1. Who we are
Worldwide Hosters ("we", "us") is the data controller for personal data processed through worldwidehosters.com and our client area. Contact us at privacy@worldwidehosters.com.
2. Data we collect
- Account data: name, email, phone/WhatsApp number, company, country, password hash.
- Order and billing data: services purchased, invoices, wallet ledger, payment references and status. Full card numbers are never stored by us — card payments are handled by our payment processors.
- Domain registrant data: the contact details required by registries and ICANN to register a domain.
- Service data: hosting account usernames, domains, DNS records and provisioning logs.
- Support data: tickets, emails and WhatsApp messages you send us.
- Technical data: IP address, browser and device information, pages viewed, timestamps and error logs.
- Marketing leads: details you submit in project or quote wizards.
3. Why we use it and our legal bases
- Contract: creating your account, provisioning domains and hosting, billing, and support.
- Legitimate interests: securing our network, preventing fraud and abuse, improving our services and internal analytics.
- Consent: non-essential cookies, marketing emails and promotional WhatsApp messages. You may withdraw consent at any time.
- Legal obligation: tax, accounting, registry requirements and lawful requests from authorities.
4. Who we share data with
We share only what is necessary, with:
- Domain registry and registrar partners (required for domain registration and WHOIS obligations).
- Infrastructure and DNS/CDN providers used to run your services.
- Payment providers for mobile money, card and cryptocurrency transactions.
- Email delivery and support tooling providers.
- Marketing service providers where you have ordered such services.
- Authorities or third parties where required by law, or to protect our rights and users' safety.
We do not sell your personal data.
5. Google user data
If you sign in with Google, we receive only your basic profile: name, email address, Google account identifier and profile picture. We use this solely to create and authenticate your account. We do not use Google user data for advertising, do not sell it, do not transfer it to third parties except to the service providers needed to operate authentication, and do not allow humans to read it except with your consent, for security purposes, to comply with law, or where the data is aggregated and anonymised. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time in your Google Account permissions and request deletion by emailing privacy@worldwidehosters.com.
6. International transfers
Our servers and providers may be located outside your country, including in the EU and the United States. Where data is transferred internationally we rely on appropriate safeguards such as standard contractual clauses with our providers.
7. Retention
- Account, invoice and transaction records: retained while the account is active and for up to 10 years afterwards for tax and accounting purposes.
- Hosting content and backups: deleted within 30 days of service termination.
- Support tickets: up to 3 years after closure.
- Server and security logs: typically up to 12 months.
- Marketing leads: until you unsubscribe or 2 years of inactivity.
8. Security
We use encryption in transit (TLS), encrypted storage for sensitive credentials, role-based access controls, row-level database security and least-privilege service accounts. No system is perfectly secure; we will notify you and any relevant authority of a qualifying personal data breach without undue delay.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent. Email privacy@worldwidehosters.com and we will respond within 30 days. Note that domain registrant data may need to be retained to satisfy registry rules. You may also lodge a complaint with your local data protection authority.
10. Children
Our services are not directed to children under 16 and we do not knowingly collect their personal data.
11. Cookies
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are set only with your consent, which you can change at any time from the cookie banner.
12. Changes
We may update this policy. Material changes will be announced on this page and, where appropriate, by email.