security (DDoS prevention, anti-hacking and fraud prevention), diagnostics and statistical analysis of traffic used for improvements to the performance and usability of our services, for GDPR purposes we collect this information under legitimate interest.
Cookies
A cookie is a small file saved on your computer that is used to help store preferences and other information that is used by websites you may visit.
We use cookies for the Following:
- Authentication of users when logging in or out of our services.
- Analysis of traffic to our website via Google Analytics (see Google Analytics).
- Tracking of website preferences.
- Third party services such live chat.
If you register with us or if you continue to use our site, you agree to the use of cookies.
You can block cookies by activating the setting in your browser which allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies you may not be allowed access to all or parts of our site.
Unless you have adjusted your browser settings so that it will refuse cookies, our system will issue cookies as soon as you visit our site.
6. Where we store and process your personal data
The data that we collect from you is stored in the UK but it may be processed by staff operating outside the EEA (European Economic Area) who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.
By submitting your personal data, you agree to the processing of this data outside of the EEA.
We take all steps necessary to ensure that your data, regardless of where it is processed, is treated securely and in accordance with this privacy policy and the GDPR (General Data Protection Regulation) standards.
7. How we Protect your personal data
We treat all data with the utmost care and take appropriate steps in compliance with data protection regulation to ensure it is kept safe.
- All data we collect is done so over encrypted connections (https).
- All data is stored behind state of the art firewalls managed by our security team.
- All data is access controlled to ISO27001 standards.
- All systems storing personal data have access logging.
- All passwords are encoded at rest.
- All systems are subject to regular penetration testing and are monitored for vulnerabilities and attacks.
8. Uses we make of personal data
We use information held about you in the following ways:
- To verify your identity.
- To provide you with the products and services you have purchased from us.
- To carry out our obligations arising from any contracts entered into between you and us.
- To ensure that content from our site is presented in the most effective manner for your device.
- To respond to queries.
- To provide you with information, products or services that you request from us where you have consented to be contacted.
- To notify you about changes to our services.
- To send you marketing emails where you have given explicit consent.
- To display personalised Ads from us.
- To prevent fraud.
- To detect, prevent and diagnose potential security breaches.
9. Legal basis for the collection and processing
Data protection law sets out the conditions under which personal data can be collected and which we use as the basis for collection and processing, these include:
Contractual obligations
When you purchase a service, we need to collect personal data to fulfil our legal contractual obligation, for example: so we can manage and invoice your account and contact you for technical support purposes.
Legal compliance
The law requires we collect and process data for certain purposes such as for keeping financial records (i.e. invoicing) and that we can comply with law enforcement requests for data.
Legitimate interest
We collect data under legitimate interest in a way that is reasonably expected as part of the day to day running of our business.
For example, we collect and log IP addresses for fraud protection and security as well as analysis of our site usage.
Consent
In certain cases, we may collect and process your data with your consent, for example our newsletter and hot offers emails. Consent to receive these can be withdrawn at any time.
10. How long we keep personal data
Your data will be kept until it is no longer required for the purpose of its collection.
At the end of the retention period the data will either be deleted or anonymised so it can no longer be linked back to an individual.
Personal data linked to purchases or any other financial transaction are kept for a minimum of 6 years as required by UK law to retain financial data.
11. Who we share personal data with
Like many websites we use a number of third-party services for functionality such as email sign-up and payment processing. The following is a list of companies we share data with on a day to day basis. This list does not include services we share anonymous data with or that provide services on an ad-hoc basis such as IT contractors. All the suppliers below have been carefully selected to ensure they provide suitable protections under GDPR.
Tawk.to
Talk.to provides our live chat service available on our website. When you contact us via live chat, your conversation will be recorded and archived on Tawk.to’s servers. These archives may include personal information that you disclose during the conversation.
Please note that live chat transcripts, if requiring further action (e.g., technical support queries), may be copied to our ticketing system for future reference.
