Summer Promo 2026: use code summer2026 for 20% off KVM servers.Learn More

Privacy Policy

This Privacy Policy explains how ISPLABS LIMITED, as the primary service provider and controller of customer personal data, collects, uses, shares, and protects your personal data when you use our services.

Information We Collect
  • Full Name
  • Email address
  • Country of residence
  • Password (securely encrypted)
  • IP address, device, browser, and service usage information

We do not store or process your payment information. Payments are securely processed by third-party providers:

  • Stripe - for bank card payments. Learn more about their security practices here.
  • Cryptomus - for cryptocurrency transactions. Read their privacy policy here.
How We Use Your Data
  • To provide and improve our services
  • For billing purposes
  • To ensure security and prevent fraud
  • To send important service-related notifications

Where enabled, we may use limited technical and marketing data, such as IP address, approximate location, referral information, and campaign attribution data, to measure and optimize advertising campaigns on platforms such as Google Ads and similar providers.

What we share: Depending on the tool and configuration used, we may share aggregated data, pseudonymous identifiers, technical event data, and campaign attribution information with analytics, advertising, payment, hosting, support, fraud-prevention, and infrastructure providers.

What we do not share: We do not sell your personal data, and we do not share more data than is reasonably necessary for the relevant purpose.

Legal Bases for Processing
  • We process personal data as necessary to perform a contract with you, including account creation, service delivery, billing, fraud prevention, and customer support.
  • We may process personal data to comply with legal obligations, including accounting, tax, anti-fraud, and law-enforcement response obligations.
  • We may process certain data based on our legitimate interests, such as maintaining platform security, preventing abuse, enforcing our terms, improving service reliability, and measuring the effectiveness of our marketing.
  • Where required by applicable law, we rely on your consent for non-essential cookies, similar technologies, or comparable marketing-related processing, and you may withdraw that consent at any time.
Your Rights
  • The right to access your data
  • The right to correct inaccurate data
  • The right to request erasure of your data, subject to legal and contractual limitations
  • The right to request restriction of processing in certain circumstances
  • The right to object to certain processing, including certain direct marketing or legitimate-interest processing
  • The right to data portability where applicable
  • The right to withdraw consent at any time where processing is based on consent
  • The right to lodge a complaint with your local supervisory authority or the competent UK data protection authority, where applicable
Controller Information

ISPLABS LIMITED is the primary service provider and controller responsible for personal data processed in connection with our services.

Registered office: 128 City Road, London, United Kingdom, EC1V 2NX. Contact: ilja@phylex.net.

Categories of Recipients

We may share personal data with payment providers, hosting and infrastructure providers, security and anti-fraud providers, analytics providers, customer support tools, professional advisers, and public authorities where required by law.

For certain payments intended for the Russian market, payment acceptance details may be processed through Individual Entrepreneur Serikov Artur Aleksandrovich solely for payment acceptance, settlement, accounting, and related compliance purposes. ISPLABS LIMITED remains the primary service provider unless expressly stated otherwise.

Data Sharing & Disclosure

We may disclose personal data to service providers acting on our behalf, affiliated payment collection partners where applicable, professional advisers, payment processors, banks, fraud-prevention providers, and competent authorities where necessary to provide services, process payments, enforce our terms, protect our rights, investigate abuse, or comply with applicable law.

Data Retention

We retain account, billing, support, security, and transactional data for as long as reasonably necessary to provide services, maintain records, resolve disputes, enforce agreements, and comply with applicable legal, tax, accounting, and security obligations.

Retention periods vary by data category and business purpose. Inactive accounts may be deactivated, but some data may be retained for longer where necessary for fraud prevention, legal compliance, backup integrity, dispute handling, or the establishment, exercise, or defence of legal claims.

Payment Data Retention

We do not process or store customer payment card data on our servers. All payment transactions are made through a third-party processor, Stripe, which complies with international security standards, including PCI DSS.

When you make a payment, your card information is transmitted directly to the payment provider over a secure connection. We do not have access to your full card details and do not store them in any form.

We may receive limited payment-related information such as payment status, partial card metadata, payer identifiers, billing country, anti-fraud signals, and transaction references from our payment providers as needed for reconciliation, support, fraud prevention, compliance, refunds, and dispute handling. If you have questions about payment security or data processing, please read the applicable payment provider privacy policy.

International Data Transfers

Because our providers, infrastructure, support tools, and payment partners may operate in multiple countries, your personal data may be processed outside your country and, where applicable, outside the UK or EEA. Where required, we take reasonable steps to use appropriate safeguards for such transfers under applicable data protection law.

Establishing Contact

When you contact us, for example via a contact form or email, personal data is processed solely for the purpose of processing and responding to your enquiry and only to the extent necessary for this purpose.

Cookies and how we use them

We use strictly necessary cookies and similar technologies to operate the website and support core functions such as security, login, and session continuity.

Where enabled, we may also use functional, analytics, and marketing cookies or similar technologies. Where required by applicable law, these non-essential technologies are used only with your consent, and you may withdraw or change your preferences at any time through the available cookie settings or consent tools.

Disabling certain cookies may affect some website features. Browser controls may help manage some cookies, but they may not fully disable all third-party technologies.

If you have any questions about this Privacy Policy, you can contact us at: ilja@phylex.net