Privacy Policy
Effective 1 October 2026. This policy explains what personal data we collect, why, and what you can do about it.
Who is responsible for your data
[Company legal name], [Registered business address], is the controller of the personal data described in this policy. Questions and requests go to privacy@example.com.
For data you store on your own server, such as the details of your website visitors, you are the controller and we act as your processor under the Data Processing Agreement.
Data we collect
- Account details: name, email address, company name, postal address, phone number and tax number if you provide them.
- Billing details: invoices, payment status and the payment method type. Card and wallet details are handled by the payment provider and are not stored by us.
- Service data: the servers you order, their IP addresses, locations, resource usage and the operating system images you choose.
- Support data: messages you send us and our replies.
- Technical data: IP address, browser type and pages visited when you use the website and client area, recorded in server logs.
- Abuse data: reports we receive about a service and the evidence attached to them.
Why we use it
- To create your account, deliver the services you order and bill for them (performance of a contract).
- To keep the network secure, prevent fraud and investigate abuse (legitimate interests).
- To meet tax, accounting and law enforcement obligations (legal obligation).
- To send service notices such as maintenance, renewals and security alerts (performance of a contract).
- To send product news, only if you opt in, and you can opt out at any time (consent).
Who we share it with
We do not sell personal data. We share it only with providers who help us run the service, under contracts that require them to protect it, and with authorities where the law requires it.
- Payment providers, to process your payments
- Data center operators, for physical hosting of our hardware
- Email delivery providers, to send service and billing messages
- Professional advisers, such as accountants and lawyers
- Courts, regulators and law enforcement, where we are legally required
International transfers
Our servers operate in several countries. Where personal data leaves the European Economic Area or the United Kingdom, we rely on an adequacy decision or on standard contractual clauses approved by the relevant authority.
How long we keep it
- Account data: while your account is open, and up to 24 months after it closes, to handle follow up questions and disputes.
- Billing records: for the period tax law requires, which is commonly 6 to 10 years.
- Server logs: up to 90 days unless needed for a security investigation.
- Server contents: deleted when the service is terminated.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent at any time. Email privacy@example.com and we will respond within one month.
If you are in the EEA or the United Kingdom, you can also complain to your local data protection authority.
Security
We protect personal data with access controls, encrypted connections to the website and client area, and staff confidentiality obligations. No system is completely secure, so please use strong passwords and two factor authentication where available.
Cookies
The website uses only the storage it needs to work. Details are in the Cookie Policy.
Changes to this policy
We will post any update on this page with a new effective date and notify customers by email about significant changes.