Privacy Policy

Privacy Policy

Effective Date: 19 September 2026
Last Updated: 19 September 2026

INS-CO (“INS-CO”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal data when you:

visit our websites;
create or use an account;
purchase or use our Products or Services;
contact us;
submit a support request or ticket;
communicate with our staff;
subscribe to communications;
use our customer or management portals; or
otherwise interact with INS-CO.

Our services include, among other things, IT support, network support, data centre support, field engineering, software support, cloud and infrastructure services, cybersecurity, wireless and network surveys, migration and relocation services, staffing and outsourcing, logistics and warehouse services, consulting, hosting, VPS and dedicated servers, domains, SSL certificates, colocation, VPN/DVPN, CDN/IPFS, and digital services.

This Privacy Policy is intended to explain our privacy practices in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) where applicable.

—

1. Data Controller

The data controller responsible for your personal data is:

Legal Entity Name: [INSERT LEGAL ENTITY NAME]Trading Name: INS-CO
Registered Address: [INSERT FULL REGISTERED ADDRESS]Country: [INSERT COUNTRY]Company Registration Number: [INSERT NUMBER]VAT Number: [INSERT VAT NUMBER, IF APPLICABLE]Privacy Email: [privacy@ins-co.com](mailto:privacy@ins-co.com)
Website: https://ins-co.com/

Where INS-CO processes personal data on behalf of a business customer, INS-CO may act as a data processor rather than a data controller. In those circumstances, the applicable data processing agreement and the customer’s instructions will govern the relevant processing.

—

2. What Personal Data We Collect

Depending on how you interact with INS-CO, we may collect different categories of personal data.

2.1. Identity Information

This may include:

first and last name;
username;
account ID;
company name;
job title;
professional information;
customer or client reference numbers.

2.2. Contact Information

This may include:

email address;
telephone number;
mobile number;
billing address;
registered address;
shipping or delivery address;
business address;
contact preferences.

2.3. Account Information

When you create an account or use one of our customer portals, we may collect:

username;
email address;
password or password-related information;
account status;
service subscriptions;
account settings;
authentication information;
account activity;
security verification information.

Passwords should be stored using appropriate security mechanisms. We do not intend to store passwords in plain text.

2.4. Billing and Payment Information

Depending on the payment method used, we may process:

billing name;
billing address;
transaction information;
invoice information;
payment status;
payment reference;
payment method;
limited payment-card information where provided by a payment processor.

Payment card details may be processed directly by third-party payment providers. INS-CO does not need to receive or store full payment-card numbers when the payment provider processes the transaction directly.

2.5. Order and Service Information

We may collect information concerning:

Products and Services purchased;
subscriptions;
domain registrations;
hosting services;
VPS or dedicated server services;
invoices;
orders;
service configuration;
renewal information;
support history;
service status;
cancellations;
refunds;
account history.

2.6. Communications

When you contact us, we may collect and retain:

emails;
contact-form submissions;
support tickets;
chat communications;
telephone-related information;
attachments;
technical information included in communications;
records of interactions with our support team.

2.7. Technical and Device Information

When you access our websites or systems, we may automatically collect certain technical information, including:

IP address;
browser type;
browser version;
operating system;
device type;
device identifiers where applicable;
language preferences;
time zone;
referring website;
pages viewed;
access times;
approximate location derived from IP address;
error information;
security and diagnostic information.

2.8. Server, Hosting and Infrastructure Logs

Where you use INS-CO infrastructure or hosting services, we may process technical information necessary to operate, secure, maintain, and troubleshoot those services.

This may include:

IP addresses;
connection information;
authentication events;
system logs;
security logs;
server activity;
network information;
resource usage;
timestamps;
error logs;
abuse reports;
firewall and security events.

The exact information processed depends on the Product or Service you use.

2.9. Information You Provide to Us

You may voluntarily provide additional information when communicating with us, requesting a quotation, submitting a support ticket, completing a form, participating in a survey, or otherwise interacting with INS-CO.

