Privacy Policy

1. Introduction

Welcome to GlobalHostia. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how GlobalHostia ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our web hosting services, dedicated servers, VPS servers, domain registration, SSL certificates, and other web services (collectively, the "Services").

This policy applies globally and complies with applicable data protection regulations including the EU General Data Protection Regulation (GDPR), UK GDPR, UAE Data Protection Law, Saudi Arabia Personal Data Protection Law (PDPL), Markets in Crypto-Assets Regulation (MiCA) where applicable, India's Digital Personal Data Protection Act (DPDPA), and other international privacy frameworks.

If you have any questions or concerns about this policy or our data practices, please contact us at support@globalhostia.com.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when registering for our Services:

• Account Information: Name, email address, phone number, company name, billing address
• Payment Information: Credit/debit card details, billing information, payment method preferences (processed securely through third-party payment processors)
• Domain Registration Data: Domain contact information (registrant, administrative, technical, and billing contacts) as required by ICANN and domain registries
• Identity Verification: Government-issued ID, business registration documents (when required for compliance or high-value services)
• Communication Data: Support tickets, live chat messages, emails, and any other correspondence with our team

2.2 Information Automatically Collected

When you access our Services, we automatically collect certain information:

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, referral URLs, access times and dates
• Server Logs: Access logs, error logs, bandwidth usage, resource consumption metrics
• Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, pixel tags (see Section 8 for details)

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions
• Fraud prevention and security service providers
• Domain registries and registrars
• Marketing and analytics partners
• Public databases and WHOIS information

3. How We Use Your Information

We process your personal information for the following purposes:

3.1 Service Delivery and Account Management

• Provision and management of hosting services, servers, and domains
• Processing payments and managing billing cycles
• Account creation, authentication, and security
• Customer support and technical assistance
• Service upgrades, renewals, and modifications

3.2 Legal and Regulatory Compliance

• Compliance with ICANN domain registration requirements
• Anti-money laundering (AML) and know-your-customer (KYC) obligations
• Tax reporting and financial record-keeping
• Response to legal requests, court orders, and regulatory inquiries
• Enforcement of our Terms of Service and Acceptable Use Policy

3.3 Security and Fraud Prevention

• Detection and prevention of fraudulent transactions
• Monitoring for security threats, abuse, and unauthorized access
• Investigation of Terms of Service violations
• Protection of our infrastructure and customer data

3.4 Business Operations and Improvement

• Analytics to improve service quality and user experience
• Development of new features and services
• Performance monitoring and capacity planning
• Market research and customer satisfaction surveys

3.5 Marketing and Communications (With Your Consent)

• Sending promotional emails about new services, features, and special offers
• Service-related notifications and important updates
• Newsletter subscriptions (you may opt-out at any time)
• Targeted advertising based on your preferences

4. Legal Basis for Processing (GDPR & International Compliance)

Under GDPR and similar regulations, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you (service delivery, billing, support)
• Legal Obligation: Compliance with laws, regulations, and legal processes (ICANN requirements, tax laws, AML/KYC)
• Legitimate Interests: Fraud prevention, security monitoring, business analytics, service improvement (balanced against your rights)
• Consent: Marketing communications, optional cookies, and other processing activities requiring explicit consent
• Vital Interests: Protection of your or another person's vital interests in emergency situations

5. Data Sharing and Disclosure

We may share your information with the following categories of recipients:

5.1 Service Providers and Processors

• Payment processors (Stripe, PayPal, and other payment gateways)
• Data center and infrastructure providers
• Email service providers and communication platforms
• Customer support and ticketing systems
• Analytics and monitoring services
• Security and fraud prevention services

5.2 Domain Registries and ICANN

For domain registration services, we are required to share registrant contact information with domain registries and make certain information publicly available through WHOIS databases, in accordance with ICANN policies. This may include name, organization, email address, phone number, and physical address.

5.3 Legal and Regulatory Authorities

We may disclose your information when required by law or in response to:

• Court orders, subpoenas, or legal processes
• Requests from law enforcement or government agencies
• National security or public safety requirements
• Regulatory investigations or inquiries

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any such change and provide information about your choices.

5.5 With Your Consent

We may share your information with third parties when you have provided explicit consent for such sharing.

6. International Data Transfers

GlobalHostia operates globally and may transfer your personal information to countries outside your country of residence, including countries that may not provide the same level of data protection as your home country.

