Privacy Policy

Last updated: 25 October 2026

This policy explains what personal data Marotori collects, why, and what your rights are. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Marotori Limited ("Marotori"), a company registered in England and Wales (company number 04550966), registered office 6 Birch Close, Send, Woking, Surrey GU23 7BZ, United Kingdom, is the data controller for the personal data described here. We are registered with the Information Commissioner's Office, registration number 00013970999. Contact us about privacy at sysadmin@marotori.net or through our contact form.

2. What we collect

  • Account details: name, company, address, email, phone number, login details.
  • Billing details: invoices, payments and VAT information. Card and bank details are handled by our payment providers; we don't store full card numbers.
  • Domain registration details: the registrant, administrative and technical contact details that domain registries require.
  • Support and communications: tickets, emails and notes about your account.
  • Technical data: IP addresses, browser information and logs of logins and changes, kept for security and troubleshooting.
  • Cookies: see section 8.

3. Why we use it (and our legal basis)

  • To provide the services you order, manage your account and bill you — performance of a contract.
  • To keep accounting and tax records — legal obligation.
  • To keep our systems and your services secure, prevent fraud and abuse — legitimate interests.
  • To send service notices (renewals, maintenance, security) — performance of a contract.
  • To send occasional news or offers, only if you've opted in; you can unsubscribe at any time — consent.

4. Who we share it with

We don't sell your data. We share it only where needed to run our services:

  • Hosting: Amazon Web Services (London region, UK).
  • Payments: Stripe, PayPal and GoCardless, when you pay with them.
  • Domains: our registrar OpenSRS (Tucows) and the domain registries (for example Nominet for .uk domains), which may publish some details in public WHOIS/RDAP records according to their rules.
  • SSL certificates: the certificate authority, when you order a certificate.
  • Optional services: Cloudflare, if you use our Cloudflare integration, and Livedrive, if you order online backup.
  • Professional advisers, and authorities where the law requires it.

Where a provider processes data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.

5. Data in your hosted services

For websites, email, databases and DNS records you host with us, you are the controller and we act as your processor: we only process that data to provide the service, under your instructions and our Terms & Conditions.

6. How long we keep it

  • Account and service data: while you're a customer, then up to 2 years.
  • Invoices and payment records: 6 years after the end of the financial year (HMRC requirement).
  • Logs: up to 12 months.
  • Backups of hosted services: on a rolling cycle, deleted after 30 days.

7. Your rights

You can ask to access, correct, delete or move your data, object to or restrict how we use it, and withdraw consent at any time. Most account details can be changed directly in your client area. We'll reply within one month. Some data we must keep by law (for example invoices).

If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

8. Cookies

Our client area uses essential cookies to keep you logged in, remember your basket and language, and protect forms against misuse. These are needed for the site to work. We don't use advertising or analytics cookies.

9. Security

We use encrypted connections (HTTPS), restricted administrative access, up-to-date software and monitoring to protect your data. You can protect your account further by turning on two-factor authentication in the client area.

10. Changes

We may update this policy. Significant changes will be emailed to customers or shown in the client area.