Legal · Privacy
Privacy notice
This notice explains what personal data we collect when you use our website, free tools and services, why we collect it, who we share it with and what rights you have. It applies whether you buy for a business or as an individual.
Last updated
1. Who is responsible
Sunucu Internet Services Consultancy Ltd, trading as WharfCloud, registered in England and Wales (company number 12963678, registered office Office 53, The Wenta Business Center, 1 Electric Avenue, Enfield, EN3 7XU, England), is the controller for the personal data described here. Contact us about privacy at support@wharfcloud.co.uk.
When we host or manage systems for a business customer that contain its own customers' or staff's personal data, we act as that business's processor instead, under our data processing agreement. If you are an individual using our services for yourself, what you store on them stays yours: we access it only to provide and support the service, on your instructions, or where the law requires it.
2. What we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, company, email, phone, password (stored hashed by our authentication provider), two-factor settings | Creating and securing your account | Contract |
| Billing contact, order history, invoices; card details are handled by our payment provider and never stored by us | Taking payment, keeping accounts records | Contract; legal obligation |
| Whether you buy as a business or a consumer, and (consumers) your request to start within the cancellation period, with its time and the terms version | Showing what was agreed and handling cancellations and refunds | Contract; legal obligation |
| Support tickets and messages, including attachments you send | Supporting your services | Contract |
| Contact form and free tool submissions: name, email, company, message, the figures you choose to send | Answering your enquiry and following up about it | Legitimate interests |
| Marketing preference | Sending occasional updates, only if you opted in | Consent (withdraw at any time) |
| IP address (stored only as a keyed hash), browser type, security and audit logs | Rate limiting, fraud prevention and security | Legitimate interests |
4. International transfers
We keep data in the UK where we can. Some providers are based in, or may access data from, other countries. Where personal data leaves the UK we rely on UK adequacy regulations or on safeguards approved under UK GDPR, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
5. How long we keep it
- What you store on a service (servers, volumes, backups): deleted 14 days after the service ends.
- Account data: while your account is open, then deleted within 90 days of closure unless needed for the reasons below.
- Invoices, orders and accounting records, including what you agreed to when ordering: six years after the end of the financial year they relate to, as UK company law and HMRC require.
- Enquiries from the contact form and free tools: up to 24 months after our last contact with you.
- Security and audit logs: up to 12 months, longer only when needed to investigate an incident.
6. Your rights
You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict our use of it, ask for it in a portable format, and withdraw consent where we rely on consent. Email support@wharfcloud.co.uk and we will reply within one month.
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint (opens in a new tab).
7. Security
We use encryption in transit, access controls with two-factor authentication for staff, row-level access rules in our database, hashed identifiers in logs and an audit trail of administrative actions. No system is perfectly secure; if a breach affects you we will tell you as the law requires.