Privacy Policy

Last updated: 22 November 2025

WebUltra ("we", "our", "us") is owned and operated by HANA RASHID LTD, a company registered in England and Wales (Company number 16588746). We provide web hosting, VPS, dedicated servers, domain registration and related cloud services through our website https://webultra.cloud.

We are committed to protecting your personal data and handling it in a transparent, secure and lawful way, in accordance with applicable data protection laws including the UK GDPR and the Data Protection Act 2018.

1. Information we collect

We collect and process only the information that is necessary to provide and improve our services.

1.1 Information you provide to us

• Full name
• Email address
• Phone number
• Billing address
• Account login details (username and hashed password)
• Service configuration details (for example, hosting plan, server options, domain names)
• Support tickets, chat messages and any other communications you send to us

1.2 Payment information

Payments are processed securely by third-party payment providers. We do not store full card numbers or card security codes on our systems. Our payment partners may collect and process your payment data in accordance with their own privacy policies.

1.3 Information collected automatically

• IP address and approximate location
• Browser type, device information and operating system
• Pages visited, access times and referring URLs
• Technical logs generated by our servers and security systems

This information is used for security, troubleshooting, analytics and to improve the performance of our services.

1.4 Service usage data

When you use our hosting or server services, we may process technical data such as resource usage (CPU, RAM, bandwidth), error logs and system events. This data is necessary for operating, maintaining and securing your services.

2. How we use your information

• To create and manage your WebUltra account
• To process your orders and payments
• To deliver hosting, VPS, dedicated server and related services
• To provide customer and technical support
• To maintain and improve the security and performance of our website and infrastructure
• To prevent fraud, abuse and unauthorised activity
• To comply with legal, tax and regulatory obligations
• To send important service-related communications (for example, security notices, billing reminders, service updates)

We do not sell, rent or trade your personal data.

3. Legal bases for processing

We process your personal data on the following legal bases:

• Contractual necessity – to provide the services you have ordered and to manage your account.
• Legitimate interests – to maintain our services, improve our website, prevent fraud and secure our systems.
• Legal obligation – to meet tax, accounting, anti-fraud and other legal requirements.
• Consent – for certain optional communications or where required by law. You can withdraw your consent at any time.

4. How we share your information

We may share your data with trusted third parties only where necessary for the operation of our services or where required by law.

4.1 Service providers

• Payment processors and merchant service providers
• Domain registries, SSL certificate authorities and similar providers
• Data centres, infrastructure and network providers
• Security, monitoring and anti-fraud services
• Professional advisers (for example, legal and accounting services)

These partners are required to protect your data and may only use it in accordance with our instructions and applicable law.

4.2 Legal and regulatory requirements

We may disclose your information if we are legally required to do so, for example in response to a court order, law enforcement request or other legal process, or to protect our rights, property or safety, or the rights, property or safety of our customers or others.

5. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including to meet legal, accounting and reporting requirements.

• Account information is kept while your account is active.
• Billing and transaction records are generally kept for at least 6 years, as required by UK law.
• Support tickets and communications may be retained for up to 24 months.
• Technical and security logs are retained only as long as required for security and operational purposes.

6. Your rights

Under data protection laws, you may have the following rights in relation to your personal data:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate or incomplete data.
• The right to request deletion of your data, where there is no legal reason for us to continue processing it.
• The right to restrict or object to certain types of processing.
• The right to request a copy of your data in a structured, commonly used and machine-readable format (data portability).
• The right to withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us using the details in the Contact us section below. We may need to verify your identity before responding to your request.

7. Cookies

Our website uses cookies and similar technologies to provide essential functionality, improve performance and enhance your user experience.

• Essential cookies – required for login, account management and secure operation of the website.
• Functional cookies – used to remember your preferences, such as language or display settings.
• Analytics cookies – used, where enabled, to understand how visitors use our website and to improve our services.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

8. Data security

We use appropriate technical and organisational measures to protect your personal data, including encryption of data in transit, secure server infrastructure, firewalls, access controls and regular security monitoring. While we strive to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International data transfers

Some of our service providers may be located outside the United Kingdom or European Economic Area. Where data is transferred internationally, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms, to protect your personal data.

10. Children's privacy

Our website and services are intended for business users and individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us so that we can delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or other factors. Any updates will be posted on this page with an updated "Last updated" date. We encourage you to review this Policy periodically.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

HANA RASHID LTD
Registered office address:
18 Thornhill Terrace, Sunderland, England, SR2 7JL
Phone: +44 7351 539680
Email: payment@webultra.cloud