Who we are

HOST4DK, Bybakken, 3600 Frederikssund, Denmark, CVR-nr.: 46837525, is the data controller for the personal data described here. Contact: info@host4dk.com.

What we collect

When you create an account or order: your name, email, phone, billing address, company and VAT number, the domain you order, and your order and payment history. When you contact us: your message and email address. When you use our website and servers: technical data such as IP address, browser and log entries. Card and PayPal details are handled by our payment providers and never stored by us. If you choose to save a card for later payments, Stripe stores it; we keep only Stripe’s reference to it, the card brand, the last four digits and the expiry date.

Why we use it and our legal basis

To deliver, bill, renew and support your hosting, including renewal reminders by email and, if you turn it on, automatic renewal with your saved card (contract, GDPR Article 6(1)(b)). To keep accounting records as the Danish Bookkeeping Act requires (legal obligation, Article 6(1)(c)). To keep our service secure, prevent abuse and answer your questions (legitimate interest, Article 6(1)(f)). Once, a few days after your website is ready, we email you a request to review us on Trustpilot (legitimate interest, Article 6(1)(f)). We do not share your data with Trustpilot, and you can say no with one click in that email. We do not send newsletters or marketing emails. We do not make decisions about you by automated means alone.

How long we keep it

Accounting records are kept for 5 years from the end of the financial year, as the Danish Bookkeeping Act requires. Account and order data are kept while you are a customer and for up to 3 years after, the Danish limitation period for claims. Invoices and credit notes are accounting records. A saved card is kept until you delete it under My account › Payment methods or close your account. Messages you send us are kept for up to 2 years. Server and security logs are deleted after 90 days. Your website files, databases and email are deleted within 30 days after your plan ends, and our backups of them are overwritten within a further 30 days.

Where your data is stored

Our servers are in Denmark and run by HOST4DK. Your account data, your website files, databases and email, and all our backups are stored on our own equipment in Denmark.

Who we share it with

Only with the providers we need to run the service: Stripe and PayPal to take payments; Cloudflare for DNS and domain registration; Let’s Encrypt to issue SSL certificates (domain name only); Punktum dk when you register a .dk domain; our bank; and our accountant. Our own mail server sends our emails, so no outside email service sees them. We do not sell your data and do not share it for advertising. The providers that process data on our behalf, and where they do it, are listed in our Data Processing Agreement.

Transfers outside the EU

Stripe, PayPal, Cloudflare and Let’s Encrypt may process some data outside the EU/EEA, mainly in the USA. They are covered by the EU-US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

Data on your website

For personal data that you store on your website or in your email account, you are the data controller and we are your data processor. Our Data Processing Agreement is part of every plan, free of charge.

Cookies

We use only necessary cookies: for login, cart and checkout, and to remember your language. We do not use analytics or advertising cookies. If we add any, we will ask for your consent first, and you can change your choice at any time under Cookie settings.

Security

We use encrypted connections (TLS 1.2/1.3), two-factor sign-in for our administration, admin panels that cannot be reached from the internet, websites isolated from each other, firewalls with automatic blocking of attacks, updates and daily backups. Read more on Data protection at HOST4DK.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data (data portability), and you can object to processing based on legitimate interest. Email info@host4dk.com and we will reply within one month. You can close your account yourself under My account. You can also complain to Datatilsynet, the Danish Data Protection Agency (datatilsynet.dk).

Changes

We may update this policy. The date at the top shows the latest version, and we will tell customers by email about important changes.