UK privacy rights

It applies if you are in the United Kingdom. Leaving the EU did not reduce the protection you have: the UK GDPR keeps the same structure and the same rights as the EU version, alongside the Data Protection Act 2018.

Buildinghost is established in Bulgaria and stores data in the European Union. That does not remove your UK rights, and this page does not replace the Privacy policy — it sets out what is specific to the UK.

Under Articles 15 to 22 of the UK GDPR you may ask us for:

• Access to the personal data we hold about you, and a copy of it.
• Rectification of data that is inaccurate or incomplete.
• Erasure, where the data is no longer needed or the basis for holding it has fallen away.
• Restriction of processing while a dispute about accuracy or lawfulness is resolved.
• Portability of the data you provided, in a structured, machine-readable format.
• Objection to processing based on legitimate interests.
• A decision not taken solely by automated means. We make no such decisions.

We answer within one month. Where a request is complex we may extend that by a further two months and will tell you why within the first month. Exercising any of these rights is free.

Data sits in the European Union (Ireland). For a UK data subject that is a transfer out of the UK, and it is covered by the UK adequacy regulations, which recognise the EEA as providing an adequate level of protection. No additional safeguard is required for this route.

Where a sub-processor handles limited data in the United States, that transfer rests on the UK Addendum to the European Commission Standard Contractual Clauses. The current list is on the Sub-processors page.

If you are unhappy with how we have handled your personal data you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

You can go to the ICO directly and at any point. We would ask you to raise it with us first, because that is usually the faster route to an actual fix.

Submit a request from the Privacy and data screen in your account, or write to privacy@buildinghost.eu. We may need to verify your identity before acting on a request.