Privacy policy

Last updated: 2 July 2026

This policy explains how Longstone IT Limited collects, uses and looks after personal information when you use our website, contact us, book a call, ask for support, buy domain services or work with us.

We have written it in plain English because privacy information should be useful, not buried in legal language. If anything here is unclear, please contact us and we will be happy to help.

Who we are

Longstone IT Limited trades as Longstone IT. We are registered in England and Wales under company number 10081597. Our VAT number is GB246497275.

Registered office: Vantage Point House, Silverhills Road, Decoy Industrial Estate, Newton Abbot, Devon, TQ12 5ND.

Business address: The Shed, 12 Kenwith Drive, Kingsbridge, Devon, TQ7 1DU.

You can contact us by email at info@longstoneit.com or by phone on +44 (0)1548 800 008.

For personal information collected through this website, enquiries, domain sales and general client administration, Longstone IT Limited is usually the data controller. Where we provide IT services to a client and process personal information on that client’s behalf, we may act as a processor and the client’s own privacy information and service agreement will also apply.

Information we collect

We may collect and use:

• your name, business name, role and contact details;
• details you send through forms, email, phone calls, support requests or booking tools;
• information about the services you ask us about or receive from us;
• account, billing, domain, registrant, administrative, technical and support contact details where you use domain registration, transfer or management services;
• payment and transaction details, although full card details are handled by our payment provider rather than stored by us;
• basic website and device information, such as IP addressView in Glossarya technical address for a device or service, browser type, pages visited, dates, times and cookieView in Glossarya small file saved by a website in your browser choices;
• security and performance information from our website, hosting, firewallView in Glossarya control point for network traffic and Cloudflare logs;
• billing, contract and administration details where we work together.

Please only send us personal information that is relevant to your enquiry, domain order or the work we are doing together.

How we use your information

We use personal information to:

• respond to enquiries, support requests and booking requests;
• prepare quotes, proposals and recommendations;
• provide, manage and improve our IT services;
• process domain nameView in Glossarythe address people use to find you online searches, registrations, renewals, transfers, billing, account administration and support;
• keep our website, systems and clients secure;
• understand how the website and domain storefront are used and improve their content;
• send service messages, renewal notices, security notices and useful updates where this is allowed by law;
• meet legal, accounting, tax, registry, registrar and regulatory obligations;
• protect our rights, our clients and our business.

Our lawful bases may include legitimate interests, contract, steps before entering into a contract, legal obligation and consent. Where we rely on consent, you can withdraw it at any time.

Domain registration services

Our domain storefront at domains.longstoneit.com is used to search for, register, transfer, renew and manage domain names. Domain registration services are provided through OpenSRS/Tucows and may also involve relevant domain registries, ICANN, Nominet for .uk domains, payment providers such as Stripe, and other suppliers needed to complete the service.

When you buy or manage a domain, registrant and contact information may need to be checked, shared, transferred, retained or made available as required by registrar, registry, ICANN, Nominet or legal rules. Some domain data may be visible in public registration data services depending on the domain type, registry rules and privacy options available.

If you contact a domain support address such as support@domains-support.longstoneit.com, messages may be routed to our usual support mailbox so that the Longstone IT team can respond.

Cookies and similar technologies

Our website and domain storefront may use cookies and similar technologies. Some are necessary for the site to work properly, keep it secure, process forms, protect against spam or abuse, keep items in a domain cart, support checkout, remember privacy choices or deliver a service you have requested. These essential cookies do not normally require consent.

Where we use non-essential cookies, such as analytics or marketing cookies, we will ask for consent first where required. You can also control cookies through your browser settings. Blocking some cookies may affect how the website, forms, domain storefront, account area or checkout works.

More detail is available in our Cookie Policy.

Cloudflare and website security

We use Cloudflare to help deliver, protect and improve the website. Cloudflare may process technical information such as IP addresses, request data, traffic routing data, browser and device information, security events and similar logs. This helps with performance, availability, bot protection, abuse prevention and security monitoring.

Cloudflare may process information outside the UK. Where this happens, we expect appropriate safeguards to be used, such as Cloudflare’s data processing terms and recognised transfer mechanisms.

Who we share information with

We do not sell personal information. We only share it where there is a sensible reason to do so, such as with:

• trusted suppliers who help us run the website, hosting, email, forms, scheduling, security, consent management, CRMView in Glossarysoftware for managing customer relationships or business systems;
• OpenSRS/Tucows, domain registries, ICANN, Nominet and other domain infrastructure providers where needed for domain services;
• Stripe and other payment, invoicing or accounting providers;
• professional advisers, such as accountants, insurers or legal advisers;
• public authorities, regulators or law enforcement where we are legally required to do so;
• service partners where this is needed to deliver agreed work for a client.

Where suppliers process personal information for us, we expect them to protect it and only use it for the agreed purpose.

International transfers

Some suppliers may process personal information outside the UK. Where this happens, we will look for appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU standard contractual clauses, or another lawful transfer mechanism.

How long we keep information

We keep personal information only for as long as we need it. This depends on the type of information and why we collected it.

• Enquiries are kept for a reasonable period so we can respond properly and manage the relationship.
• Client, contract, domain, billing and tax records are kept for as long as needed for service delivery, accounting, legal, registrar, registry and tax purposes.
• Website security logs are usually kept for a limited period unless we need them to investigate an issue or protect the website.
• Cookie consent records are kept according to the settings of the consent tool in use.

When information is no longer needed, we will delete it, anonymise it or securely archive it where we have a valid reason to keep it.

Your rights

Under UK data protection law, you may have rights to:

• be informed about how your personal information is used;
• access a copy of your personal information;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information in certain circumstances;
• ask us to restrict how we use information in certain circumstances;
• object to certain uses of your information;
• ask for information to be transferred where data portability applies;
• withdraw consent where we rely on consent.

Some rights depend on the circumstances and may not apply every time. Domain registration rules may also require certain records to be retained or shared even if you ask for deletion. To make a request, contact us at info@longstoneit.com.

You also have the right to complain to the Information Commissioner’s Office. The ICO’s website is ico.org.uk.

Automated decision-making

We do not use website enquiry information to make solely automated decisions that have legal or similarly significant effects on people.

Changes to this policy

We may update this policy when our website, suppliers, services or legal requirements change. The latest version will always be available on this page.