Skip to content
Offer1 month free on annual Cloud Server plans
System status: All systems operational.
Get started

Privacy Policy

Last updated: Jan 2, 2025Effective: Feb 13, 2024Version: 1.6

1.Governance Framework

Infraista collects and processes personal information only as required to provision cloud infrastructure, deliver contracted services, operate our web properties and client consoles, and communicate with you about active services you have requested (collectively, our “Services”).

All processing is conducted in accordance with the UK GDPR, EU GDPR (Regulation 2016/679), and applicable UK data protection legislation. By using our Services, you acknowledge the practices described in this framework.

2.Data Collection

We collect, store, and use only personal data that is necessary, proportionate, and aligned with the purposes of our infrastructure and account management systems.

  • Identity Metrics: Legal name, username, customer identifier, and account credentials used to authenticate console access.
  • Contact Assertions: Postal address, telephone number, and work email used for service delivery and account verification.
  • Financial Telemetry: Payment method metadata, billing records, and transaction history required to process orders and invoices.
  • Network Assertions: IP addresses, session identifiers, order details, order history, and telemetry describing how you interact with Infraista web properties (see our Cookie Policy for cookie-specific data).

Registered account holders may review or update profile data at any time by signing in to the Cloud Console.

3.Data Processing Foundations

Infraista processes personal data when you complete orders, register an account, visit our sites, or engage support channels. Processing may also occur when we validate or enrich registration data through regulated third-party providers (for example, address or credit-reference services).

Primary processing workloads

  • Infrastructure Provisioning: Creating and running the servers, clusters, databases and storage you order, metering usage, and validating console resource permissions.
  • Edge Network Defense: Analyzing traffic behavior vectors to actively neutralize distributed denial-of-service (DDoS) anomalies, server-side code execution vulnerabilities, and unauthorized access attempts.
  • Service Delivery & Support: Fulfilling contracts, billing, fraud prevention, incident response, and customer communications related to active services.

4.Legal Basis for Processing

  • Contract performance: Processing necessary to execute and deliver your orders, manage billing, determine eligible payment methods, and provide support under our agreement with you.
  • Consent: Where you register a Cloud Console account, subscribe to marketing communications, or opt in to specific features. You may withdraw consent at any time without affecting lawfully processed data prior to withdrawal.
  • Legitimate interests: Limited use of contact data to inform existing customers about related services, subject to your right to object. Infraista does not process special category data on this basis.
  • Legal obligation: Retention and disclosure required under applicable law, including obligations under the UK Companies Act and accounting regulations.
  • Automated decision-making: Employed only where permitted by law or with your explicit consent.

5.Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer period is required by law or to protect Infraista’s legal interests (for example, during active disputes or investigations).

  • Customer records are retained for up to 12 months after your last purchase or meaningful interaction with Infraista, unless an active account remains registered in the Cloud Console.
  • Account-holder data persists while your Cloud Console account remains active.
  • Extended retention applies where mandated by statutory requirements or legitimate legal claims.

6.Your Rights (GDPR)

As a data subject, you may exercise the following rights under applicable data protection law. Infraista will notify relevant processors when changes are requested to ensure your rights are honored across our supply chain.

  • Access — request a copy of personal data we process about you, including a machine-readable export where applicable.
  • Rectification — require correction of inaccurate, incomplete, or misleading information.
  • Erasure — request deletion when data is no longer necessary or you withdraw consent, subject to overriding legal bases.
  • Restriction — limit processing to specified purposes while a dispute is resolved.
  • Portability — receive structured, commonly used, machine-readable data and transmit it to another controller.
  • Objection — oppose processing based on legitimate interests or direct marketing.
  • Complaint — lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

To object to direct marketing, contact [email protected]. We will cease marketing processing upon verified receipt of your request.

7.Third-Party Disclosure

Infraista may disclose personal data to group companies, infrastructure partners, payment processors, and communications providers strictly for service delivery, fraud prevention, or address verification.

  • Third parties may use data only to deliver Infraista services, fulfill contractual obligations, or provide services tied to your account.
  • Disclosure may occur where required to comply with law, protect legal interests, or detect and prevent fraud and security incidents.
  • Transfers outside the UK/EEA are protected using appropriate safeguards under UK GDPR and EU GDPR transfer mechanisms.
  • Infraista does not sell personal data to third parties without explicit consent.

8.Policy Changes

Infraista may update this Privacy Policy to reflect regulatory, technical, or operational changes. Material updates will be communicated before they take effect. If you do not accept revised terms, you may object to processing or close your Cloud Console account; we will cease processing account data except where retention is legally required.

9.Cookies

When you visit our website, we deploy cookies and similar technologies to maintain sessions, secure authentication, and measure performance. For detailed classifications and control options, refer to our Cookie Policy.

10.COPPA Compliance

Infraista complies with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect information from anyone under 13 years of age. Our website, products, and services are directed to individuals who are at least 13 years old.

11.Data Controller Contact

Infraista Ltd. is the data controller for personal information processed under this policy. Registered office: 85 Great Portland Street, First Floor, London, England, W1W 7LT.