As a provider of hosting services, Bundle Host is committed to protecting our clients' personal data and ensuring compliance with the UK General Data Protection Regulation (UK GDPR). This policy outlines our approach to the international transfer and storage of user data, specifically regarding data stored on servers located in Germany, managed by our data partner, Hetzner.

This policy applies to all personal data collected, processed, and stored by Bundle Host. By using our services, clients acknowledge and agree to the international transfer of their data in accordance with this policy.

The purpose of this document is to:

• Outline how Bundle Host manages and safeguards data when stored internationally
• Provide transparency regarding our compliance with UK GDPR requirements
• Inform users of their rights and our responsibilities regarding cross-border data transfers to the EU

To safeguard the integrity, confidentiality, and security of user data stored internationally, Bundle Host implements the following measures:

• Access Controls: Access to user data is restricted to authorized personnel only, with all access logged and monitored.
• Hetzner Audits: Regular security audits and assessments are conducted at Hetzner, information can be found at: Hetzner Certifications
• GDPR Compliance: Both our German and UK hosting partners are fully compliant with GDPR, ensuring data protection standards are met.
• GDPR Training: All staff and volunteers who have access to personal data are required to complete GDPR training.
• Stripe Security: Stripe uses advanced security measures and complies with industry standards, such as PCI DSS Level 1, to manage payment information securely.

Under UK GDPR, users have the following rights regarding their data:

• Right to Access: Users can request access to their personal data
• Right to Rectification: Users can request corrections to inaccuracies
• Right to Erasure: Users can request data deletion where applicable
• Right to Restrict Processing: Users can request limited processing
• Right to Data Portability: Users can obtain their data in a structured format
• Right to Object: Users can object to data processing where allowed

To exercise these rights, contact us at hello@bundlegroup.gg

For questions or concerns regarding this policy, or to exercise your data rights under UK GDPR, please contact us at: