Privacy Policy

1.Who this applies to

This policy applies to anyone who interacts with our website, our hosting services, our billing system, or our support channels. It covers visitors, prospective customers, active customers, and people listed as technical or billing contacts on a customer's account.

2.What we collect

2.1 Information you give us directly

• Account details — your name, email address, phone number, postal address, and a password you choose. We need these to identify you and to send invoices and service notifications.
• Tax / billing identifiers — CNIC or NTN if you ask us for a tax-compliant invoice, or a company name and address for business invoices.
• Support correspondence — the contents of emails, contact-form submissions, WhatsApp messages, and tickets you send us. We keep these so we can refer back when troubleshooting recurring issues.
• Content you host — files, databases, and email you store on our servers. We don't read or scan this for marketing purposes. See §9 (Security) for how it's protected.

2.2 Information we collect automatically

• Server logs — IP addresses, request URLs, user-agent strings, and timestamps. These are written by the web server (LiteSpeed) and the cPanel/WHM stack and are used for security, debugging, and abuse investigations.
• Authentication logs — successful and failed cPanel / billing-area login attempts, with IP. Used to detect brute-force attempts and notify you of suspicious activity.
• Analytics — if we enable analytics, we collect anonymised page-view data (no cross-site tracking, no advertising cookies). See §6 (Cookies).

2.3 Information we receive from third parties

• Payment confirmations from PayFast, Easypaisa, JazzCash, and our bank — transaction IDs, amounts, and status. We never receive your full card number, CVV, or PIN.
• Domain registration data from registrars when you register a domain through us — the WHOIS contact you supplied.

3.How we use it

• To create and manage your hosting account.
• To process payments and issue invoices.
• To send service notifications (renewal reminders, maintenance windows, security alerts, account suspension warnings).
• To respond to support requests.
• To investigate abuse, fraud, and security incidents on our network.
• To comply with applicable law — for example, lawful requests from regulators or law-enforcement bodies acting under valid authority.

We do not use your information to:

• Sell or rent it to data brokers, advertisers, or any third party.
• Build behavioural advertising profiles.
• Send marketing email to addresses we collected for billing or support purposes (you'd have to opt in separately).

4.Who we share it with

We share the minimum amount of data needed, and only with parties listed below:

We do not transfer your data to advertisers or marketing networks. We do not allow third parties to use it for their own purposes.

5.Payments & PayFast

When you pay by card or wallet, you're redirected to PayFast's hosted checkout. Your card number, CVV, and OTP are entered on PayFast's page — we never see them and they never touch our server. We receive a transaction ID, the amount, and the success/failure status.

For bank transfers, Easypaisa, and JazzCash, you upload a screenshot or paste a transaction reference. Our staff verify the amount against the bank statement and mark the invoice paid. The screenshot is stored in our billing system and retained as part of your invoice history.

6.Cookies

We use only functional cookies, kept to a minimum:

• Session cookies — to keep you logged into the client area or admin panel. Expire when you close the browser, or after a few hours of inactivity.
• WordPress cookies — standard cookies for comment forms and admin sessions.
• CSRF tokens — security tokens to protect form submissions.

We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking. If we add analytics in future, we'll update this policy and use a privacy-respecting option (e.g. self-hosted, IP-anonymised).

7.How long we keep data

• Active accounts — for as long as your service is active.
• Closed accounts — basic account & invoice records kept for 7 years to meet tax record-keeping rules.
• Hosting content — deleted within 30 days of account termination, except for the most recent JetBackup snapshot which is purged on its normal rotation (up to 30 days).
• Server & auth logs — rotated and deleted within 90 days unless retained for an open security incident.
• Support tickets & emails — retained as long as the account exists, then 12 months after closure.

8.Your rights

You can ask us to:

• Show you what we hold about you.
• Correct anything that's wrong.
• Delete your account and associated data (subject to the 7-year invoice retention above).
• Export your hosted content as a cPanel backup.
• Stop sending you any optional marketing email (transactional emails like invoices and renewal reminders aren't optional while your account is active).

Email [email protected] from your account email address. We'll respond within 14 days for standard requests.

9.Security

• cPanel passwords and admin-set credentials are encrypted at rest using AES-256-GCM.
• All traffic to our website, client area, and cPanel is forced to HTTPS.
• Each hosting account is isolated under CloudLinux with its own CPU, RAM, and process limits — one account cannot read another's files.
• Daily off-site JetBackup snapshots, retained for up to 30 days.
• Brute-force protection at the cPanel and SSH layers.

No system is perfectly secure. If we ever suffer a breach that affects your data, we'll notify you within 72 hours of confirming it, with what we know and what you should do.

10.Children

Our services aren't directed at children under 18. We don't knowingly collect data from minors. If you believe a child has signed up, contact us and we'll delete the account.

11.Changes to this policy

We may update this policy as our business or the law changes. The “Last updated” date at the top reflects the most recent revision. For material changes, we'll email active customers at the address on file at least 14 days before the change takes effect.

12.Contact us