Acceptable use

Version 1.0 · 23 August 2026

This Policy applies where CONFLUXUS LTD provides you with hosting, domain management, email or any other service running on infrastructure we obtain from a provider. It forms Schedule 4 to our Master Services Agreement.

It applies to you, to anyone you allow to use the services, and to anyone using your site whether you authorised them or not. You are responsible for everything on your services — including anything your own customers or visitors upload.

You must not use our services to store, publish, send or link to:

• Anything unlawful under the law of England and Wales, or unlawful where it is targeted or read.
• Material infringing someone else’s intellectual property — pirated software, films, music, books, fonts, images or copied website content.
• Content that is defamatory or harassing, or that breaches a court order.
• Obscene material under the Obscene Publications Act 1959, or extreme pornography under section 63 of the Criminal Justice and Immigration Act 2008.
• Anything inciting violence, terrorism, or racial or religious hatred.
• Personal data you have no lawful basis to publish.

Absolutely prohibited, with no exception and no notice period. Where we become aware of such material we remove it immediately, preserve evidence, suspend the account, and report it to the Internet Watch Foundation and to law enforcement. No warning is given and no appeal applies before removal.

• Malware, viruses, ransomware or any code intended to damage or gain unauthorised access to a system.
• Phishing pages or anything designed to trick people into giving up passwords, card details or personal information.
• Attempting to access any system, network or account without authorisation.
• Scanning or testing systems you do not own, or ours without our written consent.
• Denial of service attacks, or taking part in a botnet.
• Open mail relays, open proxies, or uncontrolled anonymising services.

• No unsolicited bulk email. Marketing sent from our services must comply with UK GDPR and the Privacy and Electronic Communications Regulations 2003 — a lawful basis, a genuine opt-out and an identifiable sender.
• No purchased, scraped or rented mailing lists.
• No forged headers, spoofed sending domains or disguised message origins.
• Mailing lists need confirmed opt-in and a working unsubscribe.

Spam is not only a legal problem. It gets shared sending addresses blocklisted, which stops other clients’ email being delivered — which is why we treat it as seriously as malware.

• No cryptocurrency mining.
• No deliberately consuming so much processing power, memory, storage or bandwidth that other clients on shared infrastructure are affected.
• Hosting is for running your site or application — not as a file store, backup target or content distribution endpoint.
• No public file-sharing services, torrent trackers or streaming platforms.

Normally we talk to you first. Where a problem is not urgent we will contact you, explain it, and give you a reasonable period — usually 48 hours — to put it right.

We may act immediately and without notice where we reasonably believe content is unlawful, there is an active security threat such as malware or a live phishing page, other clients’ service is at risk, our provider requires it, or we are required to act by law or a court order.

Depending on what is proportionate we may remove the specific content, suspend the affected site, suspend your services, or end the agreement. We will always take the narrowest step that solves the problem — one page rather than a site, one site rather than an account — and we will tell you what we did and why as soon as we can.

Your data is never held hostage. A suspension does not affect your right to an export of your own content under clause 8.5 of the Master Services Agreement.

To report content you believe breaches this Policy or the law, email abuse@confluxus.co.uk. How we handle reports is set out in our Abuse and Takedown Procedure.

If you find a security problem on your own site — a compromise, a leaked password, a file you do not recognise — tell us straight away. We would far rather help you fix it quietly than discover it through a blocklist.

We may update this Policy where the law changes, where our providers change their terms, or where a new kind of abuse appears. We give 30 days’ notice of any change that materially affects you, except where a change is required immediately by law or by a provider. Previous versions are available on request.