Privacy Policy

Last updated: 20 August 2026

Alvonyx respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit https://alvonyx.com, purchase or enquire about our services, contact our support team, create an account, interact with our advertising or otherwise use Alvonyx services.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, the data controller is:

Alvonyx
ALVONYX LTD
Camden House, TN2 3DH
admin@alvonyx.com

Where Alvonyx processes personal information solely on behalf of one of our business customers as part of providing hosting, server or infrastructure services, Alvonyx may instead act as a data processor, with that customer acting as the data controller.

1. Information We Collect

Depending on how you interact with Alvonyx, we may collect the following types of information.

Information you provide to us

This may include:

  • your name;
  • company or organisation name;
  • email address;
  • telephone number;
  • billing or correspondence address;
  • account information;
  • information submitted when purchasing or enquiring about a service;
  • website names, domain names, server details or hosting information;
  • migration information;
  • support requests and communications;
  • files, screenshots, logs or technical information submitted to our support team;
  • invoice and transaction information;
  • marketing preferences;
  • survey or feedback responses; and
  • any other information you choose to provide to us.

Please do not send passwords, complete payment-card details or other unnecessary sensitive information through ordinary support forms or email unless we have specifically provided a secure method for doing so.

Technical and usage information

When you access our website or services, certain information may be collected automatically, including:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • referral source;
  • pages viewed;
  • date and time of access;
  • approximate geographical location derived from an IP address;
  • website interaction information;
  • cookie or advertising identifiers;
  • diagnostic information;
  • security events; and
  • server, application and access logs.

We may use this information for website operation, security, fraud prevention, troubleshooting, analytics and service improvement.

2. How We Use Your Information

We may process personal information for purposes including:

  • creating and managing customer accounts;
  • providing web hosting, WordPress hosting, WooCommerce hosting, VPS, cloud, server and related services;
  • provisioning and configuring customer services;
  • processing service orders;
  • performing website or hosting migrations;
  • responding to enquiries and support requests;
  • diagnosing website, server or network problems;
  • providing customer service;
  • communicating service notices, incidents, maintenance or important account information;
  • issuing and administering invoices;
  • managing payments and subscriptions;
  • preventing fraud, misuse and unauthorised access;
  • protecting our systems, customers and infrastructure;
  • monitoring and improving website and service performance;
  • maintaining backups and recovery systems;
  • analysing use of our website;
  • measuring advertising effectiveness;
  • conducting marketing and remarketing activity;
  • developing and improving Alvonyx products and services;
  • keeping appropriate accounting, tax, security and business records;
  • enforcing our contractual rights; and
  • complying with legal and regulatory obligations.

The UK GDPR requires businesses to identify the purpose and lawful basis for processing personal information and to explain these in their privacy information.

3. Our Lawful Bases for Processing

Depending on the circumstances, we may rely upon one or more of the following lawful bases.

Contract

We may process your personal information where this is necessary to provide a service you have requested or to take steps at your request before entering into a contract.

For example, this may include creating your hosting service, migrating a website, administering your account or providing technical support.

Legal obligation

We may process information where necessary to comply with laws or regulatory obligations, including accounting, taxation, fraud prevention or responding to lawful requests from authorities.

UK GDPR permits processing where it is necessary to comply with an applicable legal obligation.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

  • securing our network and services;
  • detecting misuse or fraud;
  • maintaining appropriate business records;
  • improving our products and services;
  • understanding customer service requirements;
  • protecting and enforcing our legal rights;
  • operating and improving our website; and
  • certain forms of business marketing where permitted by law.

Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against the rights and expectations of the individual concerned.

Consent

We may rely on your consent where required, particularly for certain cookies, tracking technologies and marketing activities.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing which took place lawfully before consent was withdrawn.

4. Hosting, Servers and Infrastructure Providers

Alvonyx may use third-party hosting, cloud, server, networking, data-centre, security, backup and other infrastructure providers to deliver our services.

Where necessary to provide a service, customer information may therefore be provided to or processed through these suppliers.

