Privacy Policy

Last updated: 7 October 2026  ·  Version: 1.0

1. Who we are

Kangconoweb is a trading name of BizeeInternet, a sole trader established in the United Kingdom. We provide shared web hosting, email and related services from servers located in London, United Kingdom.

For the personal data described in this policy, BizeeInternet is the data controller. Our postal address is:

BizeeInternet (trading as Kangconoweb)
3 Parkfield Way
Bromley
Kent BR2 8AE
United Kingdom

You can contact us about anything in this policy by email at datacontroller@kangconoweb.com.

We are not required to appoint a Data Protection Officer, and have not appointed one. Data protection enquiries are handled directly by the business owner at the address above.

2. Two different roles: your data and your customers' data

It is worth being clear about this, because it changes who is responsible for what.

• Your own data — we are the controller. When you enquire, open an account, pay an invoice or raise a support ticket, we decide what we collect and why. That data is covered by this policy.
• The data on your websites, databases and mailboxes — you are the controller, and we are your processor. We don't decide what you store or why; we simply host it on your instructions. That relationship is governed by our Data Processing Agreement, not by this policy.

So if you host a website that collects personal data about your customers, you are responsible for that data and for telling those people how it is used. We handle it only to provide the hosting service to you.

3. What personal data we collect

Category	What this includes
Account details	Your name or business name, billing address, email address, telephone number, and the domain names on your account.
Billing data	Invoices, payments, subscription and renewal records, and Direct Debit mandate references. We never see or store your full bank details or card numbers — these are collected and held by our payment provider.
Login and authentication data	Usernames, password hashes (never plain-text passwords), and records of logins to your control panel.
Support correspondence	Emails and tickets you send us, our replies, and any notes we make in order to resolve the issue.
Server and security logs	IP addresses, timestamps, requested web addresses, browser identifiers, mail delivery records, and records of blocked or suspicious activity. These are generated automatically by the servers.
Website usage	Basic, non-identifying information about visits to kangconoweb.com. See section 5.

We do not deliberately collect special category data (such as health, religious or biometric data) about our customers, and we ask that you do not send it to us in support correspondence.

4. Why we use it, and our lawful basis

What we use it for	Lawful basis	Notes
Setting up and running your hosting account	Performance of a contract	We cannot provide the service without it.
Invoicing, taking payment, chasing non-payment	Performance of a contract / Legal obligation	Tax and accounting law requires us to keep records.
Providing technical support	Performance of a contract	Includes accessing your account where needed to fix a fault.
Service notices — maintenance, outages, security, renewals, price changes	Performance of a contract / Legitimate interests	You cannot opt out of essential service notices while you hold an account.
Keeping the servers secure — abuse prevention, intrusion detection, spam and malware filtering, firewall blocking	Legitimate interests	Our interest in protecting the service, and every other customer on it, from attack and misuse.
Backups and disaster recovery	Legitimate interests / Performance of a contract	Protects your data and ours against loss.
Investigating complaints, disputes or suspected breaches of our terms	Legitimate interests / Legal obligation
Marketing our own services to existing customers	Legitimate interests (soft opt-in)	You can opt out at any time — see section 10.
Marketing to people who are not customers	Consent	Only if you have asked us to contact you.
Responding to lawful requests from authorities	Legal obligation

5. Our website, cookies and analytics

We keep this deliberately simple.

• We set no advertising or tracking cookies on kangconoweb.com, and we do not use third-party advertising networks or social media trackers.
• We do not load fonts, scripts or stylesheets from third-party content delivery networks, so visiting our site does not disclose your IP address to anyone else.
• Our web server keeps standard access logs, including your IP address, for security and troubleshooting. See section 8 for how long.
• If we later add a cookie that is not strictly necessary, we will ask for your consent first and update this policy.

Pages in your own customer area or control panel may set cookies that are strictly necessary to keep you logged in. These do not require consent.

6. Who we share data with

We do not sell personal data, and we do not share it for anyone else's marketing. We do use a small number of suppliers who process data on our behalf. Each is bound by a written contract that meets Article 28 of the UK GDPR.

