Privacy policy

1. Introduction

Welcome to GlobalHostia. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how GlobalHostia ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our web hosting services, dedicated servers, VPS servers, domain registration, SSL certificates, and other web services (collectively, the "Services").

This policy applies globally and complies with applicable data protection regulations including the EU General Data Protection Regulation (GDPR), UK GDPR, UAE Data Protection Law, Saudi Arabia Personal Data Protection Law (PDPL), Markets in Crypto-Assets Regulation (MiCA) where applicable, India's Digital Personal Data Protection Act (DPDPA), and other international privacy frameworks.

If you have any questions or concerns about this policy or our data practices, please contact us at support@globalhostia.com.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when registering for our Services:

Account Information: Name, email address, phone number, company name, billing address
Payment Information: Credit/debit card details, billing information, payment method preferences (processed securely through third-party payment processors)
Domain Registration Data: Domain contact information (registrant, administrative, technical, and billing contacts) as required by ICANN and domain registries
Identity Verification: Government-issued ID, business registration documents (when required for compliance or high-value services)
Communication Data: Support tickets, live chat messages, emails, and any other correspondence with our team

2.2 Information Automatically Collected

When you access our Services, we automatically collect certain information:

Technical Data: IP address, browser type and version, operating system, device type, screen resolution
Usage Data: Pages visited, time spent on pages, click patterns, referral URLs, access times and dates
Server Logs: Access logs, error logs, bandwidth usage, resource consumption metrics
Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, pixel tags (see Section 8 for details)

2.3 Information from Third Parties

We may receive information about you from:

Payment processors and financial institutions
Fraud prevention and security service providers
Domain registries and registrars
Marketing and analytics partners
Public databases and WHOIS information

3. How We Use Your Information

We process your personal information for the following purposes:

3.1 Service Delivery and Account Management

Provision and management of hosting services, servers, and domains
Processing payments and managing billing cycles
Account creation, authentication, and security
Customer support and technical assistance
Service upgrades, renewals, and modifications

3.2 Legal and Regulatory Compliance

Compliance with ICANN domain registration requirements
Anti-money laundering (AML) and know-your-customer (KYC) obligations
Tax reporting and financial record-keeping
Response to legal requests, court orders, and regulatory inquiries
Enforcement of our Terms of Service and Acceptable Use Policy

3.3 Security and Fraud Prevention

Detection and prevention of fraudulent transactions
Monitoring for security threats, abuse, and unauthorized access
Investigation of Terms of Service violations
Protection of our infrastructure and customer data

3.4 Business Operations and Improvement

Analytics to improve service quality and user experience
Development of new features and services
Performance monitoring and capacity planning
Market research and customer satisfaction surveys

Sending promotional emails about new services, features, and special offers
Service-related notifications and important updates
Newsletter subscriptions (you may opt-out at any time)
Targeted advertising based on your preferences

Under GDPR and similar regulations, we process your personal data based on the following legal grounds:

Contractual Necessity: Processing necessary to perform our contract with you (service delivery, billing, support)
Legal Obligation: Compliance with laws, regulations, and legal processes (ICANN requirements, tax laws, AML/KYC)
Legitimate Interests: Fraud prevention, security monitoring, business analytics, service improvement (balanced against your rights)
Consent: Marketing communications, optional cookies, and other processing activities requiring explicit consent
Vital Interests: Protection of your or another person's vital interests in emergency situations

We may share your information with the following categories of recipients:

5.1 Service Providers and Processors

Payment processors (Stripe, PayPal, and other payment gateways)
Data center and infrastructure providers
Email service providers and communication platforms
Customer support and ticketing systems
Analytics and monitoring services
Security and fraud prevention services

5.2 Domain Registries and ICANN

For domain registration services, we are required to share registrant contact information with domain registries and make certain information publicly available through WHOIS databases, in accordance with ICANN policies. This may include name, organization, email address, phone number, and physical address.

5.3 Legal and Regulatory Authorities

We may disclose your information when required by law or in response to:

Court orders, subpoenas, or legal processes
Requests from law enforcement or government agencies
National security or public safety requirements
Regulatory investigations or inquiries

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any such change and provide information about your choices.

We may share your information with third parties when you have provided explicit consent for such sharing.

6. International Data Transfers

GlobalHostia operates globally and may transfer your personal information to countries outside your country of residence, including countries that may not provide the same level of data protection as your home country.

When we transfer personal data from the European Economic Area (EEA), UK, or Switzerland to countries without an adequacy decision, we implement appropriate safeguards such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Binding Corporate Rules where applicable
Adherence to international data transfer frameworks and certifications
Additional technical and organizational security measures

For MENA region customers, we comply with local data residency requirements where applicable and ensure appropriate legal mechanisms are in place for cross-border data transfers.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

Active Account Data: Retained for the duration of your account relationship plus applicable legal requirements
Billing and Transaction Records: Minimum 7 years for tax and accounting purposes (may vary by jurisdiction)
Domain Registration Records: As required by ICANN policies and registry requirements (typically 2 years post-expiration)
Communication Records: 3-5 years for customer service quality and dispute resolution
Server Logs and Technical Data: 30-90 days unless needed for security investigations or legal compliance
Marketing Data: Until you withdraw consent or we determine the data is no longer necessary

After the retention period expires, we will securely delete or anonymize your personal information. Some information may be retained in aggregated or anonymized form for analytical purposes.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience and collect usage information.