This may include information such as:

  • customer contact details;
  • service identifiers;
  • domain or website information;
  • server configuration information;
  • IP addresses;
  • technical information;
  • support information;
  • backup data;
  • service usage information; and
  • information required to provision, manage, troubleshoot or secure a service.

We only share information which is reasonably necessary for the relevant purpose.

Our suppliers may act as data processors, subprocessors or, in some circumstances, independent data controllers depending on the service being provided.

Where Alvonyx processes personal data on behalf of a hosting customer, our processing may also be governed by contractual data-processing terms between Alvonyx and that customer.

5. Customer Websites and Hosted Data

Customers using Alvonyx hosting, VPS, server or related infrastructure may store or process personal information belonging to their own customers, employees, website visitors or other individuals.

In these circumstances, the Alvonyx customer will generally determine why and how that personal information is processed and will normally act as the data controller.

Alvonyx may process that information only as necessary to provide the contracted hosting or infrastructure service and may therefore act as a data processor.

Customers remain responsible for ensuring that their own collection and use of personal information complies with applicable privacy and data protection laws.

6. Support and Technical Information

When you contact Alvonyx Support, we may collect information required to investigate and resolve your request.

This can include:

  • account information;
  • website URLs;
  • domain information;
  • IP addresses;
  • server identifiers;
  • error messages;
  • screenshots;
  • diagnostic information;
  • application logs;
  • server logs;
  • configuration details; and
  • correspondence between you and our support team.

Where reasonably necessary, this information may be shared with technical or infrastructure suppliers involved in providing or troubleshooting the affected service.

Support information may also be retained for security, service history, quality assurance, dispute resolution and future troubleshooting.

7. Payments and Billing

Where you purchase services from Alvonyx, information necessary to process and administer the transaction may be provided to payment processors, banks or financial-service providers.

Depending on the payment method used, payment information may be entered directly into systems operated by a payment provider.

Alvonyx may retain information such as:

  • transaction reference;
  • payment status;
  • amount;
  • currency;
  • billing information;
  • invoice details; and
  • limited payment-method information.

We do not require customers to send full payment-card information by email or support ticket.

8. Analytics

We may use analytics technologies to understand how visitors use our website and services.

Analytics information may include:

  • pages visited;
  • session duration;
  • referring website;
  • interactions with pages or buttons;
  • approximate location;
  • browser and device information;
  • advertising campaign information; and
  • other website usage statistics.

Where analytics technologies involve cookies or similar technologies that require consent, they will only be used where the appropriate consent has been obtained.

9. Google Ads, Meta Ads and Online Advertising

Alvonyx may advertise through services including Google Ads and Meta advertising platforms.

Subject to your cookie and privacy choices, advertising technologies may be used to:

  • measure advertising performance;
  • understand whether advertisements result in enquiries or purchases;
  • attribute conversions to advertising campaigns;
  • create advertising audiences;
  • provide relevant advertising;
  • conduct remarketing;
  • measure website interactions; and
  • improve marketing effectiveness.

These services may use cookies, tracking pixels, tags, identifiers or similar technologies and may receive information such as your IP address, browser/device information, website interactions and advertising identifiers.

They may also combine information received from our website with information they already hold about you in accordance with their own privacy policies.

We do not control how independent advertising providers process information within their own platforms.

You can manage advertising cookies through our cookie preferences where available.

The ICO’s current guidance states that storage or access technologies used for online advertising require consent, including technologies used for ad selection, tracking and profiling.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies including:

  • cookies;
  • tracking pixels;
  • scripts and tags;
  • local storage;
  • advertising identifiers; and
  • other storage or access technologies.

The ICO expressly recognises that PECR can apply not only to cookies but also technologies such as tracking pixels, local storage, fingerprinting, scripts and tags.

We may categorise these technologies as:

Strictly Necessary

Required for essential website functionality, security, account access, shopping baskets or other services explicitly requested by the visitor.

