# Privacy notice

> This notice explains what personal data we collect when you use our website, free tools and services, why we collect it, who we share it with and what rights you have. It applies whether you buy for a business or as an individual.

Source: https://wharfcloud.co.uk/legal/privacy · Last updated 22 October 2026 · WharfCloud

## 1. Who is responsible

Sunucu Internet Services Consultancy Ltd, trading as WharfCloud, registered in England and Wales (company number 12963678, registered office Office 53, The Wenta Business Center, 1 Electric Avenue, Enfield, EN3 7XU, England), is the controller for the personal data described here. Contact us about privacy at [support@wharfcloud.co.uk](mailto:support@wharfcloud.co.uk).

When we host or manage systems for a business customer that contain its own customers' or staff's personal data, we act as that business's processor instead, under our [data processing agreement](https://wharfcloud.co.uk/legal/dpa). If you are an individual using our services for yourself, what you store on them stays yours: we access it only to provide and support the service, on your instructions, or where the law requires it.

## 2. What we collect and why

Table: Personal data we process, purposes and lawful bases

| Data | Purpose | Lawful basis |
| --- | --- | --- |
| Name, company, email, phone, password (stored hashed by our authentication provider), two-factor settings | Creating and securing your account | Contract |
| Billing contact, order history, invoices; card details are handled by our payment provider and never stored by us | Taking payment, keeping accounts records | Contract; legal obligation |
| Whether you buy as a business or a consumer, and (consumers) your request to start within the cancellation period, with its time and the terms version | Showing what was agreed and handling cancellations and refunds | Contract; legal obligation |
| Support tickets and messages, including attachments you send | Supporting your services | Contract |
| Contact form and free tool submissions: name, email, company, message, the figures you choose to send | Answering your enquiry and following up about it | Legitimate interests |
| Marketing preference | Sending occasional updates, only if you opted in | Consent (withdraw at any time) |
| IP address (stored only as a keyed hash), browser type, security and audit logs | Rate limiting, fraud prevention and security | Legitimate interests |

> **Our free tools run in your browser** The AWS bill X-ray and migration cost calculator do their calculations on your device. Files you open in the AWS bill X-ray are never uploaded. We only receive what you choose to send through the optional email form, and the form shows you what that is.

## 3. Who we share it with

We use a small number of service providers to run WharfCloud, such as hosting, payments and email delivery. They are listed with their purpose and location on our [sub-processors page](https://wharfcloud.co.uk/legal/subprocessors). We do not sell personal data and do not share it for advertising.

We may disclose data where the law requires it, or to protect our services and customers from fraud or abuse.

## 4. International transfers

We keep data in the UK where we can. Some providers are based in, or may access data from, other countries. Where personal data leaves the UK we rely on UK adequacy regulations or on safeguards approved under UK GDPR, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

## 5. How long we keep it

- What you store on a service (servers, volumes, backups): deleted 14 days after the service ends.
- Account data: while your account is open, then deleted within 90 days of closure unless needed for the reasons below.
- Invoices, orders and accounting records, including what you agreed to when ordering: six years after the end of the financial year they relate to, as UK company law and HMRC require.
- Enquiries from the contact form and free tools: up to 24 months after our last contact with you.
- Security and audit logs: up to 12 months, longer only when needed to investigate an incident.

## 6. Your rights

You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict our use of it, ask for it in a portable format, and withdraw consent where we rely on consent. Email [support@wharfcloud.co.uk](mailto:support@wharfcloud.co.uk) and we will reply within one month.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office at [ico.org.uk/make-a-complaint](https://ico.org.uk/make-a-complaint/).

## 7. Security

We use encryption in transit, access controls with two-factor authentication for staff, row-level access rules in our database, hashed identifiers in logs and an audit trail of administrative actions. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

## 8. Cookies

We only use cookies and similar storage that are strictly necessary. See our [cookie policy](https://wharfcloud.co.uk/legal/cookies).

---

WharfCloud is a trading name of Sunucu Internet Services Consultancy Ltd, registered in England and Wales, company number 12963678. Not VAT registered.
Support: engineers Monday to Friday, 08:00 to 18:00 UK time. Critical incidents: A person responds to critical incidents within 1 hour (Every day, 07:00 to 23:00 UK time). Automated monitoring and automated recovery overnight and at weekends.
Contact: hello@wharfcloud.co.uk · https://wharfcloud.co.uk/contact