PRIVACY NOTICE
1. Who we are
scream.io is a trading style of Cohoda Limited, a company registered in England and Wales. We are the data controller responsible for your personal data.
If you have questions about this notice or how we handle your data, contact us at hello@scream.io.
2. What data we collect
We keep it minimal. We may collect:
- Contact details — name and email address, when you submit our contact form or email us directly.
- Project information — details you share about your hosting requirements.
- Technical data — IP address, browser type, and pages visited, collected automatically when you browse this site.
- Cookie data — see Section 7 below.
3. How we use your data
We use your personal data to:
- Respond to your enquiry and provide a quote.
- Deliver, manage and support our hosting services.
- Send service-related communications (e.g. outage notifications, billing).
- Improve our website and services.
- Comply with legal obligations.
We will never sell your data to third parties or send unsolicited marketing without your explicit consent.
4. Lawful basis for processing
Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:
- Legitimate interests — to respond to enquiries, improve our services and maintain security.
- Contract — where processing is necessary to perform a contract with you or take pre-contractual steps at your request.
- Legal obligation — where we are required to process data by law (e.g. tax records, fraud prevention).
- Consent — where you have given clear consent for us to process your data for a specific purpose (e.g. marketing communications).
5. Who we share your data with
We may share your data with:
- Infrastructure providers — data centre operators and cloud providers used to deliver our services.
- Cloudflare Turnstile — to protect our contact form from spam. Cloudflare’s privacy policy applies to data they collect.
- Google Analytics — to collect anonymised website usage data. See Google’s Privacy Policy.
- Professional advisers — accountants, lawyers or auditors where necessary.
- Law enforcement — where we are legally required to do so.
We do not transfer your data outside the UK or EEA unless adequate safeguards are in place (e.g. Standard Contractual Clauses).
6. How long we keep your data
- Enquiry data — retained for up to 2 years after your last communication with us, unless a contract is entered into.
- Client data — retained for the duration of the contract and up to 6 years afterwards for legal and accounting purposes.
- Technical/analytics data — retained for up to 12 months.
7. Cookies
This website uses minimal cookies:
- Essential cookies — required for the site to function (e.g. form submission).
- Cloudflare Turnstile cookies — set by Cloudflare to verify you are not a bot.
We use Google Analytics to understand how visitors use our site. Google may set cookies to collect anonymised usage data. We do not use advertising or behavioural tracking cookies.
8. Your rights
Under the UK GDPR, you have the right to:
- Access your personal data (Subject Access Request).
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict or object to processing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, where consent is the basis for processing.
To exercise any of these rights, email hello@scream.io. We will respond within 30 days.
9. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
10. Changes to this notice
We may update this privacy notice from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this notice periodically.