What we do with your data.

01Who this notice is from

COREHOP provides infrastructure services — bare metal and dedicated servers, GPU and AI compute, storage systems, and the networking, support or managed services ordered alongside them — and this website. This notice explains what personal data we collect through the site and through your orders, your account and your support requests, and what we do with it.

It covers people who visit this site or write to us through it, contacts at organisations that hold an account, and anyone whose personal data turns up in a support ticket, an abuse report or ordinary correspondence with us. The entity responsible for that data is named with the particulars at the end of this notice.

It does not cover Customer Data — the software, content, databases and backups you store, process or transmit on our Equipment. That stays yours, and how we handle it is set out in the Terms & Conditions. Where this notice says "we" or "COREHOP", it means the entity named at the end.

02What we collect

We collect what you give us, what using the Services produces, and what the law requires us to keep. No more than that:

• From the contact form on this site: your name, email address, company if you give one, and whatever you write in the message.
• For an account and an order: the contact details you register with, the organisation you order for, and the record of what was ordered.
• For billing: invoices and payment confirmations, and the result our payment processor sends back. Card details are entered in the processor's own checkout — we do not keep the number.
• From talking to us: support tickets, emails, abuse reports and anything else you send, including a problem you are reporting.
• From visiting this site: your IP address, browser and device details, the pages requested and the time of each request, as recorded in the web server's logs. There is no analytics or advertising script on any page of this site.
• From running the Services: the IP addresses assigned to your Equipment, and the traffic and resource figures needed to operate the network, stop it being misused and work out what to bill.

We do not buy personal data from anyone else, and nothing on this site exists to build a profile of you.

03How we use it

Personal data goes towards delivering what you ordered — provisioning, support, invoices, renewal notices — answering enquiries sent through this site, keeping our own systems and the network secure, detecting and acting on misuse, and meeting obligations the law puts on us, such as tax and accounting records or a lawful request we have to answer.

Where a law needs us to name a legal basis for that, it is one of four: performing the contract we have with you; our legitimate interests in running and securing a hosting business, weighed against what the data is and what you would reasonably expect; your consent, where we ask for it; and a legal obligation.

Nothing we do with personal data is automated decision-making that produces legal effects for you. How long each kind of it is kept is set out in section 7.

04Cookies on this site

A cookie is a small text file a site asks your browser to hold on to. This site sets no advertising cookies and runs no analytics of its own: nothing here follows you to another site to build an advertising profile.

Pages load two things from outside COREHOP. The web fonts come from Google — when your browser fetches them Google receives your IP address and the usual browser details, under Google's privacy policy. Blocking third-party fonts leaves the site readable in whatever system font your device has.

The other is the live chat widget, provided by Tawk.to and loaded on every page so you can start a conversation with us. It sets its own cookies and receives your IP address and browser details, which is how a chat can follow you from one page to the next; Tawk.to handles that under Tawk.to's privacy policy. What you write in the chat reaches us like any other message you send, and section 12 says how to reach us without it. With scripts from tawk.to blocked, the rest of the site works normally.

The client area uses cookies to keep you signed in and to protect the forms you submit there, which is what you asked it to do.

The chat is part of the page, so its cookies are set when the page loads rather than after a prompt. For any further cookie that is not strictly necessary — analytics, for instance — we will ask for consent before setting it, and this notice will change at the same time.

05Who we share it with

We do not sell personal data, and we do not hand it to anyone for their advertising. The list of who receives it is short:

• Netlify, which runs this site and receives what you submit through its forms, under Netlify's privacy policy.
• Tawk.to, which provides the live chat on every page and receives your IP address, browser details and whatever you type into a chat, under Tawk.to's privacy policy.
• Our payment processor, which takes the payment details and tells us the outcome.
• The operators of the data centres where Equipment is housed, for power, physical security and the network they carry.
• Our accountants and lawyers, where they need something about your account to do their job, and our insurers where a claim involves it.
• Law enforcement, regulators and courts, where the law requires us to hand something over — and where we are permitted to tell you that we have, we will, as the Terms & Conditions say.
• A buyer of the business, if COREHOP is ever sold or reorganised, with the expectation that anything they receive stays governed by this notice or by one that protects it at least as well.

Each of them gets what they need for the one thing they are doing, and nothing else.

06Where it is processed

COREHOP operates its data centres in the United States — Dallas, Los Angeles, Chicago and Ashburn — and everything it runs is hosted there. If you contact us, order from us or use the Services from outside the United States, your data is sent to and processed in the United States, where the law may treat it differently from where you live.

Some of the recipients named in section 5 work outside your country too. Where the law requires a specific safeguard for a transfer of your personal data, that safeguard goes in place before the transfer does.

07How long we keep it

For as long as the account is open and the purposes above still need the data — and then only as long as something else requires us to keep it: the financial record of what was billed and paid, a dispute that is still open, another legal obligation. When none of those applies, we delete it or anonymise it.

Enquiries through the contact form are kept while we are dealing with them, and after that only where the correspondence belongs to an account. Server logs are kept for a short operational period and then written over: long enough to investigate an incident, not kept as a history of anyone's visits.

When a Service ends we stop using the personal data that was only needed to run it, and delete it under the same rules as everything else. What happens to Customer Data at the end of a Service is a separate question, answered by the Terms & Conditions.

08How we protect it

Reasonable technical and organisational measures: access to systems and records is limited to the people whose job needs it, traffic to this site and to the client area is encrypted in transit, the network is watched for misuse, and access is reviewed when someone's role changes.

No method of sending or storing data is completely secure, and we do not claim that this one is. What helps at your end is the same as it is anywhere: keep your credentials to yourself, and tell us promptly if you think someone else has them.

09Your rights

Depending on where you live, the law may let you ask for a copy of the personal data we hold about you, correct it, have it deleted, limit or object to how we use it, receive it in a portable form, and withdraw any consent you have given. Where a right applies to you, it applies — and where one does not, we will say why rather than refuse quietly.

If you are a California resident you may also have the right to know what we have collected and to ask for its deletion, and to opt out of any sale or sharing of it. We do not sell personal data, and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that last one — the first two are yours all the same.

To use any of these, go through section 12. We may need to confirm who you are first — normally by matching the email address on the account — and we may ask which Service a request relates to. We do not charge for a request unless the law lets us.

Some data sits outside these rights: what we must keep because the law says so, like billing and tax records; what we need in order to finish something you asked us to do; and what would give away another person's information. And if you are unhappy with how we handle your data, you can complain to your local data protection authority — though we would rather you told us first.

10Children

The Services are bought by businesses, and this site is not aimed at children. We do not knowingly collect personal data from children. If you think a child has given us some through this site, tell us and we will delete it.

11Changes to this notice

This notice may be updated as what we collect, what we do with it or the law changes. Its version, the date it took effect and the date it was last reviewed sit in the panel with its contents at the top of this page.

A change that materially affects how we handle your data is published here before it takes effect where we can manage that, and where you hold an account and it matters to that account, we will tell you through the client area or by email as well. A correction or a clarification takes effect when it is published.

This notice describes how COREHOP handles personal data. It does not change the Terms & Conditions.