SERVA
English Русский

Privacy policy

All legal documents

Last updated: 7 August 2026

1. Who is responsible for your data

The data controller is SERVA ONE LTD, registered in England under number 14703681, Suite A 82 James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. Privacy questions: [email protected].

2. What we collect and why

  • Account data: e-mail address, name or company name, country. Needed to create the account, issue invoices and contact you about your services.
  • Billing records: payments, invoices, the payment method used. Needed to provide the paid services and to satisfy accounting law. Full card numbers never reach us: card payments are processed by the payment provider.
  • Service metadata: which servers you have, their IP addresses, plans and states. Needed to run the platform.
  • Technical logs: access logs of the website and client area with IP addresses and timestamps. Needed for security, abuse prevention and troubleshooting.
  • Support correspondence: your tickets and messages, so that we can help you and keep the history of what was agreed.

We do not inspect the contents of your servers and we do not analyse your traffic beyond aggregate volume counters. We do not sell personal data to anyone.

3. Who else sees the data

Data is shared only with processors that are necessary to provide the service: payment providers to process your payments, an e-mail delivery provider to send transactional messages, and infrastructure suppliers in the data centers where equipment is located. Each processor receives only what it needs for its function. We disclose data to public authorities only when a legally binding request obliges us to.

4. How long we keep it

Account and service data is kept while the account is active. Billing records are kept for the period required by UK accounting legislation. Technical logs are rotated on a short schedule measured in weeks. After account closure, remaining personal data is deleted or anonymised once no legal obligation requires keeping it.

5. Your rights

Under UK GDPR you can request access to your data, its correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to [email protected]; we respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

6. Security

Access to personal data inside the company is limited to staff who need it for their work. Data in transit is protected by TLS, passwords are stored hashed, and administrative access to infrastructure is restricted and logged.

7. Changes

Updates to this Policy are published on this page with a new revision date. Only the current published version is binding.