Please do not provide sensitive personal information unless it is necessary and specifically requested for a legitimate purpose.

—

3. How We Collect Personal Data

We collect personal data through:

our websites;
contact forms;
quotation forms;
account registration;
customer portals;
support portals;
ticket systems;
email;
telephone;
online chat;
purchases and orders;
payment providers;
cookies and similar technologies;
server and security logs;
communications with our personnel;
business relationships;
third-party service providers;
publicly available business information where appropriate.

—

4. Why We Use Personal Data

We may process personal data for the following purposes.

4.1. Providing Products and Services

We use personal data to:

create and manage customer accounts;
provide Products and Services;
configure services;
process orders;
activate subscriptions;
provide hosting and infrastructure services;
provide technical support;
manage domain-related services;
provide consulting and professional services;
communicate with customers about their services.

4.2. Processing Payments

We process relevant information to:

issue invoices;
process payments;
confirm transactions;
manage refunds;
identify unpaid invoices;
maintain financial records;
prevent payment fraud.

4.3. Customer Support

We use personal data to:

respond to questions;
manage support tickets;
troubleshoot technical issues;
communicate about incidents;
maintain support history;
improve our support services.

4.4. Security and Fraud Prevention

We may process information to:

detect suspicious activity;
prevent fraud;
protect customer accounts;
detect abuse;
investigate security incidents;
protect infrastructure;
prevent unauthorised access;
maintain system integrity.

4.5. Legal and Regulatory Compliance

We may process personal data when necessary to:

comply with legal obligations;
respond to lawful requests;
maintain required records;
meet tax and accounting obligations;
establish or defend legal claims;
comply with court orders or regulatory requirements.

4.6. Website Operation

We use technical information to:

operate our websites;
maintain availability;
diagnose errors;
improve performance;
protect against malicious activity;
understand general website usage.

4.7. Business Operations

We may process information for legitimate business purposes including:

internal administration;
service management;
quality control;
reporting;
auditing;
business planning;
customer relationship management;
improving Products and Services.

4.8. Marketing

Where legally permitted, we may use contact information to send:

newsletters;
service announcements;
product information;
offers;
educational content;
company updates.

Where consent is required, we will obtain consent before sending marketing communications.

You may unsubscribe from marketing communications at any time.

—

5. Legal Bases for Processing

Where GDPR applies, we process personal data on one or more of the following legal bases under Article 6 GDPR.

5.1. Contract

We may process personal data where necessary to:

provide a requested service;
process an order;
manage an account;
provide customer support;
process payments;
perform a contract with you.

5.2. Legal Obligation

We may process information where necessary to comply with legal obligations, including accounting, tax, regulatory, and lawful reporting requirements.

5.3. Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

maintaining network security;
preventing fraud;
protecting infrastructure;
improving services;
managing business relationships;
defending legal claims;
maintaining operational records.

5.4. Consent

Where required by law, we will request your consent before processing personal data for a specific purpose.

You may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

—

6. Special Categories of Personal Data

INS-CO does not generally require special categories of personal data, such as health information, biometric information, religious beliefs, political opinions, or similar sensitive information.

Please do not submit such information through our websites or support systems unless it is strictly necessary and we have provided an appropriate mechanism for doing so.

If such information is unintentionally provided, we may delete it where legally permissible and appropriate.

—

7. Customer Content and Hosted Data

Certain INS-CO services may allow customers to store, transmit, process, or host their own information, files, applications, databases, websites, or other content.

In these circumstances:

the Customer generally determines the purpose and means of processing its own customer data;
INS-CO may process such data on behalf of the Customer;
INS-CO may act as a data processor where applicable;
the Customer remains responsible for ensuring that its use of the service complies with applicable data protection laws;
access to customer content by INS-CO personnel is limited to legitimate operational, technical, security, support, or legal purposes.

Where required, the parties may enter into a separate Data Processing Agreement (“DPA”).