Functional

Used to remember settings and provide enhanced website functionality.

Analytics

Used to understand website performance and usage.

Advertising

Used for advertising measurement, conversion tracking, remarketing and audience creation.

Where consent is required by law, non-essential technologies will not be used until you provide consent.

You should be able to reject or withdraw consent for non-essential cookies as easily as you give it. ICO guidance says that merely continuing to use a website is not sufficient consent and that non-essential cookies should not be set before consent has been obtained.

A separate Cookie Policy may provide further details about individual cookies and technologies used on our website.

11. Direct Marketing

Where permitted, we may send customers or prospective customers information about Alvonyx services, product updates, offers or related services.

Depending upon the circumstances, marketing may be based on consent or another lawful basis permitted by applicable law.

You may unsubscribe from marketing communications at any time by:

  • using the unsubscribe option included in an email; or
  • contacting us.

Transactional, security, support and service communications are not necessarily marketing communications and may still be sent where required to provide or administer your service.

PECR applies alongside UK GDPR to electronic marketing and certain forms of online tracking.

12. Who We Share Personal Information With

We may share information where reasonably necessary with categories of recipients including:

  • hosting and server infrastructure providers;
  • cloud and data-centre providers;
  • network providers;
  • backup and disaster-recovery providers;
  • cybersecurity and fraud-prevention providers;
  • payment processors and banks;
  • email-delivery providers;
  • customer-support systems;
  • CRM platforms;
  • analytics providers;
  • advertising and social-media platforms;
  • website-development and IT suppliers;
  • professional advisers including accountants, insurers and legal advisers;
  • regulators, government authorities or law-enforcement bodies where required by law;
  • potential purchasers, investors or advisers in connection with a merger, acquisition, restructuring or sale of all or part of our business.

We do not sell personal information to advertisers.

We will not disclose personal information to unrelated third parties simply for them to independently market their products to you unless you have agreed to this or another lawful basis applies.

13. International Data Transfers

Some technology, infrastructure, analytics, advertising or service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to protect that information in accordance with applicable data protection law.

Depending on the destination and provider, this may include:

  • relying on an applicable UK adequacy regulation;
  • using approved contractual safeguards;
  • using the UK International Data Transfer Agreement;
  • using an approved UK Addendum to standard contractual clauses; or
  • another lawful transfer mechanism.

Privacy notices should inform individuals about applicable international transfers and relevant safeguards where such transfers take place.

14. Data Security

We take reasonable technical and organisational measures designed to protect personal information against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • disclosure; and
  • destruction.

Depending on the relevant system or service, measures may include access controls, encryption, authentication, monitoring, backups, network security, malware protection and vulnerability management.

However, no internet transmission, hosting environment or electronic storage system can be guaranteed to be completely secure.

Customers are also responsible for protecting their account credentials and maintaining suitable security practices for software and systems under their control.

15. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, contractual, security or reporting requirements.

Retention periods may vary depending on the type of information.

For example, we may retain:

  • customer account and contractual records for the duration of the customer relationship and an appropriate period afterwards;
  • invoice and financial records for periods required by tax and accounting law;
  • support correspondence for as long as reasonably necessary for support history, service improvement, security or dispute resolution;
  • security logs for periods appropriate to detecting and investigating incidents;
  • marketing preferences for as long as necessary to respect your choices;
  • consent records where necessary to demonstrate compliance; and
  • backups according to applicable backup and deletion cycles.

Where personal information is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable.

The ICO requires organisations to tell individuals their retention periods or, where a fixed period isn’t possible, the criteria used to determine them.

16. Comments

If comments are enabled on our website, when visitors leave comments we may collect the information shown in the comment form together with the visitor’s IP address and browser user-agent information for spam and security purposes.

An anonymised identifier created from an email address may be provided to an avatar service where that functionality is enabled.

After a comment is approved, any profile image associated with the comment may be publicly visible alongside the comment.

If Alvonyx does not allow public website comments, this entire section can be removed.

