For customers in the EU and UK.
If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (and UK GDPR) gives you additional rights. This page explains how we meet them.
1. Our role
For your account, billing and support data, 1uphost is the controller. For personal data contained in websites, email and backups you host with us, you are the controller and we are your processor, acting only on your documented instructions.
2. Lawful bases
Performance of a contract — to provide the services you order. Legal obligation — tax records and identity verification. Legitimate interests — securing our network and preventing fraud, balanced against your rights. Consent — for marketing, which you can withdraw at any time.
3. Data Processing Agreement
Our Data Processing Agreement under Article 28 applies automatically to every customer and covers confidentiality, security, sub-processors, assistance with data-subject requests and deletion at the end of the service. You can download a signed copy from your dashboard.
4. International transfers
Our primary infrastructure is in India. Transfers of EEA or UK personal data to India are made under the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, with a transfer impact assessment available on request.
5. Sub-processors
We use a small number of sub-processors, such as payment gateways and email delivery providers. The current list is published on our website, and we give 30 days’ notice before adding a new one so you can object.
6. Your rights
You can request access, rectification, erasure, restriction, data portability and object to processing based on legitimate interests. We respond within one month. You can also complain to the supervisory authority in your country.
7. Breach notification
If a breach affects personal data we process for you, we notify you without undue delay and within 48 hours of becoming aware, so you can meet your own 72-hour obligation.
8. Contact
Contact our data protection team at grievance@1uphost.com. Our EU representative under Article 27 is listed on this page once appointed.