Privacy & Cookie Policy

1. Scope and Who Is Responsible for Your Data

This Privacy Policy explains how RTP99 LLC, trading as CloudYork, processes personal data when CloudYork determines why and how it is used. It applies to the CloudYork website, enquiries, customer and account interactions, orders, support and services processed for CloudYork’s own business purposes.

Different roles may apply to data hosted by Customers. Customer-hosted data is addressed separately below. CloudYork seeks to collect and process personal data reasonably necessary for the purposes described in this Policy.

2. Personal Data We Collect

• Identity & contactDepending on the interaction, CloudYork may collect identity and contact details; account identifiers,
• Account informationpreferences and authentication information; ordered products, service configuration,
• Services & ordersregion, domain or service identifiers, subscriptions and renewals;
• Billing & transactionsinvoices, transaction status, billing address and tax or accounting records;
• Domain registrationand domain registrant, verification, registrar and registry transaction information.
• CommunicationsCloudYork may also process support requests, contact submissions, correspondence, attachments voluntarily supplied,
• Technical & security dataIP addresses, timestamps, browser or device information, login and security records,
• Preferences & consentservice-usage metadata, operational logs, language, currency,
• Fraud, abuse & compliancetheme and consent choices, abuse reports, fraud indicators and information reasonably required for security, verification or compliance.

CloudYork does not request sensitive personal data through the ordinary public contact form. Customer-hosted content may contain sensitive data chosen by a Customer and is addressed in Section 6.

3. How We Receive Personal Data

• Directly from youCloudYork may receive personal data directly from an individual or Customer;
• Account usersautomatically through use of websites or services; from authorised account users;
• Website & service usefrom payment, billing,
• Payment, domain & service providersregistrar, registry,
• Security & abuse reportsinfrastructure or service providers; from fraud,
• Authorities & lawful sourcessecurity or abuse reports; and from public authorities or other legally permitted sources where applicable.

4. How and Why We Use Personal Data

• Enquiries & ordersCloudYork may use personal data to respond to enquiries; prepare quotations and orders;
• Accountscreate and maintain accounts; provide,
• Service deliveryconfigure and support services; register,
• Domainsrenew or transfer domains; administer billing and payments;
• Billingsend service notices; authenticate users;
• Support & communicationsprevent fraud and abuse; protect accounts and infrastructure;
• Security & fraud preventiontroubleshoot and support service reliability; enforce agreements;
• Compliance & recordscomply with law; maintain accounting and tax records;
• Legal claims & service improvementand establish, exercise or defend legal claims.

CloudYork may also use reasonably necessary operational information to improve service operations and manage privacy, website and consent choices.

5. Legal Bases for Processing

• Contract & pre-contractual stepsCloudYork may rely on steps requested before entering a contract or on contract performance when responding to requested pre-sale enquiries and quotations, accepting and administering orders, creating and managing customer accounts, providing purchased services, performing contractual domain registration, renewal or transfer, sending service communications, providing customer support, and administering billing and payments needed for the service.
• Legal obligationsCloudYork may process personal data to comply with legal obligations, including tax and accounting duties, legally required records, valid legal requests, and applicable regulatory or compliance requirements. CloudYork may rely on legitimate interests for account, network and infrastructure security;
• Legitimate interestsfraud and abuse prevention; service reliability and troubleshooting; customer support where not strictly contractual; enforcing agreements; establishing, exercising or defending legal claims; and improving service operations using reasonably necessary operational data. CloudYork relies on those interests only where they are not overridden by the individual’s applicable rights and interests.
• ConsentCloudYork relies on consent where required for optional cookies, optional analytics, optional marketing, or other processing for which applicable law requires consent. Consent may be withdrawn without affecting processing already lawfully performed; processing based on another lawful basis may continue where legally permitted.

6. Customer-Hosted Data and CloudYork’s Processor Role

Customers may host or transmit personal data through web hosting, email hosting, VPS or related services. The Customer normally determines whose data is uploaded, why it is processed, the applicable legal basis and retention. Providing infrastructure does not make CloudYork the independent decision-maker for those purposes.

