What we keep, and why.
Who we are, what personal data we hold, what we use it for, who else sees it, how long we keep it and what you can ask of us. No marketing emails, no analytics, and we never sell personal data.
Last updated 16 October 2026.
Compera Ltd, in charge of your data.
Compera Ltd ("Compera", "we") decides how the personal data on this page is used, which makes us its controller under UK data protection law.
Registered in England and Wales, company number 12265681. Registered office: Suite 7-0288 Lonsto House, 276 Chase Road, London N14 6HA. Registered with the Information Commissioner's Office, number ZB288441.
Privacy questions go to info@compera.net, or by post to the registered office. We are a small company and are not required to appoint a Data Protection Officer; our director answers privacy questions.
The data, by kind.
- Account
- Your name, company, postal address, email address and phone number. Your password is stored only as a one-way hash, so nobody can read it.
- Billing
- Invoices, payments and credit. Card payments go through Stripe and the full card number never reaches our servers. We keep a reference to the card with its type, last four digits and expiry date, so you can see which card is saved.
- Domains
- The names you register and the registrant contact details each registry requires.
- Support
- Tickets, emails, WhatsApp messages and our notes of phone calls. We don't record calls.
- Technical
- IP addresses, browser details and times, in our web server logs and in your account's login history. Security tools also see IP addresses; see section 04.
- What you host
- Your websites, databases and mailboxes. That content is yours. We store it to run the service and look at it only when you ask us to, to fix a fault, or to deal with security or abuse. For any personal data inside it, you are the controller and we act as your processor.
Each use, and the law behind it.
Data protection law needs a lawful basis for every use. These are ours.
| What we do | Lawful basis |
|---|---|
| Set up and run the hosting, domains and managed websites you order, and answer your support requests. | Contract |
| Register and renew your domains, giving each registry the contact details it requires. | Contract |
| Send service emails: invoices, renewal reminders, and outage or security notices. | Contract |
| Keep invoices, payment records and accounts. | Legal obligation (UK tax and company law) |
| Protect accounts, servers, forms and payments from fraud and abuse. | Legitimate interests: keeping our service and our customers secure |
| Handle complaints, legal claims and requests from the authorities. | Legal obligation, or legitimate interests in defending our position |
We don't send marketing emails, and we never sell or rent personal data.
Two decisions are made automatically. Our billing system suspends a service when its invoice is 8 days overdue, and restores it as soon as the invoice is paid. Stripe's fraud checks can decline a card payment. In either case, contact us and a person will look at it.
The companies we work with.
Each receives only what it needs for the job listed, under a contract with us or the rules of its registry.
| Who | What for | Where |
|---|---|---|
| Stripe | Card payments and fraud prevention. | UK, EU and the US |
| Our email (Google Workspace), and reCAPTCHA on our login, sign-up, contact, ticket, password reset, domain search and checkout forms. | Google's data centres, including the US | |
| Nominet | The registry for .uk names. We register these directly, as a Nominet Accredited Channel Partner. | UK |
| DomainNameAPI | The registrar we use for .com and other extensions. It passes your registrant details to the registry for each extension. | Turkey, then the registry's country |
| UK Servers | Runs the Continuity House datacentre in Coventry that houses our servers. It runs the building, not our systems. | UK |
| CloudLinux | Imunify360, our server security software, checks IP addresses and suspicious files against its threat database. | Outside the UK |
| WhatsApp (Meta) | Only if you message us on WhatsApp. | Including the US |
| Advisers and authorities | Our accountant, and HMRC, the police or the courts when the law requires it. | UK |
Registries may publish some registrant details in their public lookup (WHOIS or RDAP), according to their own rules. For .uk names, Nominet does not publish the address of a private individual.
Kept in the UK, with a few exceptions.
Your account, billing records and hosting live on our servers in Coventry, and our backups are kept in the UK. Data leaves the UK only through the companies in section 04 that are based elsewhere.
When it does, we rely on the protections UK law provides: an adequacy decision (for example the UK–US data bridge, for providers certified to it), the ICO's International Data Transfer Agreement or its Addendum to the EU clauses, or, when we register a domain you have ordered, the transfer being necessary to carry out our contract with you.
Kept no longer than needed.
| What | How long |
|---|---|
| Account details, billing records and support history | While you are a customer, then six years, as UK tax and company law requires |
| Domain registrant details | While the domain is registered through us. Registries keep their own records under their rules |
| Your websites, databases and mailboxes | Removed when your hosting is closed, and gone from our backups within 90 days |
| Backups | Up to 90 days, in the UK |
| Web server logs | Up to 12 months |
What you can ask of us.
Email info@compera.net. It is free, and we reply within one month.
- See it
- A copy of the personal data we hold about you.
- Correct it
- Fix anything wrong or out of date. You can change most details yourself in the client area.
- Delete it
- Have it erased, except what the law requires us to keep, such as invoices.
- Limit or object
- Ask us to restrict how we use it, or object to a use based on our legitimate interests.
- Take it with you
- Receive the data you gave us in a common, machine-readable format.
- Complain
- If you are unhappy with how we handle your data, tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint ↗ or 0303 123 1113.
The rest, briefly.
- Security
- Every page is served over HTTPS. Card numbers stay with Stripe, passwords are stored as one-way hashes, our servers sit in a secured UK datacentre behind Imunify360, and backups are held away from them. Only people who need your data to do their work can reach it. If a breach puts your data at risk, we will tell you and the ICO when the law requires. How our servers are set up.
- Children
- Our services are for businesses and adults, not for children.
- Other websites
- Links to other sites lead to their own privacy policies, which we don't control.
- Changes
- When this policy changes, we update the date at the top. If a change affects how we use your data, we will email our customers first.