Ulatu — Privacy Policy

Last updated: 14 August 2026

Ulatu Web Hosting (“Ulatu”, “we”, “us” or “our”) respects the privacy of our customers and visitors to our websites.

This Privacy Policy explains what information we collect, how we use it, how we store and protect it, and the circumstances in which we may share it.

This Privacy Policy applies to all Ulatu customers and users of our services, regardless of their country or location. We do not limit the protections described in this policy to customers located in any particular country.

Where local privacy or data protection laws provide additional rights or protections, those rights will continue to apply.

1. Who We Are

Ulatu Web Hosting is based in Scotland and provides web hosting, domain registration and related internet services to customers internationally.

For information that we collect directly from our customers in connection with their Ulatu account and our own websites, Ulatu is generally responsible for determining how and why that information is processed.

Where a customer uses Ulatu’s hosting services to store personal information relating to their own customers, visitors or users, the customer may be responsible for determining how that information is processed. In those circumstances, Ulatu may process that information on the customer’s behalf as part of providing hosting, storage, backup and related services.

2. Information We Collect

Depending on how you use Ulatu services, we may collect and process the following information.

Account and Customer Information

When you create an account, purchase a service or communicate with us, we may collect:

your full name;
postal address;
email address;
telephone number;
company or organisation details;
account and login information;
billing information;
payment-related information;
services purchased;
account status and service history; and
communications and support requests.

Information Stored Using Our Services

When you use our hosting services, you may upload or store information on our systems.

This may include:

website files;
databases;
images and documents;
email;
application data;
website logs;
configuration files;
backups; and
other information that you choose to store using our services.

Customer content may contain personal information relating to other individuals.

Ulatu does not generally determine the purpose for which customers collect or use personal information contained within their websites or applications.

Technical Information

We may automatically collect technical information when our websites or services are accessed, including:

IP addresses;
browser and operating system information;
device information;
referring websites;
pages visited;
dates and times of access;
technical logs; and
security and diagnostic information.

3. How We Use Information

We may use information for purposes including:

creating and managing customer accounts;
providing hosting, domain and related services;
processing payments;
providing customer support;
communicating with customers;
managing renewals and cancellations;
maintaining and restoring backups;
monitoring and protecting our infrastructure;
detecting malware and other security threats;
preventing fraud and abuse;
investigating security incidents;
troubleshooting technical problems;
improving our websites and services;
complying with legal obligations;
enforcing our Terms and Conditions; and
protecting Ulatu, our customers, our infrastructure and other internet users.

4. Our Legal Basis for Processing

Where applicable law requires us to identify a legal basis for processing personal information, we may rely on one or more of the following:

Providing Our Services

We may process information where it is necessary to provide services that you have purchased or requested.

Legal Obligations

We may process information where necessary to comply with applicable laws, regulations, court orders or other legal requirements.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided that those interests are not outweighed by applicable privacy rights.

Examples include protecting our infrastructure, preventing abuse, maintaining security, providing customer support and improving our services.

Consent

Where required, we may request your consent before processing certain information.

Where processing is based on consent, you may withdraw that consent subject to any applicable legal or technical limitations.

5. Customer-Hosted Data

Customers are able to upload and store information using Ulatu’s hosting services.

A customer’s website may collect personal information from its own visitors, customers or users. The customer is generally responsible for determining how that information is collected and used and for providing any privacy notices required by applicable law.

Where Ulatu processes such information solely to provide hosting, storage, backup or related services, we generally act on the customer’s instructions rather than determining the purpose of that processing ourselves.

We may nevertheless access or process customer-hosted data where reasonably necessary to:

provide technical support;
investigate a technical problem;
maintain or restore backups;
detect malware or security threats;
investigate suspected abuse;
protect our systems and network;
comply with a legal requirement; or
enforce our Terms and Conditions.

6. Backups

We maintain backups of customer data as part of our normal infrastructure and disaster-recovery processes.

Backups may be stored in multiple locations and may include both online and locally stored copies.

As a result, removing information from an active hosting account does not necessarily result in the immediate deletion of every copy of that information.

Backup copies may remain for a period of time according to our backup and retention procedures before being automatically overwritten or securely deleted.

Where necessary, information contained within backups may be retained for longer periods for security, disaster recovery, legal or operational purposes.

7. Payment Information

Payments may be processed by independent payment providers.

Where possible, payment card information is handled directly by the relevant payment provider rather than being stored by Ulatu.