17. Media Uploads

If you are permitted to upload images or files to our website or support systems, those files may contain metadata.

Images can contain embedded location information such as EXIF GPS data.

You should remove information you do not wish to share before uploading files.

18. Embedded Content and Third-Party Websites

Pages on our website may contain embedded content or links to external websites, including videos, images, social-media content, payment pages or other services.

Third-party services may collect information about you and may use cookies or similar technologies in accordance with their own privacy practices.

Alvonyx is not responsible for the privacy practices or content of independent third-party websites.

We encourage you to review the privacy information provided by any external website you use.

19. Registered Accounts

If you create an account with Alvonyx, we may retain information associated with that account, including your profile details, purchases, services, billing information and support history.

You may be able to update certain account information through your account area.

Some information may need to be retained even after account closure where required for legal, accounting, fraud-prevention, security or contractual purposes.

20. Your Data Protection Rights

Depending on the circumstances and applicable lawful basis, you may have rights including:

  • the right of access – to request a copy of personal information we hold about you;
  • the right to rectification – to request correction of inaccurate or incomplete information;
  • the right to erasure – to request deletion of personal information in certain circumstances;
  • the right to restriction – to request restriction of processing in certain circumstances;
  • the right to data portability – to receive certain information in a structured, commonly used and machine-readable format;
  • the right to object – to object to certain processing, including processing based on legitimate interests and direct marketing; and
  • the right to withdraw consent where processing is based on consent.

Not every right applies in every circumstance.

Your right to object

You have the right to object at any time to our use of your personal information for direct marketing.

You may also have the right to object to processing based on legitimate interests depending on your particular circumstances.

ICO guidance specifically requires the right to object to be brought clearly and separately to people’s attention.

To exercise a data protection right, contact us using the details provided at the end of this policy.

We may need to confirm your identity before responding to a request.

21. Automated Processing

We may use automated systems to assist with activities such as:

  • spam detection;
  • fraud and abuse prevention;
  • security monitoring;
  • support routing;
  • website analytics;
  • advertising attribution; and
  • marketing audience creation.

Unless we specifically tell you otherwise, Alvonyx does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects for individuals.

If this changes, we will provide the information required by applicable data protection law.

22. Children’s Privacy

Alvonyx services are intended primarily for businesses, professionals and adult customers.

Our services are not intentionally directed toward children.

If we become aware that personal information belonging to a child has been collected in circumstances where it should not have been, we will take appropriate steps in accordance with applicable law.

23. Fraud, Security and Abuse Prevention

We may monitor use of our website, hosting environments and systems where reasonably necessary to:

  • detect malicious activity;
  • prevent unauthorised access;
  • investigate security incidents;
  • protect customers;
  • prevent spam and abuse;
  • identify fraudulent activity; and
  • enforce our terms and acceptable-use requirements.

This may involve processing IP addresses, logs, network information, login events and other technical information.

24. Business Transfers

If Alvonyx undergoes a merger, acquisition, investment, restructuring, reorganisation or sale of all or part of its business or assets, personal information may be disclosed to relevant advisers, investors or counterparties as part of that transaction.

Any such disclosure will be subject to appropriate confidentiality and data-protection requirements.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our services;
  • changes to our suppliers or technology;
  • changes to how personal information is processed;
  • changes to advertising or analytics systems; or
  • changes in applicable law or regulatory guidance.

The latest version will be published on this page together with the date it was last updated.

Where appropriate, we may also notify customers of significant changes.

The ICO recommends that privacy information is regularly reviewed and updated where necessary, particularly before introducing new uses of personal information.

26. Complaints

If you have concerns about how Alvonyx uses your personal information, please contact us first so that we can investigate.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you believe your personal information has been handled in breach of applicable data protection law.

The ICO is the UK’s independent data protection regulator.

27. Contact Us

For privacy questions, data protection requests or concerns about how your information is being used, contact:

Alvonyx
ALVONYX LTD
Camden House, TN2 3DH
admin@alvonyx.com

Website: https://alvonyx.com