Where CloudYork processes Customer-hosted personal data as a processor, service provider or equivalent role and applicable law requires contractual data-processing terms, the parties will be subject to or enter into the applicable data-processing terms required by law.

• Lawful collectionThe Customer remains responsible for its lawful collection,
• Privacy noticesprivacy notices,
• Purposes & legal basespurposes and legal bases,
• Data-subject requestsresponses to its users or data subjects,
• Complianceits own compliance obligations,
• Service configurationand appropriate service configuration.

CloudYork may handle hosted data as reasonably necessary to store or transmit it, maintain and secure infrastructure, troubleshoot, perform requested or authorised restoration or support, and comply with law.

CloudYork does not routinely inspect Customer-hosted content, but authorised operational access may be required for legitimate service, support, security or legal purposes.

7. Payments, Billing and Transaction Data

CloudYork processes billing records, invoices, transaction references and status, and information needed for accounting, account administration and fraud prevention. Payment providers may process payment credentials directly and may have their own privacy obligations. CloudYork does not represent that it stores full payment-card details.

8. Domain Registration and Registry Data

Providing domain services may require personal data to be disclosed to or received from registrars, registries, registry operators, verification providers, ICANN where applicable, and other relevant domain authorities. Registration information may be required by a registry, registrar or applicable law.

The availability of privacy, proxy and redaction services varies by TLD, registry and provider. Registration information may need to be disclosed where required by the relevant domain authority or law, and CloudYork cannot guarantee the availability of WHOIS or other domain-privacy services.

9. How We Share or Disclose Personal Data

• Infrastructure & networksWhere applicable,
• Account & billing providersCloudYork may disclose personal data to hosting and infrastructure providers, datacentres and network providers,
• Payment providersemail and service-delivery providers, account and billing platforms,
• Registrars & registriespayment processors,
• Security & fraud providersregistrars and registries, security,
• Backup & storage providersfraud and abuse-prevention providers, backup and storage providers,
• Professional advisersprofessional advisers,
• Authoritiesaccountants, auditors,
• Business successorslegal advisers, lawful authorities and a successor in a legitimate business transaction.

Disclosure is limited to what is reasonably necessary for the relevant purpose, subject to applicable law and contracts. Contractual safeguards are used where required for providers acting on CloudYork’s behalf. Some recipients, including registrars, payment providers and authorities, may determine their own processing purposes.

10. International Processing and Data Transfers

CloudYork is operated by a Texas, United States entity and serves Customers internationally. Personal data may therefore be processed in countries other than the individual’s country. A selected hosting location does not by itself guarantee that all account, support or operational data remains in that region.

Where applicable law restricts an international transfer, CloudYork will rely on a legally permitted transfer basis or safeguard as required for that transfer. Depending on the circumstances, permitted mechanisms may include an adequacy decision, applicable contractual safeguards, an applicable UK transfer mechanism, or another safeguard or derogation permitted by law.

11. Data Retention

Retention depends on the processing purpose, contractual relationship, legal, accounting and tax duties, fraud and security needs, disputes and legal claims, domain or registry requirements and operational needs. Different categories may therefore be retained for different periods, only as long as reasonably necessary or required or permitted by law.

When an account or service ends, some operational or customer data may be deleted while records may remain for legal, accounting, tax, fraud, security or dispute purposes. CloudYork does not promise instantaneous deletion from every technical system.

12. Security and Incident Handling

CloudYork uses reasonable administrative, technical and organisational measures designed to protect personal data, taking account of the data, processing and risk. No internet, network, hosting, storage or transmission method can guarantee absolute security.

Where applicable law requires notification of a personal-data breach, CloudYork will make the legally required notifications. Customers remain responsible for customer-controlled accounts, applications, passwords and systems as described in the General Terms.

13. Your Privacy Rights and Requests

• AccessDepending on applicable law,
• Correctionan individual may have rights to confirmation or access,
• Deletioncorrection,
• Restrictiondeletion,
• Objectionrestriction,
• Portabilityobjection,
• Withdraw consentportability,
• Complaintwithdrawal of consent and complaint to a supervisory or regulatory authority. Rights are not absolute and legal exceptions may apply.

