Privacy Policy

1. Data controller

IT-4You provides VPS hosting services and operates from Västerås, Sweden. For any privacy enquiry contact support@it-4you.com.

• Data controller: IT-4You
• Registered office: Säbygatan 3, 723 41 Västerås, Sweden
• Swedish organisation number (Skatteverket / Bolagsverket): 970225-3916
• VAT number: SE970225391601

2. Personal data we collect

• Account data: name, email address, and login credentials (passwords are stored only as salted hashes).
• Billing data: billing address and the metadata of payments processed by our payment provider (Stripe). We do not store full card numbers.
• Service data: VPS hostnames, region, IP addresses, and resource/usage records needed to operate your servers.
• Technical data: log entries, IP address, and security telemetry retained for fraud prevention and abuse detection.

3. Legal basis (GDPR Art. 6)

• Performance of a contract — to provide and bill the services you order.
• Legal obligation — tax, accounting, and sanctions-compliance requirements.
• Legitimate interests — security, fraud prevention, and service improvement.
• Consent — for non-essential cookies and optional communications, where applicable.

4. Cookies

We use strictly-necessary cookies for authentication and security (e.g. session and CSRF cookies), set with the Secure and SameSite attributes. Non-essential/analytics cookies, where used, are only set with your consent and can be declined without affecting core functionality.

5. Data security

All data in transit is encrypted with TLS (HTTPS). Credentials are stored as salted one-way hashes, and access to production systems is restricted and audited. Payment card data is handled entirely by our PCI-DSS-compliant payment processor and never stored on our servers.

6. Retention

We keep personal data only as long as needed to provide the service and to meet legal (e.g. accounting) obligations, after which it is deleted or anonymised.

7. International transfers & restricted regions

Data is processed within the EU/EEA where practicable. IT-4You does not provide services to sanctioned jurisdictions — see Restricted Jurisdictions.

8. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and may object to certain processing. To exercise these rights contact support@it-4you.com. You also have the right to lodge a complaint with the Swedish data-protection authority (Integritetsskyddsmyndigheten, IMY).

This policy reflects IT-4You’s registered company-identity details (data controller, registered office, Swedish organisation number and VAT, shown above) and is maintained for GDPR transparency.