Cloud Cabin (“Cloud Cabin”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit https://cloudcabin.com, use our services, or interact with our platforms.
This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Cloud Cabin is a trading name of Cloud Cabin Limited, a company registered in England and Wales.
- Company Number: 16632800
- Registered Office: Suite A, 82 James Carter Road, Mildenhall, Suffolk, United Kingdom, IP28 7DE
We provide:
- Domain registrations and management
- Website and WordPress hosting
- Website builder hosting
- Email hosting and related services
For the purposes of UK data protection law, Cloud Cabin acts as:
- Data Controller for account, billing, support, marketing, and website usage data
- Data Processor for customer content and personal data processed within hosted services, where applicable
If you are a Business Customer and we process personal data on your behalf as part of providing the Services, a Data Processing Addendum (DPA) may apply. You can request a copy by contacting support@cloudcabin.com.
Contact details:
Email: support@cloudcabin.com
Website: https://cloudcabin.com
2. Information We Collect
a) Information You Provide Directly
- Name
- Email address
- Billing and contact address
- Telephone number
- Company name and VAT number (if applicable)
- Payment and transaction details (processed by third-party providers)
- Support tickets, emails, and communications
b) Account, Technical, and Usage Data
- IP address and connection metadata
- Browser type, version, and operating system
- Login timestamps and authentication events
- Service usage statistics and resource consumption
- System, security, and access logs
3. Social Login (Google, Facebook & X)
We offer optional social login using Google, Facebook, or X (formerly Twitter).
- We receive limited profile data (such as name, email address, and provider ID)
- We do not receive your passwords for those platforms
- We do not post content on your behalf
- Data is used solely to authenticate, create, or link your Cloud Cabin account
Use of social login is subject to the privacy policies of the respective providers. You may disconnect social login at any time via your account settings.
4. How We Use Your Information
We use personal data to:
- Provide, operate, and manage our services
- Create and administer customer accounts
- Process payments, invoices, renewals, and refunds (where applicable)
- Provide customer support and technical assistance
- Send service-related communications and security notices
- Improve service reliability, performance, and security
- Detect, prevent, and investigate fraud, abuse, and unauthorised access
- Comply with legal and regulatory obligations
5. Legal Basis for Processing
We process personal data under the following lawful bases:
- Contract – where processing is necessary to provide services you have ordered
- Legal obligation – accounting, tax, regulatory, and compliance requirements
- Legitimate interests – security, service improvement, fraud and abuse prevention
- Consent – marketing communications and optional services (where applicable)
6. Payment Processing
We do not store full payment card details. Payments are processed securely by PCI-DSS-compliant third-party payment processors. We may retain transaction references and billing metadata for accounting, fraud prevention, and dispute handling.
7. Data Sharing and Disclosure
We may share personal data with trusted third parties where necessary to provide our services, including:
- Payment processors
- Domain registrars and registries
- Hosting infrastructure and datacentre providers
- Security, monitoring, and abuse-prevention services
- Authentication and identity providers
We may also disclose personal data where required to comply with applicable law, respond to lawful requests, enforce our Terms and Conditions, investigate abuse, or protect our rights, users, and infrastructure.
All third parties are required to process personal data securely and in accordance with applicable data protection laws.
8. International Data Transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, including adequacy regulations, standard contractual clauses, or equivalent legal mechanisms as required by UK GDPR.
9. Data Retention
We retain personal data only for as long as necessary to:
- Provide and support services
- Comply with legal, accounting, and regulatory obligations
- Resolve disputes and enforce our Terms
Where Services are cancelled or terminated, data is retained only for as long as required for operational, security, legal, and dispute-resolution purposes, after which it is deleted or anonymised.
Certain records (such as billing and transaction data) may be retained for statutory periods.
10. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request erasure where legally applicable
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise your rights, contact support@cloudcabin.com.
11. Cookies
We use cookies and similar technologies to:
- Maintain secure login sessions
- Ensure website functionality
- Analyse site usage and performance
You can manage cookies via your browser settings. Where a cookie consent tool is available on our website, you may also manage preferences using that tool.
12. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.
While we take security seriously, no system is completely secure. You are responsible for maintaining the security of your account credentials, hosted applications, websites, and devices.
13. Personal Data Breaches
A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
Where we act as a data controller and become aware of a personal data breach, we will assess the risk to individuals’ rights and freedoms and notify the Information Commissioner’s Office (ICO) without undue delay and, where feasible, within 72 hours where required by law.
Where a breach is likely to result in a high risk to individuals’ rights and freedoms, we will notify affected individuals without undue delay. Where notification is not required, we will document our decision as appropriate.
Where we act as a data processor, we will notify the relevant customer without undue delay after becoming aware of a personal data breach and provide information reasonably required to support their compliance obligations.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with the updated revision date.
15. Contact Us
If you have questions about this Privacy Policy or how your personal data is handled, contact us at:
How this website handles your details
This section explains in plain words what happens to the details you give us through this website. It adds to the policy above and does not replace it. If we change how the website works, we will update it.
The contact form and the newsletter box
Contact form. You give us your name, your email address, the kind of enquiry and your message, and a telephone number if you choose to add one. The website emails these to our support team and sends a confirmation copy to the address you gave. We use them only to reply to you. The website keeps no copy: your message travels by email through our email delivery provider, and from then on it is handled as support correspondence under the policy above.
Newsletter box. You give us your email address. The website emails it to our team so we can add it to our mailing list, and sends you a welcome message. To be taken off the list, email support@cloudcabin.com at any time.
Security checks and limits
Both forms use Cloudflare Turnstile, a check that tells people from automated programs. It starts only when you begin to use a form, and it sets no cookies on this website. To confirm that the check is genuine, our server sends Cloudflare the token the check gave your browser, together with your IP address. Cloudflare’s own Turnstile privacy policy (opens in a new tab) explains what it does with them. To stop the forms being misused, we also count how often a connection or an email address has used them recently. The count is held in the server’s temporary folder under a scrambled code (a hash) instead of the address itself, and it holds only the times of recent attempts.
Cookies and analytics
Until you choose otherwise, this website sets only the cookies it needs to work. They are listed on our Cookies Policy. Analytics cookies stay off unless you accept them in the cookie banner, and you can change your choice at any time with “Cookie settings” in the footer.
Just looking around
This website loads its fonts, icons and scripts from our own server, so visiting a page does not send details about your visit to other companies. That changes only if you use a form (Cloudflare, as above) or accept analytics.
For your rights, and how to use them, see “10. Your Rights” above, or email support@cloudcabin.com.