WP Pro Host is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains our approach to data protection and our responsibilities as both a data controller and a data processor.
WP Pro Host acts as: a Data Controller for personal data collected from our website visitors and customers (name, email, billing information); a Data Processor for any personal data stored in your WordPress database as part of your hosted website. As a data processor, we process your customers' data only on your instruction and in accordance with a Data Processing Agreement (DPA).
If you are processing personal data of EU or UK individuals via your hosted website (for example, WooCommerce customer data or contact form submissions), you may require a Data Processing Agreement with WP Pro Host. Contact us at privacy@wp-pro-host.com to request a DPA.
All customer data is stored on our servers located in UK data centres. Data is not transferred outside the UK or EEA without appropriate safeguards. We do not use third-party cloud providers for primary storage.
We implement appropriate technical and organisational measures to protect personal data, including: encryption at rest and in transit; access controls and authentication; regular security audits; incident response procedures; staff training on data protection.
In the event of a personal data breach that is likely to result in a risk to individuals, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR. We will also notify affected customers without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
For data protection enquiries or to exercise your rights under UK GDPR, contact: privacy@wp-pro-host.com. You also have the right to lodge a complaint with the ICO at ico.org.uk.