—

8. Data Sharing

We do not sell personal data to third parties.

We may disclose personal data to selected third parties where necessary to operate our business and provide Products and Services.

These may include:

8.1. Hosting and Infrastructure Providers

We may use third-party providers for:

servers;
cloud infrastructure;
hosting;
data storage;
backups;
network infrastructure;
security services.

8.2. Payment Providers

Payment information may be processed by payment providers used to complete transactions.

These providers may process information according to their own privacy policies.

8.3. IT and Security Providers

We may use providers for:

cybersecurity;
monitoring;
authentication;
fraud prevention;
backup;
technical support;
system management.

8.4. Accounting and Professional Advisors

We may share relevant information with:

accountants;
auditors;
tax advisors;
lawyers;
insurers;
professional consultants.

8.5. Communication Providers

We may use third-party providers for:

email delivery;
customer support;
ticket management;
SMS;
messaging;
notifications.

8.6. Analytics Providers

Where enabled and legally permitted, we may use analytics services to understand website usage and improve performance.

8.7. Government and Legal Authorities

We may disclose information where required or permitted by law, including in response to:

court orders;
lawful governmental requests;
regulatory requirements;
law-enforcement requests;
legal proceedings.

—

9. Third-Party Services

Our websites and Products may integrate with or link to third-party services.

Examples may include:

payment providers;
analytics services;
cloud providers;
communication platforms;
security providers;
domain registries;
social media services;
advertising platforms;
customer relationship management systems.

Third-party services operate under their own terms and privacy policies.

We recommend reviewing the privacy policies of third-party services before providing personal information through them.

—

10. Google Services and Analytics

Where Google services such as Google Analytics, Google Tag Manager, Google Ads, Google Search Console, or other Google services are enabled, relevant technical or usage information may be processed by Google.

Where legally required, non-essential analytics or advertising technologies will only be activated after obtaining the appropriate consent.

Users can manage applicable cookie preferences through our cookie-consent mechanism.

—

11. Cookies and Similar Technologies

INS-CO uses cookies and similar technologies.

Cookies may be used for:

essential website functionality;
security;
remembering preferences;
authentication;
website analytics;
performance monitoring;
marketing;
improving user experience.

11.1. Strictly Necessary Cookies

These cookies are necessary for certain website functions, including:

security;
authentication;
session management;
cookie preferences;
basic website operation.

These cookies may not require consent where permitted by applicable law.

11.2. Analytics Cookies

Analytics cookies help us understand:

how visitors use our website;
which pages are visited;
website performance;
technical errors;
general traffic patterns.

11.3. Marketing Cookies

Where used, marketing technologies may help us:

measure advertising performance;
display relevant advertising;
understand campaign effectiveness.

Where required by law, marketing cookies will only be activated after consent.

11.4. Cookie Preferences

You can manage cookie preferences using the cookie-consent mechanism provided on our website.

You may also manage cookies through your browser settings.

Disabling certain cookies may affect website functionality.

—

12. Server Logs and Security Monitoring

Our systems may automatically record technical events for security and operational purposes.

Security logs may include:

IP address;
login attempts;
timestamps;
authentication events;
access events;
system activity;
network information;
security alerts;
suspicious activity.

We use these logs to protect our infrastructure, detect attacks, investigate incidents, and maintain service reliability.

—

13. IP Addresses

We may process IP addresses for legitimate operational purposes including:

security;
fraud prevention;
abuse prevention;
authentication;
troubleshooting;
service delivery;
geographic approximation;
compliance with legal obligations.

An IP address may constitute personal data under applicable law.

—

14. Direct Marketing

We may send marketing communications where permitted by law.

You can unsubscribe from marketing emails by:

using the unsubscribe link in the communication;
changing your communication preferences; or
contacting [privacy@ins-co.com](mailto:privacy@ins-co.com).

Service-related communications, such as invoices, security alerts, account notices, service interruptions, and important contractual information, are not necessarily marketing communications and may continue where necessary.

