Privacy Policy
Effective date: [EFFECTIVE DATE]
This policy explains what personal data [COMPANY LEGAL NAME], [ADDRESS], [COUNTRY] ("1onHost", "we") collects, why, and what rights you have. We are the controller of the personal data described here.
What we collect
- Account details: name, e-mail address, postal address, phone number, company and tax number if you give them.
- Billing data: invoices, payments and the payment method used. Card and PayPal details are handled by the payment provider; we do not store full card numbers.
- Service data: the services you order, their settings, server IP addresses, domain names and usage statistics (disk, bandwidth, licence check-ins).
- Support data: your tickets and our replies.
- Technical data: IP addresses, browser type, log-ins and security events (for example failed log-ins and two-factor authentication), API requests.
- Content you host with us: websites, e-mail and files on your services. We process it only to provide the service and do not look at it, except when needed for support you asked for, to investigate abuse, or when the law requires.
Why we use it (legal basis)
- To provide the services you ordered, bill you and support you (performance of our contract).
- To keep our services and your account secure, prevent fraud and abuse and fix problems (our legitimate interests).
- To meet legal duties such as accounting and tax records and lawful requests from authorities (legal obligation).
- To send you news or offers, only if you agreed; you can unsubscribe at any time (consent).
Who we share it with
- Payment providers (for example PayPal or Stripe) to process your payments.
- Data centres and infrastructure providers that run our servers.
- E-mail delivery providers that send our service e-mails.
- Professional advisers (accountants, lawyers) and authorities when the law requires it.
We do not sell your personal data. Our providers may process data outside your country; where needed we use appropriate safeguards such as standard contractual clauses.
How long we keep it
- Account and service data: while you are a customer and up to 12 months after your last service ends.
- Invoices and payment records: as long as accounting and tax law requires (often 7 to 10 years).
- Logs and security events: up to 12 months, unless needed to investigate abuse.
- Backups of hosted content: deleted on the normal backup rotation after the service ends.
Your rights
Depending on the law that applies to you, you can ask to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable format. You can withdraw consent at any time. Write to [CONTACT EMAIL]. You may also complain to your data protection authority.
Cookies
We use cookies that are needed to log you in, keep your cart and protect forms. We do not use advertising cookies. If we add analytics, we will ask for your consent where required.
Security
We protect data with encryption in transit, access controls, two-factor authentication for staff and regular updates. No system is perfectly secure; we will tell you and the authorities about a data breach when the law requires.
Changes
We may update this policy and will publish the new version here with its effective date. Important changes are announced by e-mail.
Contact
[COMPANY LEGAL NAME], [ADDRESS], [COUNTRY]
E-mail: [CONTACT EMAIL]