This explains what we collect, why we collect it and what we do with it. We keep it to the minimum we need to sell you a server and support it.
Who is responsible
RDP For Sale is responsible for the personal data described here. For any privacy question, email [email protected].
What we collect
- Account details. Name, email address, and the billing details needed to issue an invoice.
- Order records. What you bought, when, and what you paid.
- Support messages. What you send us and our replies.
- Technical logs. IP addresses, connection times and system events, kept for security and troubleshooting.
We do not see or store your card number. Card payments are handled entirely by our payment provider. Cryptocurrency payments are recorded as a transaction reference only.
We do not access the contents of your server except where we need to investigate a suspected breach, respond to a security incident, or comply with a legal obligation.
Why we use it, and on what basis
- To provide the service you bought — because we have a contract with you.
- To take payment and keep accounting records — contract, and our legal obligations.
- To keep the platform secure and prevent abuse — our legitimate interest in protecting the network and our other customers.
- To answer your support requests — contract.
We do not sell your data. We do not send marketing you did not ask for.
Who else sees your data
Only the suppliers we need to run the service: our payment providers, the datacentre partners hosting the country you chose, and the tools we use for email and support. Each is bound to protect it and use it only for us. We also disclose data where a court or competent authority legally requires it.
Where your data is held
Our servers run in the countries listed on the site, and our suppliers may process data outside your own country. Where data leaves the UK or the EEA, we rely on the safeguards the law requires for those transfers.
How long we keep it
- Account and order records: for as long as you are a customer, then as long as tax and accounting law requires.
- Support messages: normally two years.
- Technical and security logs: normally 90 days, longer if needed for an active investigation.
- Server data: deleted when the service ends, after the grace period described in our terms.
Keeping it safe
Access to customer records is limited to the people who need it. Connections to our systems are encrypted. No system is perfect, so if a breach affects you we will tell you and the relevant regulator within the time the law allows.
Cookies
This site stores one thing in your browser: whether you chose the light or dark theme. It is not used to track you and it is never sent to us. Our client area and checkout use the cookies they need to keep you signed in.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to object to our use of it. You can also ask for it in a portable form. Email [email protected] and we will respond within one month. Some data we must keep for legal reasons even after an account closes, and we will tell you if that applies.
If you are unhappy with how we have handled your data, you can complain to the data protection regulator in your country.
Children
The service is for people aged 18 and over. We do not knowingly collect data from children.
Changes
If we change this policy, the new version appears here with the date it changed. Material changes will be notified to account holders by email.