—

15. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required by law.

Retention periods may depend on:

the nature of the information;
the purpose for which it was collected;
the contractual relationship;
legal requirements;
accounting requirements;
dispute-resolution requirements;
security requirements.

Examples include:

account information may be retained while an account remains active and for a reasonable period afterward;
support records may be retained for operational and dispute-resolution purposes;
invoices and financial records may be retained for the period required by applicable tax and accounting laws;
security logs may be retained for a period appropriate to security and operational requirements;
marketing information may be retained until consent is withdrawn or the information is no longer required.

When information is no longer required, we may securely delete, anonymise, or otherwise dispose of it.

—

16. International Data Transfers

Some of our service providers or business partners may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA or another jurisdiction with applicable transfer restrictions, we will implement appropriate safeguards required by applicable law.

Depending on the circumstances, these safeguards may include:

European Commission Standard Contractual Clauses;
an adequacy decision;
recognised certification mechanisms;
appropriate contractual protections;
other legally recognised transfer mechanisms.

—

17. Data Security

We take reasonable technical and organisational measures designed to protect personal data against:

unauthorised access;
accidental loss;
destruction;
alteration;
disclosure;
misuse;
unauthorised processing.

Depending on the service and circumstances, security measures may include:

encryption in transit;
secure hosting environments;
access controls;
authentication mechanisms;
role-based permissions;
monitoring;
logging;
backups;
vulnerability management;
security updates;
network security controls;
incident response procedures.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

—

18. Data Breach and Security Incidents

If INS-CO becomes aware of a personal data breach affecting personal data for which we are responsible, we will assess and respond to the incident in accordance with applicable law.

Where required by law, we will notify:

the relevant supervisory authority; and/or
affected individuals.

Where INS-CO acts as a data processor, we will notify the relevant customer or controller according to the applicable contractual and legal requirements.

—

19. Your GDPR Rights

Where GDPR applies, you may have the following rights.

19.1. Right of Access

You may request confirmation of whether we process your personal data and request a copy of relevant personal data.

19.2. Right to Rectification

You may request correction of inaccurate or incomplete personal data.

19.3. Right to Erasure

You may request deletion of your personal data where the legal requirements for erasure are satisfied.

This right is not absolute and may not apply where we are legally required to retain information.

19.4. Right to Restriction

You may request restriction of processing in circumstances provided by applicable law.

19.5. Right to Data Portability

Where applicable, you may request personal data in a structured, commonly used, and machine-readable format and request its transmission to another controller where legally required.

19.6. Right to Object

You may object to certain processing based on legitimate interests.

You may also object to direct marketing at any time.

19.7. Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

19.8. Rights Relating to Automated Decision-Making

Where applicable, you may have rights concerning solely automated decision-making and profiling that produces legal or similarly significant effects.

INS-CO does not intend to make decisions producing legal or similarly significant effects solely through automated processing unless legally permitted and appropriately disclosed.

—

20. How to Exercise Your Rights

To exercise your privacy rights, contact:

Email: [privacy@ins-co.com](mailto:privacy@ins-co.com)

Please provide enough information to allow us to identify your account and understand your request.

We may need to verify your identity before fulfilling certain requests in order to protect personal data and prevent unauthorised access.

We will respond within the period required by applicable law.

—

21. Right to Complain

If you believe that our processing of your personal data violates applicable data protection law, you may contact us first so that we can investigate your concern.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

If you are located in the European Union or EEA, you may contact the data protection authority responsible for your place of residence, place of work, or the location of the alleged infringement, where applicable.

—

22. Children’s Privacy

Our websites and business services are primarily intended for businesses, professionals, and adults.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal data to us without appropriate consent, please contact us at:

We will take reasonable steps to investigate and delete the information where appropriate and legally permissible.

—

23. Links to Other Websites

Our websites may contain links to third-party websites.

INS-CO is not responsible for the privacy practices, content, security, or policies of third-party websites.

