Privacy Policy

1. Introduction

XVHost ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit xvhost.com or use our hosting services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

2. Information We Collect

We may collect the following categories of personal data:

• Account Information: Name, email address, billing address, phone number, and payment details when you register.
• Usage Data: Server logs, IP addresses, browser type, pages visited, and time on site.
• Support Communications: Content of tickets, live chat transcripts, and emails.
• Hosting Content: Files, databases, and emails stored on our servers as part of your service.

3. How We Use Your Information

• To provide, operate, and maintain our hosting services
• To process payments and send billing communications
• To respond to customer support requests
• To send service-related notifications (maintenance, outages, security alerts)
• To improve our services through aggregated usage analytics
• To comply with legal obligations

We do not sell your personal data to third parties and do not use your data for targeted advertising.

4. Legal Basis for Processing (GDPR)

For EEA users, we process data under the following bases:

• Contract: Processing necessary to fulfil our service agreement.
• Legitimate Interest: Fraud prevention, security monitoring, and service improvement.
• Legal Obligation: Compliance with applicable laws.
• Consent: Marketing communications (withdraw any time).

5. Data Retention

We retain your personal data for as long as your account is active or as required by law. Account data is deleted within 90 days of account closure. Backup data may be retained up to 30 additional days. Financial records retained for 7 years as required by tax law.

6. Data Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, two-factor authentication options, and regular security audits. No transmission method is 100% secure, but we take commercially reasonable precautions.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Request data portability
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@xvhost.com.

8. Cookies

We use essential cookies for authentication and session management, and analytics cookies (with consent) to understand website usage. No third-party advertising cookies. Manage preferences through your browser settings.

9. Third-Party Processors

We share data with trusted processors including payment processors (Stripe), email delivery services, and DDoS mitigation providers. All processors are bound by GDPR-compliant data processing agreements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active customers via email at least 30 days before material changes take effect.

11. Contact

Privacy-related enquiries: privacy@xvhost.com
XVHost Ltd., Data Protection, 123 Server Street, Tech City, TC1 1XV, United Kingdom.