We record conversations to improve our customer service and assist with support queries. The recorded data is handled with the utmost care, and Tawk.to employs robust security measures, including:
Encryption in Transit: All data transmitted between your device and Tidio’s servers is encrypted using industry-standard protocols, ensuring the confidentiality and integrity of your information during the transmission process.
Encryption at Rest: The archived conversations stored on Tawk.to’s servers are encrypted at rest. This means that even when the data is stored on Tidio’s servers, it is safeguarded by encryption, adding an extra layer of protection to your personal information.
Mailchimp
Our newsletter and marketing email lists are managed through Mailchimp, these emails are opt-in, when you opt-in to our newsletter your name and email address will be added to our mailing list which is held securely on mailchimp’s servers, by opting in you agree to:
- Transfer your contact information to MailChimp
- Store your contact information in our MailChimp account
- To being sent marketing emails from our MailChimp account (These will be for our services only)
- To have tracked interactions for email marketing and ad placement purposes.
Emails are initiated and managed by ourselves.
Please see the section entitled “Newsletter and Marketing Emails” for information on how to opt out of these emails.
Privacy Policy: Mailchimp legal privacy
Stripe
Stripe is used to provide secure credit and debit card processing services. If you choose to pay by this method then your card details, name, address and email will be transmitted to Stripe securely for the processing of payment and for fraud prevention.
If you choose to store your card details then this will be saved alongside your name, address and email on Stripe’s servers.
Privacy Policy: Stripe GB privacy
Maxmind
Maxmind is used for fraud prevention, if you make a purchase your IP address will be shared with Maxmind to determine the approximate location the order is being placed from and if the IP is a known source of fraud.
Privacy Policy: Maxmind EN privacy policy
Tucows (OpenSRS)
Tucows are a domain registrar and owners of OpenSRS, when you register a domain with us you are required to provide contact details that are used to register your domain against. It is important to note that these details will be visible within the publicly searchable database called “whois”, we strongly advise customers when making a GTLD (Generic top-level domain) purchase to choose the whois privacy option which anonymises the whois database entry.
(It should be noted that prior to the 25th of May 2018 all personal whois data will be anonymised by Tucows to comply with GDPR.)
Privacy Policy: https://opensrs.com/privacy-policy/
Nominet
Nominet are the registration authority for .uk and .co.uk domains, when you register a .UK domain you are required to provide contact details that are used to register your domain against. It is important to note that these details will be visible within the publicly searchable database called “whois”, if registering the domain as an individual you can opt out of having details listed in the whois database, you cannot opt-out if registering for commercial use.
(Important: prior to the 25th of May 2018 all personal whois data will be anonymised by Nominet to comply with GDPR.)
Privacy Policy: Nominet resources privacy policy
Janet
Janet is the domain registration authority for .ac.uk, .gov.uk, .gov.scot, .gov.wales and .llyw.cymru domains. If you register any of these domain with us then your contact details will be shared for the purpose of linking and verifying your registration.
Privacy Policy: Jisc website privacy notice
Microsoft
We use Microsoft Office 365 for document storage, email and collaboration, in some instances your personal data may be stored on office 365 servers, any data stored there is encrypted and controlled by us.
Privacy Policy: Microsoft online legal
Trustpilot
Trustpilot provides online reviews of goods and services, if you make a purchase and with your consent we may share you email address for the purpose of sending you an email invitation requesting a review, this is a onetime invitation. Any reviews are published under Trustpilot’s own terms and conditions and privacy policy.
Privacy Policy: Legal trustpilot end user privacy terms
12. Ads and Remarketing
We use Google AdWords remarketing services on our blog and forum to display our ads on third party websites (including Google) to previous visitors of those pages, this is done in the form of a cookie that contains anonymous data regarding your visit.
