Privacy Policy

Dapper Fox Group Ltd, trading as Kinetic Hosting, respects your privacy. We collect information for defined purposes, restrict access to people who need it, protect it with technical and organisational safeguards, and delete or anonymise it when it is no longer required. We do not sell personal information and we do not use customer information for promotional email.

This notice explains how we handle personal information across kinetichosting.com, billing.kinetichosting.com and kineticpanel.net. Dapper Fox Group Ltd is the controller responsible for this processing (company number 11439987; ICO registration ZA841955). Privacy enquiries can be sent to contact@kinetichosting.com. Our registered-office information is available from Companies House.

• Account and billing information: your name, email address, billing address, account identifiers, invoices, transaction references and payment status.
• Service information: the products you order, server configuration, service status, customer audit records and information needed to provision, operate, secure and support your service.
• Communications: support tickets and information you choose to provide through Crisp chat, account messages, applications or other contact forms.
• Technical and security information: IP address, browser and device information, request and access logs, authentication activity, security events and approximate country.
• Optional analytics information: only where the relevant preference is enabled, page and referrer information, session identifiers, interactions, campaign or advertising click identifiers, and ordering-journey selections.
• Recruitment information: information supplied in a job application, including a CV or employment history.

Stripe and PayPal process complete payment credentials. Kinetic Hosting does not receive or store your complete card or PayPal credentials; we retain the invoice, payment status and relevant transaction reference.

• To provide and bill for hosting: necessary to enter into and perform our contract with you.
• To provide customer support: necessary to perform our contract and, where appropriate, for our legitimate interest in resolving enquiries and improving support.
• To protect customers and our services: our legitimate interests in preventing fraud and abuse, investigating incidents, enforcing our terms and maintaining reliable and secure services.
• To maintain invoices, tax and company records: compliance with our legal obligations.
• To send essential service and account messages: performance of our contract and our legitimate interest in keeping customers informed about their service. We do not use customer information for promotional email.
• To establish or defend legal claims: our legitimate interests and, where applicable, compliance with legal obligations.
• For Kinetic Analytics, Google Analytics, Microsoft Clarity and marketing measurement: your consent, controlled independently through Cookie preferences. You can withdraw that consent at any time.

Essential storage is used for functions such as security, authentication and remembering your privacy choices. Affiliate referral cookies may be set when you follow an affiliate link so that a resulting purchase can be attributed; they last for up to 90 days.

Optional categories are off until you choose to enable them. Google Analytics measures visits and site use; Microsoft Clarity provides heatmaps and reconstructed session recordings; Google Ads measures advertising conversions; and Kinetic Analytics records selected ordering-journey events for Kinetic's own reports. We do not sell Kinetic Analytics data or provide it to another organisation for its own purposes.

You can enable categories individually, decline them, or withdraw consent at any time by selecting Cookie preferences in the website footer. Withdrawing consent does not affect processing that was lawful before withdrawal.

We use a limited number of service providers:

• Supabase provides database, authentication and storage infrastructure.
• Vercel delivers the website and processes requests needed to do so; we do not use it as the main customer-information database.
• Stripe and PayPal process payments and payment credentials.
• Crisp processes support-chat content that users choose to send.
• Google processes Analytics and Ads data when the relevant category is enabled.
• Microsoft processes Clarity data when Clarity is enabled.

Our WHMCS billing system is hosted on infrastructure controlled for Kinetic Hosting. We may also disclose information where required by law, to protect a person or our services, or in connection with a legal claim. Providers that act for us may only process information for the contracted service and under applicable data-protection obligations.

Information may be processed in the United Kingdom, European Economic Area, United States and Canada. Some authorised support personnel are located in the EEA and North America. We apply UK data-protection requirements to our handling of personal information and also apply EU GDPR requirements where they govern the processing.

Where a transfer is restricted by applicable data-protection law, we use an applicable transfer mechanism, such as an adequacy regulation or approved contractual safeguards. Contact us if you would like information about the safeguard relevant to a particular provider or transfer.

• Account information: while the account remains open. Cancelling a subscription does not close the account. If you close the account yourself or ask us to close it, we remove account information we no longer need without undue delay.
• Invoices, transactions and tax records: normally six years after the end of the relevant financial year, or longer when required by law, an enquiry or a legal claim. These limited records may remain after account closure because erasure rights do not override our legal obligations.
• Cancelled server data: removed from live systems when the service is cancelled and retained in emergency backups for no more than 30 days.
• Customer-visible server audit logs: three months.
• Kinetic Analytics events: 25 months, after which they are deleted or irreversibly aggregated.
• Internal security logs: for as long as reasonably necessary to secure our services, identify recurring abuse, investigate an incident, enforce restrictions or handle a legal claim. We periodically review these logs and delete or anonymise them when they are no longer needed for those purposes.
• Job applications: deleted when recruitment for the position closes.
• Affiliate cookies: up to 90 days.
• Google Analytics:Google's standard property settings retain user-level and event-level data for two months by default; standard aggregate reports may remain available for longer under Google's retention model.
• Microsoft Clarity: ordinary recordings are generally retained for 30 days. Clarity may retain a limited sample, labelled data and heatmap information for a longer period under its published retention rules.

We use safeguards appropriate to the information and risk. These include HTTPS encryption in transit, encryption of databases and controlled backups at rest, restricted database access, role-based staff permissions, multi-factor authentication, audit logging, regular dependency and security updates, incident-response procedures, staff confidentiality and security training, and periodic access reviews.

No online service can promise absolute security. If a personal-data breach is reportable, we will notify the relevant regulator within the applicable deadline. Where a breach is likely to create a high risk to affected people, we will also notify those people without undue delay.

Depending on the processing and applicable law, you may have the right to access, correct, erase or restrict your personal information; receive portable information; object to processing based on legitimate interests; and withdraw consent. Some rights have legal exceptions—for example, we cannot erase records that the law requires us to keep.

You may close your account using the available account controls or ask support to close it. Subscription cancellation alone does not close the account. You can view much of your information while logged in and can request an export. To protect customers, requests must normally be made from an authenticated account; we may request additional verification when appropriate. We aim to handle straightforward requests within 24–72 hours and will always respond within the period required by law.

To exercise a right, email contact@kinetichosting.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.

Our services are not designed specifically for children. Under UK law, a person must be at least 13 to give their own consent to optional processing connected with an online service. Where consent is required for someone under 13, it must be authorised by a person with parental responsibility and reasonably verified. Separate contract rules and our Terms of Service also apply to purchasing and operating an account. If we learn that information has been collected without an appropriate lawful basis or required authorisation, we will take steps to delete it.

We may update this notice when our services, providers or legal obligations change. We will update the date above and provide an appropriate notice if a change materially affects how we use personal information.