We may retain information such as payment status, transaction references, payment dates, payment method and limited payment-card information supplied by the payment provider.

Where a customer chooses to save a payment method to their account, the payment provider may retain the relevant payment details in accordance with its own policies and requirements.

8. Google Analytics

We use Google Analytics on some Ulatu-owned websites and other web properties to understand how visitors use those websites and to help us improve them.

Google Analytics may collect information including:

pages visited;
approximate geographic location;
device and browser information;
referral information;
interactions with our websites; and
information relating to website usage.

Google Analytics may use cookies and similar technologies.

We use this information primarily for statistical and analytical purposes and do not use Google Analytics as a means of monitoring the private content of customer websites hosted by Ulatu.

Google may process information collected through its services in accordance with its own privacy policies and terms.

9. Cookies

Our websites may use cookies and similar technologies.

Cookies may be used for purposes including:

authentication and login sessions;
security;
website functionality;
remembering preferences;
analytics; and
understanding how our websites are used.

Some cookies are necessary for our websites and services to function.

Where applicable, non-essential cookies will be used in accordance with relevant privacy and cookie requirements.

10. Sharing Information

We do not sell customer personal information.

We may share information where reasonably necessary to operate our business and provide our services.

This may include sharing information with:

payment processors;
domain registries and domain providers;
data centre and infrastructure providers;
network providers;
software and technology providers;
security and fraud-prevention providers;
analytics providers;
professional advisers;
legal representatives; and
government, regulatory or law-enforcement authorities where required or permitted by law.

We seek to ensure that information is only shared where there is an appropriate reason to do so.

11. International Data Processing

Ulatu provides services internationally and may use service providers or infrastructure located in different countries.

As a result, personal information may be processed or stored in a country other than the country in which the customer is located.

Where applicable law requires safeguards for international transfers of personal information, we will take appropriate steps to provide those safeguards.

12. Protecting Information

We take reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration or destruction.

Our security measures may include:

access controls;
authentication;
network security;
malware and security monitoring;
system updates;
restricted administrative access;
backups; and
physical and technical security measures.

No internet-based service can be guaranteed to be completely secure.

We will nevertheless take reasonable steps to protect information held by us and to respond appropriately to security incidents.

13. Data Retention

We retain information for as long as reasonably necessary for the purposes for which it was collected.

Different categories of information may therefore be retained for different periods.

For example, customer and billing information may need to be retained after an account has closed for accounting, tax, legal, fraud-prevention or other legitimate purposes.

Information stored in backups may remain for a period after it has been removed from active systems.

When information is no longer required, we will take reasonable steps to delete or securely dispose of it, subject to applicable legal, technical and operational requirements.

14. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have rights relating to your personal information.

These may include the right to:

request access to information we hold about you;
request correction of inaccurate information;
request deletion of information;
request restriction of processing;
object to certain processing;
request transfer of information to another organisation;
withdraw consent where processing is based on consent; and
make a complaint to an appropriate data protection or privacy regulator.

The availability and scope of these rights varies between jurisdictions and some rights are subject to legal exceptions.

We will consider requests in accordance with the laws applicable to the individual and the processing concerned.

15. Exercising Your Rights

If you wish to ask us what personal information we hold about you, request a correction, deletion or restriction, or exercise another applicable privacy right, please contact us using the contact details provided on our website or through the Ulatu Members Portal.

We may need to verify your identity before processing a request.

We will respond within the timeframe required by applicable law.

16. Complaints

If you have concerns about the way we handle your personal information, please contact us first so that we have an opportunity to investigate and resolve the matter.

You may also have the right to complain to the data protection or privacy regulator responsible for your location or the relevant processing activity.

17. Customer Responsibility for Hosted Data

Customers are responsible for ensuring that their use of Ulatu hosting services complies with applicable privacy and data protection laws.

Where a customer’s website collects personal information from its visitors or users, the customer should provide an appropriate privacy notice and ensure that the collection and use of that information is lawful.

Ulatu does not provide legal or privacy compliance advice regarding the operation of individual customer websites.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, security practices or applicable legal requirements.

The latest version will be published on the Ulatu website.

Where appropriate, we may notify customers of significant changes.

19. Contact

If you have questions about this Privacy Policy or how Ulatu handles personal information, please contact us using the contact details provided on our website or through the Ulatu Members Portal.

Ulatu Web Hosting

Privacy Policy last updated: 14 August 2026