8.1 Types of Cookies We Use:

Essential Cookies: Necessary for website functionality, authentication, and security (cannot be disabled)
Performance Cookies: Collect anonymous analytics about site usage and performance
Functional Cookies: Remember your preferences and personalize your experience
Marketing Cookies: Track your browsing for targeted advertising (requires consent in certain jurisdictions)

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit website functionality. Most browsers allow you to:

View, delete, and block cookies
Set preferences for specific websites
Enable "Do Not Track" signals

For detailed information about cookies and how to manage them, visit www.allaboutcookies.org.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Right of Access: Request copies of your personal data
Right to Rectification: Correct inaccurate or incomplete information
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data (subject to legal exceptions)
Right to Restriction: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time (without affecting lawfulness of prior processing)
Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 UAE & MENA Region Rights:

Access and review your personal data
Request correction of inaccurate information
Request deletion (subject to legal and regulatory obligations)
Object to processing for marketing purposes
Request information about data processing activities

9.3 India DPDPA Rights:

Right to access information about personal data processing
Right to correction and erasure
Right to data portability
Right to withdraw consent
Right to nominate another individual to exercise rights in case of death or incapacity

9.4 How to Exercise Your Rights:

To exercise any of these rights, please contact us at support@globalhostia.com with the subject line "Privacy Rights Request." We will respond to your request within the timeframe required by applicable law (typically 30 days for GDPR requests).

We may require identity verification to protect your information from unauthorized access. Please note that certain rights may be subject to legal limitations and exceptions.

10. Security Measures

We implement comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

Our Security Measures Include:

Encryption: TLS/SSL encryption for data in transit; AES-256 encryption for sensitive data at rest
Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA), least privilege principle
Network Security: Firewalls, intrusion detection/prevention systems, DDoS protection
Monitoring: 24/7 security monitoring, automated threat detection, regular security audits
Physical Security: Secured data centers with biometric access controls and environmental monitoring
Vendor Management: Due diligence and security assessments of third-party service providers
Incident Response: Documented incident response procedures and breach notification protocols
Employee Training: Regular security awareness training and confidentiality agreements

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to enhance our security posture.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

Notify the relevant supervisory authority without undue delay (within 72 hours where required by GDPR)
Notify affected individuals without undue delay if the breach poses a high risk
Provide clear information about the nature of the breach, likely consequences, and mitigation measures
Document all breaches and remediation actions taken

We maintain detailed incident response procedures to ensure prompt and effective handling of any security incidents.

12. Children's Privacy

Our Services are not intended for individuals under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without proper parental consent, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately at support@globalhostia.com.

13. Third-Party Links and Services

Our website and Services may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services you access through our platform. This Privacy Policy applies solely to information collected by GlobalHostia.

14. MiCA Compliance (Crypto-Assets)

Where our Services involve crypto-asset services subject to the EU Markets in Crypto-Assets Regulation (MiCA), we ensure compliance with applicable requirements including:

Enhanced customer due diligence and KYC procedures
Transaction monitoring and suspicious activity reporting
Segregation and protection of client crypto-assets
Transparent disclosure of fees and risks
Secure custody arrangements for digital assets

Additional privacy measures apply to crypto-asset transactions to ensure confidentiality while maintaining regulatory compliance.

15. Marketing Communications and Opt-Out

With your consent, we may send you promotional emails about new services, special offers, and other information we think may interest you.

You can opt-out of marketing communications at any time by:

Note: Opting out of marketing communications does not affect transactional emails related to your account, services, or legal obligations.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on our website with a new "Last Updated" date
Sending email notifications for significant changes (where required by law)
Displaying a prominent notice on our website or within our Services

Your continued use of our Services after the effective date of the revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this policy periodically.

17. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@globalhostia.com

Data Protection Officer: dpo@globalhostia.com

Privacy Rights Requests: privacy@globalhostia.com

We aim to respond to all legitimate requests within 30 days. If your request is particularly complex or you have made multiple requests, we may extend this period and will notify you accordingly.

18. Supervisory Authority Contact

If you are located in the EU/EEA or UK and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local supervisory authority:

EU/EEA: Contact your national Data Protection Authority (find your DPA)
UK: Information Commissioner's Office (ICO) - ico.org.uk
UAE: UAE Data Office - For data protection matters in the UAE
Saudi Arabia: Saudi Data & AI Authority (SDAIA) - For PDPL compliance matters

Your Privacy Matters: GlobalHostia is committed to transparency and protecting your personal information. We continuously review and enhance our privacy practices to meet the highest international standards. For questions or to exercise your privacy rights, contact us at support@globalhostia.com.