Privacy Policy

This Privacy Policy explains how Cheapest Proxies ("we", "us", "our") collects, uses, shares and protects your personal information when you visit cheapest-proxies.com, create an account, or use our proxy services (the "Service"). We are committed to data minimisation: we collect only what we genuinely need to deliver, secure and bill for the Service. Please read this policy together with our Terms of Service.

Data controller: Bohzo Ltd, The Workspace Basildon, 7 High Pavement, Basildon, England, SS14 1EA The data controller responsible for your personal information is Bohzo Ltd, contactable at info@cheapest-proxies.com.

1. Introduction & scope

This policy applies to personal information we process about visitors to our website and registered customers of the Service. It does not apply to third-party websites, applications or services you reach through our proxies, which operate under their own privacy policies and over which we have no control. By using the Service, you acknowledge the practices described here. Where local law grants you specific rights (for example under the EU/UK General Data Protection Regulation ("GDPR") or the California Consumer Privacy Act ("CCPA"/CPRA)), those rights are described in Section 12.

2. Who we are — data controller & contact

For the purposes of applicable data protection law, Cheapest Proxies, operator of cheapest-proxies.com, is the data controller responsible for your personal information. If you have any questions about this policy or how we handle your data, you can reach our privacy team at info@cheapest-proxies.com or through our contact page. Where we act as a processor on behalf of a business customer, that customer is the controller and their own privacy policy governs.

3. Information we collect

We collect the following categories of personal information, in each case limited to what is necessary:

• Account data: your name (or chosen username), email address and a securely hashed password. We never store your password in plain text.
• Billing & payment data: order details, plan and quantity, transaction amounts, currency, invoice history and the last four digits and card brand returned to us by our payment processor. Full card numbers and security codes are entered directly with Stripe and are never transmitted to or stored on our servers.
• Technical & usage data: the IP address and browser user-agent recorded at signup, login and key account actions, kept in standard web-server and security logs for a limited period (see Section 10). We also record aggregate bandwidth and connection counts strictly for billing and capacity planning.
• Support communications: the content of messages you send us via the contact form, support tickets or email, together with any information you choose to include.
• Cookies & similar technologies: a strictly necessary session identifier, and — only with your consent — limited analytics data (see Section 7).

4. What we do NOT collect or log

Privacy is central to how the Service is designed. We do not log, inspect, store or sell the proxy traffic you generate. Specifically, we keep no record of:

• the destination websites, hostnames or IP addresses you connect to;
• the URLs, search queries or pages you request;
• the content of the data that passes through our proxies.

Bandwidth is measured only in aggregate for billing and abuse-prevention purposes. We have no log that ties an individual customer to the specific sites they visit through the Service. We do not knowingly collect special-category (sensitive) personal data, and we ask that you do not submit it to us.

5. How we use your information

We use the personal information described above to:

• create and administer your account and authenticate your logins;
• deliver, configure, provision and bill for the Service you purchased;
• process payments, issue invoices and handle refunds and chargebacks through our payment processor;
• send transactional and service messages such as receipts, expiry reminders and security notices (you can opt out of non-essential messages in your dashboard);
• provide customer support and respond to your enquiries;
• detect, investigate and prevent fraud, abuse, network misuse and security incidents;
• maintain, improve and secure our website and infrastructure; and
• comply with our legal, tax and accounting obligations and enforce our Terms of Service.

6. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract: to create your account, provide the Service you ordered and process your payments.
• Legitimate interests: to secure our network, prevent fraud and abuse, keep basic security logs, and operate and improve our business — balanced against your rights and freedoms.
• Consent: for any optional analytics cookies and for any non-essential marketing communications. You may withdraw consent at any time without affecting prior processing.
• Legal obligation: to retain billing and tax records and to respond to lawful requests from competent authorities.

7. Cookies & similar technologies

Cookies are small text files stored on your device. We use them sparingly and group them into two categories:

Strictly necessary cookies

We set a single essential session cookie (cps_sess) to keep you logged in and to protect against cross-site request forgery. This cookie is required for the Service to function and cannot be switched off through our consent banner. It does not track you across other websites.

Analytics & optional cookies

We do not use third-party advertising or cross-site tracking cookies. Any optional analytics cookies, if present, are loaded only after you give consent through our cookie banner, are described there, and can be declined or withdrawn at any time without affecting your ability to use the Service. You can also manage or delete cookies through your browser settings.

8. Third parties & sub-processors

We share the minimum personal information necessary with a small number of trusted service providers ("sub-processors") who act on our instructions under appropriate contractual safeguards:

• Stripe — our PCI-DSS-compliant payment processor, which handles card data and processes your payments.
• Our email / SMTP provider — delivery of transactional, account and support emails.
• Our proxy infrastructure suppliers — provisioning of the ethically sourced IP addresses and network capacity that power the Service.

We may also disclose personal information where required to comply with the law, enforce our agreements, or protect the rights, safety and property of our users or others. In the event of a merger, acquisition or asset sale, personal data may be transferred subject to this policy. We do not sell or rent your personal information to anyone, and we do not share it for cross-context behavioural advertising.

9. International data transfers

We and our sub-processors may process personal information in countries outside your own, including outside the European Economic Area or the United Kingdom. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum where relevant), or transfers to jurisdictions recognised as providing an adequate level of protection. You may request more information about these safeguards using the contact details below.

10. Data retention

We keep personal information only for as long as necessary for the purposes set out in this policy:

• Account data is retained for as long as your account is active.
• Billing & transaction records are retained for the period required to meet our legal, tax and accounting obligations (typically several years under applicable law).
• Technical & security logs (such as IP and user-agent records) are kept for a limited period and then deleted or anonymised.

When you close or delete your account, we delete or anonymise your personal data within 30 days, except where we are legally required to retain certain records or need them to resolve disputes and enforce our agreements.

11. Data security

We take reasonable technical and organisational measures to protect your information. Passwords are stored using strong one-way hashing, connections to our website are encrypted in transit (HTTPS/TLS), payments are handled by a PCI-DSS-compliant processor, and access to personal data is restricted to authorised personnel on a need-to-know basis. We monitor for unauthorised access and apply security updates. No system can be guaranteed perfectly secure, and you are responsible for keeping your account credentials confidential.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights in respect of your personal information:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data, subject to legal retention requirements.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

Under the CCPA/CPRA, California residents also have the right to know what personal information we collect and how we use and disclose it, the right to delete and correct it, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information, so there is nothing to opt out of, and we will not discriminate against you for exercising any of your rights.

You can manage much of your information directly from your dashboard. To exercise any other right, contact us at info@cheapest-proxies.com. We may need to verify your identity before responding, and we will reply within the timeframe required by applicable law.

13. Children’s privacy

The Service is intended for adults and is not directed at children. We do not knowingly collect personal information from anyone under the age of 18 (or under 16 where that is the applicable age of digital consent). If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

14. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We may use limited automated checks to help detect fraud, abuse or payment risk, but these are reviewed by our team and do not replace human judgement in any decision that materially affects you.

15. Data breach notification

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required by law, affected individuals without undue delay. We maintain procedures to detect, investigate, contain and remediate security incidents.

16. Changes to this policy & how to contact us

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or through the Service. We encourage you to review this page periodically.

If you have any questions, concerns or complaints about this policy or our handling of your personal data, please contact us at info@cheapest-proxies.com or via our contact page. We will do our best to resolve your concern. If you are in the EEA or the UK and remain dissatisfied, you also have the right to lodge a complaint with your local data protection supervisory authority.