We encourage you to review the privacy policy of each external website you visit.

—

24. Social Media

INS-CO may maintain profiles or links on third-party social media platforms.

Interactions with those platforms may be subject to the privacy policies and terms of the respective providers.

Where you interact with us through social media, the platform may independently process your personal data.

—

25. Business Customers

If you represent a company or organisation, you may provide us with personal data concerning employees, contractors, customers, or other individuals.

You are responsible for ensuring that you have an appropriate legal basis and the necessary permissions to provide such information to INS-CO.

Where INS-CO processes that information solely on your behalf, the parties may enter into a Data Processing Agreement.

—

26. Domain Registration and Registry Services

Where INS-CO provides domain registration or related services, certain personal or registration information may need to be submitted to:

domain registries;
registrars;
registry operators;
accreditation organisations;
abuse and security authorities;
other parties involved in domain administration.

The information required and the extent to which it is publicly available depends on the applicable domain extension, registry rules, applicable law, and privacy mechanisms offered by the relevant registry or registrar.

—

27. Abuse, Security and Legal Requests

To protect our network, infrastructure, customers, and the public, INS-CO may process information relating to suspected:

fraud;
abuse;
spam;
malware;
hacking attempts;
unauthorised access;
security incidents;
violations of service terms;
unlawful activity.

Where legally required or appropriate, information may be disclosed to competent authorities or relevant service providers.

—

28. Corporate Transactions

If INS-CO is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, personal data may be transferred as part of that transaction where legally permitted.

Any transfer will remain subject to applicable privacy and data protection requirements.

—

29. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

changes to our Products or Services;
changes in technology;
changes in applicable law;
changes in our data-processing practices;
security or operational developments.

The updated version will be published on this page with a revised “Last Updated” date.

Where legally required, we will provide additional notice of material changes.

—

30. No Sale of Personal Data

INS-CO does not sell personal data as a commercial commodity.

We may use third-party service providers to process personal data on our behalf for legitimate business purposes, including hosting, payment processing, analytics, communications, security, and customer support.

—

31. Data Protection by Design

Where reasonably appropriate, INS-CO seeks to incorporate privacy and security considerations into the design and operation of its systems and services.

This may include:

access limitation;
data minimisation;
appropriate retention periods;
security controls;
privacy-conscious configuration;
role-based access;
appropriate contractual safeguards.

—

32. Data Minimisation

We seek to collect and process only personal data that is reasonably necessary for the purposes described in this Privacy Policy or otherwise required by law.

You should avoid providing unnecessary personal information through forms, support tickets, emails, or other communication channels.

—

33. Accuracy of Personal Data

We rely on customers and users to provide accurate and current information.

You may request correction of inaccurate personal data using the contact information below.

—

34. Automated Processing and Profiling

INS-CO may use automated technical processes for purposes such as:

fraud detection;
spam detection;
security monitoring;
abuse prevention;
system monitoring;
service optimisation.

These processes are primarily intended to protect our systems and operate our services.

Where applicable law provides specific rights concerning automated decision-making or profiling, those rights remain unaffected.

—

35. Contact Us

If you have questions, concerns, complaints, or requests concerning this Privacy Policy or the processing of your personal data, contact us:

INS-CO

Legal Entity: [INSERT LEGAL ENTITY NAME]Registered Address: [INSERT FULL REGISTERED ADDRESS]Email: [privacy@ins-co.com](mailto:privacy@ins-co.com)
Website: https://ins-co.com/

For data protection requests, please use:

—

36. Effective Date

This Privacy Policy is effective from:

19 September 2026

and was last updated on:

19 September 2026

—

Summary of Your Privacy Rights

Where applicable, you may have the right to:

access your personal data;
correct inaccurate information;
request deletion;
restrict processing;
object to certain processing;
receive portable data;
withdraw consent;
object to direct marketing;
lodge a complaint with a data protection authority.

To exercise your rights, contact:

—

© 2026 INS-CO. All rights reserved.