Cloud hosting is a way of running a website on computing power drawn from a large pool of connected servers, rather than on one fixed machine. You can add or remove capacity as demand changes, and many cloud services charge for what you actually use rather than a flat monthly fee.
How cloud hosting works
A cloud provider owns huge data centres full of servers and divides that capacity into virtual machines, databases, storage and other services that customers rent on demand. If your site needs more power, you can move it to a bigger virtual machine, or run several copies side by side behind a load balancer. That second approach, called horizontal scaling, also means one failed machine need not take the site down.
You will meet cloud hosting in three broad forms:
- Raw infrastructure from Amazon Web Services, Google Cloud or Microsoft Azure. Very flexible, but someone must set up and maintain the server, its security and its backups.
- Managed hosting built on the cloud. Many managed WordPress and ecommerce hosts run on the big providers and handle the server work for you at a predictable price.
- Platform services such as static site hosting or serverless functions, where you never see a server at all.
Be aware that “cloud” is also a marketing label. Some budget plans sold as cloud hosting are ordinary shared hosting with a new name and none of the scaling.
Why it matters
For a business with busy periods, such as a ticketing site, a seasonal shop or a firm running national TV or radio campaigns, cloud hosting can absorb spikes that would overwhelm a single server. For a small brochure site, a good managed plan usually gives the benefit without the complexity.
Location is the UK-specific point. At the time of writing (October 2026), AWS, Google Cloud and Microsoft Azure all run regions in London, and Azure has a second UK region in Cardiff. A London region puts your server close to UK visitors, which shortens response times, and keeps stored data in the UK.
That last point helps with UK GDPR, but it does not settle it. Your hosting provider is a data processor, so you need a data processing agreement with it. If personal data is transferred outside the UK, for example because the provider’s support staff or sub-processors are abroad, that transfer needs a legal basis, such as UK adequacy regulations, the UK extension to the EU-US Data Privacy Framework for US companies that have signed up to it, or the ICO’s International Data Transfer Agreement. Read the provider’s data processing terms rather than assuming the region choice covers everything.
Common mistakes
- Choosing raw cloud infrastructure with nobody responsible for security updates and monitoring.
- Leaving the default region, often in the United States, when your visitors and data are in the UK.
- Setting no budget alerts, then receiving a large bill after a bot attack or a forgotten test server.
- Assuming the cloud means automatic backups. Many services leave backups for you to configure.
- Moving to new hosting without a plan for DNS, redirects and testing, and losing visibility for weeks.
How to act on it
Decide first who will look after the server. If you have no developer on call, choose a managed host and ask which cloud provider and region it uses. If you go direct to a cloud provider, pick a UK region, set spending alerts on day one and switch on automated backups you have actually tested restoring.
Record the provider in your privacy notice and data processing records, and keep a copy of its data processing agreement. When the move itself comes, treat it as a migration: lower DNS TTLs, test the new server on a temporary address, then switch. I handle that sequence as part of website migration SEO, so search visibility survives the change of host.