Data processing terms

Last updated 3 October 2026.

Faraday Keynes Ltd trading as Astronomy Host. Company no. 07914968. 7 Rock Farm Mews, Front Street, Wheatley Hill, Durham, DH6 3NG.

Overview

Version: 3 October 2026 · This document forms part of the hosting agreement between Faraday Keynes Ltd trading as Astronomy Host (“we”, “us”) and the subscribing society (“you”, “Customer”, “society”).

Provider: Faraday Keynes Ltd trading as Astronomy Host (company no. 07914968), registered office 7 Rock Farm Mews, Front Street, Wheatley Hill, Durham, DH6 3NG. Registered in England and Wales. Billing: billing@astronomyhost.com · Support: support@astronomyhost.com · General: info@astronomyhost.com.

These terms apply where Faraday Keynes Ltd processes personal data on behalf of the society as processor. They supplement the Hosting terms and Privacy notice and are accepted by using the service.

1. Subject matter and duration

Subject matter: hosting and operation of the society website platform. Duration: the subscription term plus any export or deletion period in Hosting terms section 7.

2. Nature and purpose of processing

Storage, organisation, retrieval, display, transmission, and deletion of personal data submitted by the society or collected through society-configured features (forms, membership, gallery, shop, members portal, door check-in, and similar) solely to provide the contracted hosting service.

3. Types of data and data subjects

As determined by the society: typically names, contact details, photos, membership information, form responses, shop orders, ticket guest names, attendance records, and similar data about members, officers, volunteers, visitors, and customers.

4. Processor obligations

We will:

• process personal data only on documented instructions from the society (including configuration of the service and support requests), unless required by law — in which case we will inform the society where permitted;
• ensure personnel with access are bound by confidentiality;
• implement appropriate technical and organisational security measures;
• engage sub-processors under a general written authorisation from the society, provided we inform the society of intended changes, giving the society the opportunity to object on data-protection grounds. If the society objects and we cannot reasonably run the platform without that sub-processor (or a suitable alternative), we may end the hosting agreement on the notice in Hosting terms section 7;
• assist the society, where reasonably possible, with data subject requests and DPIAs, taking into account the nature of processing and information available to us. Help that the society can do itself in Administration or Backup is included. Custom extraction, log trawls, or work for a legal dispute or regulator beyond those tools may be charged at our quoted technical rate;
• delete or return personal data at end of service as set out in Hosting terms section 7, except where law requires retention;
• make available information reasonably necessary to demonstrate compliance. Audits are met in the first instance by written self-assessment or a platform security summary, no more than once per year on reasonable notice. Any on-site or deep technical audit is at the society’s expense, scoped in writing, under confidentiality, and must not expose other customers’ data;
• inform the society if, in our opinion, an instruction infringes the UK GDPR or other UK data protection laws.

5. Personal data breach

We will notify the society without undue delay after becoming aware of a personal data breach affecting society-controlled data, with information reasonably available to allow the society to meet its controller obligations. We will cooperate in investigation and mitigation.

6. Society instructions and liability

The society is responsible for the lawfulness of instructions and content. The society indemnifies us for claims arising from unlawful instructions or controller failures, as set out in Hosting terms section 9. Our liability as processor is subject to Hosting terms section 8.

7. Deletion and return

On termination, export options for settled accounts are as stated in Hosting terms. After the export window, we will delete society instance data from production systems within a reasonable period, subject to backup rotation and legal retention.