BorgohostSee pricing

Privacy Policy

Who is responsible

Sean Jeremiah Vella St John, trading as Borgohost, is the controller. Contactprivacy@borgohost.com, or write to the registered address on ourlegal notice.

What we hold, and why

  • Account details (name, email, address, country, VAT number if you give one): to provide the service and to issue a correct invoice. Lawful basis: performance of a contract, and legal obligation for the tax records.
  • Billing records (invoices, amounts, tax evidence): legal obligation. Malta VAT law requires these to be kept at least six years from the end of the year they relate to.
  • Technical logs (IP addresses, request logs, error traces): to run and secure the service. Lawful basis: legitimate interests. Kept 30 days unless part of an abuse case.
  • Support email: to answer you. Kept while your account is open, then 12 months.

We do not sell personal data, we do not run advertising, and we do not profile you.

Who else processes it

A small number, each named on our sub-processor list with what it can see, where it is, and whether it is in use today or contracted for launch. That page is the maintained version and it is dated.

Your rights

You can ask for a copy of what we hold, correction, deletion, restriction, portability, or to object to processing based on legitimate interests. Email the address above and say what you want. We answer within one month, usually sooner. If you are unhappy with how we handle it you can complain to the Information and Data Protection Commissioner in Malta.

Transfers outside the EEA

Some processors are outside the EEA. Where they are, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

Your site's own visitors

For personal data in your own WordPress site, you are the controller and we are your processor. That relationship is governed by our Data Processing Agreement, which is published in full and forms part of your contract. You do not need to request it or sign anything separately.

How long site data survives a cancellation or a non-payment termination, to the day, is in thebackup and data retention policy.