Legal
Privacy Notice
Last updated 13 August 2026.
Mando Systems Ltd (company number 17168657), trading as EmbassyHost, is the data controller for the information described here. We are registered with the Information Commissioner's Office.
What we collect, and why
| Information | Why we hold it | Lawful basis |
|---|---|---|
| Name, email, optional phone number | To run your account and contact you about your site or domain | Performance of a contract |
| Registrant details (name, address) for a domain | Domain registries legally require them; you are the registrant, not us | Legal obligation / contract |
| Payment records (amounts, dates, PayPal reference) | Billing, refunds and accounting. We never see or store your card details. | Contract / legal obligation |
| What you searched for on our site | To show results and to improve which names we suggest | Legitimate interests |
| A one-way hash of your IP address | Rate limiting and abuse prevention. We do not store the address itself. | Legitimate interests |
| Server and security logs | Keeping the service up and investigating abuse | Legitimate interests |
Companies House information
Some pages on this site are built from the free public Companies House register — company name, number, registered office town and SIC code. We do not publish directors' names on those pages. If a page relates to your company and you want it gone, use the "remove this preview" link on the page itself and it will stop being served.
Who we share it with
We use a small number of processors, each under a data processing agreement:
- PayPal — payments and subscriptions
- Hostinger — domain registration and our servers
- Cloudflare — DNS
- Postmark — transactional email
- Anthropic — generating website copy. We do not send it your personal details.
We do not sell your data, and we do not share it for anyone else's marketing.
How long we keep it
Account and site data: while your account is open, then 60 days after cancellation. Billing records: six years, because tax law requires it. Search logs: 12 months. Security logs: 90 days.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict how we use it, or object to it. There is an export and a delete button in your dashboard, and deletion is a soft delete for 30 days before permanent removal, so an accident can be undone. You can also email us.
If you think we have handled your data badly, please tell us first — but you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Where your data lives
Our servers are in the United Kingdom. Some processors listed above operate outside the UK; where they do, transfers are covered by UK adequacy regulations or standard contractual clauses.
Contact
support@embassyhost.com
Mando Systems Ltd, 10 Pilgrims Walk, Worthing, BN13 1RJ, United Kingdom