1. Who we are

FiveHost is operated as a sole trader by Ross Attfield, trading as FiveHost, with a principal place of business at Hatherleigh, Snatchwood Road, Abersychan, Pontypool, NP4 7BS, Wales, United Kingdom. We are the data controller for the personal data we collect.

For privacy enquiries contact us at rossattfield@gmail.com.

2. What data we collect

We collect the following personal data when you subscribe:

• Email address (provided at checkout via Stripe)
• Payment information (processed and stored by Stripe — we never see your full card details)
• Name (if provided at checkout)
• IP address (collected automatically by our server for security purposes)

We also store data you upload to your Kuzzle instance as part of operating your FiveM server. This data is your responsibility under our Terms of Service.

3. How we use your data

We use your personal data only for the following purposes:

• To provision and manage your Kuzzle instance
• To send you your connection credentials via email
• To send you service-related communications (billing, outages, changes to terms)
• To process your subscription payments via Stripe
• To prevent abuse and enforce our Terms of Service

We do not use your data for marketing without your explicit consent, and we do not sell your data to any third party.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — processing your email and payment details is necessary to provide the Service you've subscribed to
• Legitimate interests — we process IP addresses for security and fraud prevention purposes

5. Third party processors

We use the following third party services to operate FiveHost:

• Stripe — payment processing. Stripe stores your payment details and billing information. See Stripe's Privacy Policy.
• Mailgun — transactional email delivery. We send your connection credentials via Mailgun. See Mailgun's Privacy Policy.
• OVHcloud — server infrastructure. Your Kuzzle instance data is hosted on OVHcloud servers in the United Kingdom. See OVHcloud's Privacy Policy.

6. Data retention

We retain your personal data for as long as your subscription is active. Upon cancellation:

• Your Kuzzle instance data is retained for 7 days then permanently deleted
• Your email address and billing records are retained for 7 years as required by UK tax law

7. Your rights

Under UK GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (subject to legal retention obligations)
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at rossattfield@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website (fivehost.co.uk) does not use cookies or tracking scripts. We do not use analytics tools. The only external resource loaded is Google Fonts for typography.

9. Security

We take reasonable technical measures to protect your data including HTTPS encryption, firewall protection, and restricted access to server infrastructure. However, no system is completely secure and we cannot guarantee absolute security.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes via email at least 14 days before they take effect.

11. Contact

For any privacy-related questions contact us at rossattfield@gmail.com.