When we transfer personal data from the European Economic Area (EEA), UK, or Switzerland to countries without an adequacy decision, we implement appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules where applicable
• Adherence to international data transfer frameworks and certifications
• Additional technical and organizational security measures

For MENA region customers, we comply with local data residency requirements where applicable and ensure appropriate legal mechanisms are in place for cross-border data transfers.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Active Account Data: Retained for the duration of your account relationship plus applicable legal requirements
• Billing and Transaction Records: Minimum 7 years for tax and accounting purposes (may vary by jurisdiction)
• Domain Registration Records: As required by ICANN policies and registry requirements (typically 2 years post-expiration)
• Communication Records: 3-5 years for customer service quality and dispute resolution
• Server Logs and Technical Data: 30-90 days unless needed for security investigations or legal compliance
• Marketing Data: Until you withdraw consent or we determine the data is no longer necessary

After the retention period expires, we will securely delete or anonymize your personal information. Some information may be retained in aggregated or anonymized form for analytical purposes.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience and collect usage information.

8.1 Types of Cookies We Use:

• Essential Cookies: Necessary for website functionality, authentication, and security (cannot be disabled)
• Performance Cookies: Collect anonymous analytics about site usage and performance
• Functional Cookies: Remember your preferences and personalize your experience
• Marketing Cookies: Track your browsing for targeted advertising (requires consent in certain jurisdictions)

8.2 Cookie Management:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit website functionality. Most browsers allow you to:

• View, delete, and block cookies
• Set preferences for specific websites
• Enable "Do Not Track" signals

For detailed information about cookies and how to manage them, visit www.allaboutcookies.org.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 GDPR Rights (EU/EEA/UK Residents):

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data (subject to legal exceptions)
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (without affecting lawfulness of prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 UAE & MENA Region Rights:

• Access and review your personal data
• Request correction of inaccurate information
• Request deletion (subject to legal and regulatory obligations)
• Object to processing for marketing purposes
• Request information about data processing activities

9.3 India DPDPA Rights:

• Right to access information about personal data processing
• Right to correction and erasure
• Right to data portability
• Right to withdraw consent
• Right to nominate another individual to exercise rights in case of death or incapacity

9.4 How to Exercise Your Rights:

To exercise any of these rights, please contact us at support@globalhostia.com with the subject line "Privacy Rights Request." We will respond to your request within the timeframe required by applicable law (typically 30 days for GDPR requests).

We may require identity verification to protect your information from unauthorized access. Please note that certain rights may be subject to legal limitations and exceptions.

10. Security Measures

We implement comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

Our Security Measures Include:

• Encryption: TLS/SSL encryption for data in transit; AES-256 encryption for sensitive data at rest
• Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA), least privilege principle
• Network Security: Firewalls, intrusion detection/prevention systems, DDoS protection
• Monitoring: 24/7 security monitoring, automated threat detection, regular security audits
• Physical Security: Secured data centers with biometric access controls and environmental monitoring
• Vendor Management: Due diligence and security assessments of third-party service providers
• Incident Response: Documented incident response procedures and breach notification protocols
• Employee Training: Regular security awareness training and confidentiality agreements

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to enhance our security posture.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority without undue delay (within 72 hours where required by GDPR)
• Notify affected individuals without undue delay if the breach poses a high risk
• Provide clear information about the nature of the breach, likely consequences, and mitigation measures
• Document all breaches and remediation actions taken

We maintain detailed incident response procedures to ensure prompt and effective handling of any security incidents.

12. Children's Privacy

Our Services are not intended for individuals under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without proper parental consent, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately at support@globalhostia.com.

13. Third-Party Links and Services

Our website and Services may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services you access through our platform. This Privacy Policy applies solely to information collected by GlobalHostia.

14. MiCA Compliance (Crypto-Assets)

Where our Services involve crypto-asset services subject to the EU Markets in Crypto-Assets Regulation (MiCA), we ensure compliance with applicable requirements including:

• Enhanced customer due diligence and KYC procedures
• Transaction monitoring and suspicious activity reporting
• Segregation and protection of client crypto-assets
• Transparent disclosure of fees and risks
• Secure custody arrangements for digital assets

Additional privacy measures apply to crypto-asset transactions to ensure confidentiality while maintaining regulatory compliance.

15. Marketing Communications and Opt-Out

With your consent, we may send you promotional emails about new services, special offers, and other information we think may interest you.

You can opt-out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us at support@globalhostia.com

Note: Opting out of marketing communications does not affect transactional emails related to your account, services, or legal obligations.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notifications for significant changes (where required by law)
• Displaying a prominent notice on our website or within our Services

Your continued use of our Services after the effective date of the revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this policy periodically.

17. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all legitimate requests within 30 days. If your request is particularly complex or you have made multiple requests, we may extend this period and will notify you accordingly.

18. Supervisory Authority Contact

If you are located in the EU/EEA or UK and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local supervisory authority:

• EU/EEA: Contact your national Data Protection Authority (find your DPA)
• UK: Information Commissioner's Office (ICO) - ico.org.uk
• UAE: UAE Data Office - For data protection matters in the UAE
• Saudi Arabia: Saudi Data & AI Authority (SDAIA) - For PDPL compliance matters