Supplier	What they do for us	Where they process
IONOS Cloud Limited	Provides the physical servers and data centre our hosting runs on	United Kingdom (London), or elsewhere in the EEA
CloudLinux Software Inc.	Server security, malware scanning and website speed optimisation (Imunify360 and AccelerateWP)	EEA / United States, under appropriate safeguards
GoCardless Ltd	Collects Direct Debit payments and holds your bank mandate	United Kingdom

We may also disclose personal data to our accountant, to professional advisers, or to a regulator, court or law enforcement body where we are legally required to do so.

A current list of the suppliers who may touch data you are the controller of is maintained in our Data Processing Agreement, and we will tell you before we add or replace one.

7. Where your data is processed

Your websites, databases and mailboxes are hosted on servers in London, United Kingdom.

Our infrastructure provider, IONOS Cloud Limited, confirms in its data processing agreement with us that processing takes place in the United Kingdom or in another country within the European Economic Area, unless a transfer to a third country becomes necessary in order to provide the service.

Where any supplier does process personal data outside the UK, we rely on a UK adequacy regulation, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards the transfer requires.

8. How long we keep it

Data	Retention period
Account and contact details	For as long as you are a customer, then up to 12 months after your last service ends
Invoices, payments and accounting records	7 years from the end of the relevant accounting period, as required by UK tax law
Support tickets and correspondence	Up to 2 years after the ticket is closed
Web server access logs	Typically up to 90 days
Mail delivery and security logs	Typically up to 90 days
Firewall and intrusion-detection records	Up to 12 months, as evidence of repeat abuse
Website content, databases and mailboxes	Deleted on account closure, subject to the notice period and backup cycle in our DPA
Backups	Overwritten on a rolling cycle, normally within 30 days

Because backups are taken as complete snapshots, data you delete may persist in a backup until that backup is rotated out. It is not restored or used for any other purpose in the meantime.

9. How we protect it

We take the security of our platform seriously, and the measures below protect your own data as well as your customers':

• Each hosting account is isolated from every other account on the server using CageFS, so one customer cannot read another customer's files.
• Resource limits prevent one account from degrading the service for others.
• Free TLS certificates are provided and renewed automatically, so traffic to your site is encrypted in transit.
• A host firewall, intrusion detection and automated brute-force protection run continuously.
• Malware scanning and a web application firewall run at server level.
• Administrative access is restricted to the business owner, uses key-based authentication, and is logged.
• Passwords are stored only as salted hashes. We cannot tell you your password, only reset it.
• Backups are taken regularly and stored separately from the live server.
• Operating system and control panel security updates are applied promptly.

No service can promise absolute security. If a breach occurs that is likely to result in a risk to people's rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and tell affected customers without undue delay.

10. Your rights

Under UK GDPR you have the right to:

• Be informed — which is what this policy is for.
• Access a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — ask us to delete your data, where we have no overriding obligation to keep it (we cannot delete invoices we must retain for tax purposes).
• Restrict processing in certain circumstances.
• Data portability — receive data you gave us in a machine-readable form.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent, where we relied on consent.

To exercise any of these, email datacontroller@kangconoweb.com. We will respond within one month. We may ask you to confirm your identity first, so that we don't disclose your data to someone else. There is no charge, unless a request is manifestly unfounded or excessive.

If your request concerns data held on a website hosted by one of our customers, we are only the processor and cannot act on it ourselves — please contact that website's owner. We will help them respond if they ask us to.

11. Complaints

If you are unhappy with how we have handled your personal data, please tell us first at datacontroller@kangconoweb.com and we will try to put it right.

You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113  ·  ico.org.uk/make-a-complaint

12. Changes to this policy

We may update this policy as our service or the law changes. The version number and date at the top will always tell you which version you are reading. If we make a change that materially affects how we use your personal data, we will email account holders before it takes effect.

13. Contact us

Data protection enquiries: datacontroller@kangconoweb.com
Sales and general enquiries: sales@kangconoweb.com