CloudYork may verify identity and accept an authorised agent where required by law. Requests will be handled within legally required timeframes, and information may be retained where law requires or permits it. CloudYork will not unlawfully discriminate against an individual for exercising applicable privacy rights. Requests may be submitted through the CloudYork contact form or support email.

14. Region-Specific Privacy Rights

In the EEA, United Kingdom and similar GDPR jurisdictions, applicable rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent and a complaint to a supervisory authority.

• Access & confirmationResidents of certain United States states may,
• Correctionwhere applicable,
• Deletionhave rights such as access, correction,
• Portabilitydeletion,
• Sale & advertising opt-outportability,
• Qualifying profilingand opt-out rights concerning a sale, targeted advertising or qualifying profiling.
• AppealRights under this section apply only where the relevant law applies.
• Applicable-law limitsWhere applicable law provides an opt-out or appeal right, CloudYork will provide the mechanism required by that law.

15. Children and Minors

CloudYork’s public services are not directed to children who cannot lawfully enter the relevant service agreement. CloudYork does not knowingly solicit personal data directly through the public website from children where parental or guardian authorisation is legally required.

If CloudYork learns that data was collected directly from a child contrary to applicable law, it may take appropriate steps to remove or otherwise lawfully handle it. CloudYork does not independently monitor customer-hosted content for children’s data.

16. Third-Party Websites and Services

Links or integrations with third-party websites and services are subject to those parties’ privacy practices. Subject to applicable law, CloudYork is not responsible for practices it does not control. This does not limit CloudYork’s own obligations for providers processing data on its behalf.

17. Business Transfers, Legal Requests and Protection of Rights

Subject to applicable law and appropriate protections, personal data may be disclosed in connection with a merger, acquisition, restructuring, financing, sale of a business or assets, insolvency or similar legitimate business event.

CloudYork may also disclose data where reasonably necessary to comply with law or valid legal process, respond to lawful authorities, enforce agreements, investigate fraud, abuse or security incidents, protect CloudYork, Customers, users or third parties, or establish, exercise or defend legal claims.

18. Changes to This Privacy Policy

CloudYork may update this Policy and will revise the update date. Reasonable notice of material changes will be provided where required by law. Where legally required before materially different processing of previously collected data, CloudYork will provide additional notice or seek consent. A policy update does not retroactively create consent.

19. Privacy Contact Information

RTP99 LLC, trading as CloudYork, is responsible for the personal-data processing described in this Policy where it determines the purposes and means. Privacy enquiries and requests may be submitted through the CloudYork contact form or to support@cloudyork.com.

United States Business Address: RTP99 LLC, 10601 Clarence Dr, Suite 250, Frisco, TX 75033-3867, United States.

20. Cookies and browser storage

Cookies are small values a website can store in your browser. Websites may also use local or session storage for settings and technical state.

CloudYork stores only the information needed for the stated purpose and does not place optional services before the relevant consent is granted.

21. Necessary

Necessary storage supports core website operation, security and the record of your privacy choices. It cannot be disabled through the preference center because the site needs it to provide these functions.

22. Preferences

Preference storage may remember optional choices such as display, language or regional settings. You can enable or disable this category in Cookie settings.

23. Analytics

Analytics services may help CloudYork understand how the public website is used. No analytics provider is currently active. If one is added later, it will only load after analytics consent.

24. Marketing

Marketing services may support advertising or campaign measurement. No marketing provider is currently active. If one is added later, it will only load after marketing consent.

25. Your consent record

CloudYork stores a first-party consent record containing the consent version, time, category choices and website locale. It does not contain your name, email address or other direct contact details.

26. Change or withdraw consent

Open Cookie settings in the footer to update or withdraw optional consent at any time. Revoking a category stops registered services and removes their declared non-essential storage where possible.

You can also clear website data in your browser. Doing so may cause the consent request to appear again.