Privacy Policy

1. Who We Are

DataPasa Limited (we, us, our) is the data controller responsible for your personal data.

Company name

DataPasa Limited

Company number

17164297, registered in England and Wales. Verify on Companies House.

Registered address

124 City Road, London, United Kingdom, EC1V 2NX

ICO registration

ZC223060, registered with the UK Information Commissioner's Office. Verify on the ICO register or read our registration certificate.

Contact email

support@datapasa.com

Data protection

Our data protection contact, as filed with the ICO, is support@datapasa.com. Put "data protection" in the subject line and it will be routed accordingly.

2. Data We Collect

We collect the following categories of personal data:

• Account data: your first name, last name and email address, provided at registration.
• Payment data: payment transactions are processed by third-party payment providers. We do not store full card numbers or sensitive authentication data. We keep the amount, currency, date and the provider's transaction reference.
• Usage data: your server orders, service configuration, balance movements and account activity.
• Technical data: IP addresses, browser type and access timestamps, recorded automatically when you use our website or services.
• Device and network data for fraud prevention: when you are signed in to the customer panel, we collect a technical profile of your device. See section 3.
• Communications: records of support tickets, abuse correspondence, emails and messages you send us.

3. Fraud Prevention and Automated Checks

Cheap hosting attracts abuse, so we run automated checks on signed-in accounts. We are explicit about this because it affects you.

What we collect

When you are signed in to the customer panel, your browser reports a technical profile of your device, refreshed at most once every 6 hours. It contains:

• Your IP address and the country it resolves to, determined using a local database. Your IP is not sent to any third party for this.
• Browser and operating system identifiers, language settings and time zone.
• Screen size, pixel ratio and colour depth.
• Reported processor core count and device memory.
• Graphics adapter identifiers reported by your browser, the number of common fonts available, and supported media codecs.
• Signals that indicate browser automation, such as a WebDriver flag.

We do not use any of this for advertising, commercial profiling, or tracking you across other websites. Our lawful basis is legitimate interests, specifically preventing fraud and protecting our network and our other customers. Preventing fraud is recognised as a legitimate interest in UK GDPR Recital 47.

Automated decisions

These signals are evaluated by automated rules. If a rule matches, your account receives an internal marker, and some markers restrict what you can order or block access to certain plans. This happens without a person reviewing it first.

You have the right to ask for human intervention, to express your point of view, and to contest the outcome. Email support@datapasa.com and a person will review your account. We will tell you which category of restriction applies to you. We will not disclose the exact detection rules, because doing so would let them be evaded and would defeat the purpose of the checks.

4. How We Use Your Data

5. Who We Share Data With

We do not sell your personal data, and we share it with as few parties as possible. Our virtualisation and game panel software is self-hosted on our own servers, so the vendors of that software never receive anything about you. The complete list of outside parties is:

We use a MaxMind GeoIP database to resolve IP addresses to a country. The database is held locally on our own servers, so no data about you is sent to MaxMind.

We may also disclose data to professional advisers such as lawyers, accountants and auditors, and to law enforcement or regulatory authorities where required by applicable law. All processors are required to handle data securely and only for the purposes we specify.

6. International Transfers

Some of our service providers are located outside the United Kingdom. Where we transfer personal data internationally, we rely on adequacy regulations made by the UK government, or on the UK International Data Transfer Agreement, or on the UK Addendum to the EU Standard Contractual Clauses.

Our payment providers receive only an order reference and an amount, never your name, email address or account data. Our virtualisation and game panel software runs on our own servers, so the customer data inside it stays within our infrastructure and is not passed to the software vendors.

7. How Long We Keep Data

Deletion runs automatically on a daily schedule. These are the actual periods enforced by our systems.

We hold no analytics data, because we run no analytics.

8. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your data where we no longer have a lawful basis to retain it.
• Restriction: ask us to restrict processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.
• Human review: contest an automated decision, as described in section 3.

Two of these you can exercise yourself, immediately, in the customer panel under Profile, then Your data. Download my data gives you a machine-readable copy. Delete account starts the erasure process described in section 9. Consent for referral attribution is withdrawn using the Cookie settings link at the bottom of any page on datapasa.com.

For anything else, email support@datapasa.com. We will respond within one month.

9. Deleting Your Account

You can request deletion from the customer panel. Deleting your account does not delete your services, so you need to cancel and remove any active servers yourself first. If you have a remaining balance, please open a support ticket and request a refund before you confirm deletion. The consequences of not doing so are set out in our Terms of Service and Refund Policy.

Your account is disabled immediately, and erasure happens 30 days later. During those 30 days you can cancel the request using the link in the confirmation email we send you.

When erasure runs:

• Your name and email address are replaced with a placeholder everywhere they appear.
• Your password, profile picture, saved sessions, passkeys, device profile and fraud markers are permanently deleted.
• The content of your support tickets is deleted.
• Your game panel account is deleted from the game panel provider.

Two things survive, and you should know why:

• Invoices, payments and ledger entries are kept for 6 years without your name or email attached. We are legally required to keep financial records, so this falls under Article 17(3)(b) of the UK GDPR.
• Abuse reports and the correspondence about them are kept, because we may need them to establish or defend legal claims. This falls under Article 17(3)(e).

10. Security

Passwords are stored using bcrypt hashing and are never recoverable in plain text. Sessions use short-lived tokens with rotation and reuse detection. We support passkeys and two-factor authentication. All traffic to our website and panel is encrypted in transit.

11. Right to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113. Quote our registration reference ZC223060 so they can identify us immediately. We would appreciate the chance to address your concern first.

12. Cookies

We use cookies and similar technologies on our website. For full details, including exactly what is stored and how to change your choice, please read our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the latest revision. For material changes, we will notify you by email to the address associated with your account.

14. Contact Us

For any questions about this Privacy Policy or your personal data, please contact us at support@datapasa.com.