If you have a google account you can opt-out of receiving these ads here http://www.google.com/settings/ads
Google are also a member of the NAI (Network Advertising Initiative), you can also use their site to opt out here http://www.networkadvertising.org/managing/opt_out.asp
13. Google Analytics
Like many websites we use Google Analytics to collect anonymous data about the users of our sites such as how often they visit, what pages they visit, what time they visit, how long the stay and what country they are visiting from.
This data is collected using cookies and from your IP address, the resulting statistics are used for the following purposes:
- Improving website usability
- Tracking the success of marketing campaigns
- Pattern analysis
You can prevent Google Analytics from collecting this information by installing the google opt-out browser addon: Tools google dlpage gaoptout
To learn how Google uses data collected from our own and partner sites please see the following link: Policies google privacy partners
14. Newsletter and Marketing Emails
All our marketing emails are opt-in, we will never sell on your details or pass them on to third parties for marketing purposes. If you have opted in to receive these then you can opt out at any time in one of three ways:
- If you have received an email, click on the unsubscribe link located in the email footer.
- Log into your client area and select: Communication > Manage E-mail Subscriptions
- By contacting our customer services department.
15. Disclosure of your personal information
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may disclose your personal information to third parties:
If Atlantis NuWeb Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it (Atlantis NuWeb Limited) about its customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions of supply Terms and Conditions and other agreements; or to protect the rights, property, or safety of our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
16. External links
Our site may, from time to time, contain links to and from the websites of our partners. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
17. Your rights under GDPR
Under GDPR (General Data Protection regulation) you have a number of rights relating to your personal data, these will come into force on the 25th May 2018, for further information please see https://ico.org.uk
Right to Restrict Processing
You have the right to request we restrict processing of your personal data where there is no legitimate interest for us to do so:
- Where the accuracy of the personal data is contested, to restrict the processing until such time as the accuracy has been sufficiently verified.
- Where you object to the processing (See Right to Object), and where we are considering whether there are legitimate grounds to override the request.
- When processing is unlawful and you oppose erasure and request restriction instead.
- If we no longer need the personal data but you require the data to establish, exercise or defend a legal claim.
You can exercise the right at any time by contacting our team (see Contacting Us).
Right of Access (Access to Information)
The GDPR Act gives you the right to access information held about you.
You can exercise this right by contacting us (see Contacting Us).
We are required to verify your identify before processing any right to access request, once verified the data shall be provided within 28 days.
The data shall be provided free of charge however an admin fee may be applied where a request is manifestly unfounded or excessive, particularly if it is repetitive.
Right to Erasure (Also known as the right to be forgotten)
As an individual you have the right to request the erasure of any data we hold on you, this is not an absolute right, for example it does not override our requirement under UK law to keep financial data such as invoice information.
You can make a request where your personal data is no longer necessary in relation to the purpose for which it was originally collected/processed, for example if you cancel all services you have with us.
To make a right to erasure request please contact our customer services team (see Contacting Us).
Right to Rectification
The GDPR provides the right to have any personal data rectified that may be incorrect or incomplete.
Customers can update their own personal details via the client area however if this is not sufficient please contact our customer services team (See contacting Us).
Right to Object
You have the right to object to the processing of your personal data where there is no legitimate or lawful reason to do so.
To make a right to object request please contact our customer services team (see Contacting Us).
18. Changes to our privacy policy
We keep our privacy policy under regular review, you can always find the latest version at the URL below:
NuHosting legal privacy policy
19. Contacting us
Questions, comments and requests regarding this privacy policy are welcomed, you can contact us in the following ways:
- Existing customers can contact us by creating a ticket through their client area.
- Email us at contact@mynuweb.co.uk
- Or write to us at: NuHosting 18 Lowgate Crescent, Gedney Dyke, Spalding, Lincolnshire, PE12 0AP, United Kingdom.
20. Contacting the regulator
While we will make every attempt to rectify any situation, where you feel your data has not been handled appropriately you have the right to contact the regulator. In this case the regulator is the Information commissioner’s office (ICO).
You can contact them on 0303 123 113 or by visiting Ico concerns