Privacy Policy
This Privacy Policy explains which personal data OrienHost ("we", "us") collects when you visit our website, create an account or use our services, why we collect it, how long we keep it and which rights you have. We follow a data-minimisation approach: we collect what we need to provide, bill and secure the services, and nothing more.
1. Data we collect
Account data
- Required to open an account: first name, last name, email address and password. Passwords are stored only as secure hashes.
- Optional: company name, postal address, phone number and other profile fields. You decide whether to provide them.
- Preferences such as language, currency and theme.
- If you sign in with Google or another third-party login, we receive the basic profile data that provider shares (usually name and email address).
Billing data
- Invoices, orders, amounts, account balance and payment status.
- For cryptocurrency payments: the payment reference and transaction ID provided by the payment processor. We do not receive or store bank card data.
Technical and security data
- IP address, browser type and time of login to the Client Area, and a log of important account actions (for example password changes or service orders). We use this to protect your account and to investigate misuse.
- Standard server logs created by the hosting software (web, email and FTP logs) for the operation, troubleshooting and security of the services. They are kept for a limited period and are not used to build profiles.
Support data
- The content of support tickets and emails you send us, including attachments.
Content you host
Websites, databases, email and files that you store on our servers are your Content. You are responsible for it, including any personal data of your own visitors. We do not inspect your Content as a matter of routine; we only access it when you ask us for support, when necessary for security, to handle a credible abuse report or where we are legally required to.
2. Why we use your data
- To provide the services you order, including account setup, provisioning, renewals and support (performance of our contract with you).
- For billing and accounting, including invoices and payment records we are required to keep (contract and legal obligation).
- For security, including fraud prevention, protection against attacks and handling abuse reports (our legitimate interest in a secure service).
- To contact you about your services, invoices, security issues and changes to our terms. Newsletters are only sent if you subscribe, and you can unsubscribe at any time.
We do not sell personal data, we do not use it for advertising profiles, and we do not show third-party advertising.
3. Service providers we work with
We share data only with providers that we need to run the service, and only to the extent required:
- Cloudflare: our website is delivered through Cloudflare's network for performance and protection against attacks. Cloudflare processes technical data such as IP addresses and may set security cookies. We also use Cloudflare Web Analytics to see aggregated page statistics; it does not use cookies to track visitors.
- Payment processor: cryptocurrency payments are handled by our payment processor (currently NOWPayments), which processes the transaction data needed to complete the payment.
- Google: only if you choose to sign in with Google.
- Let's Encrypt: free SSL certificates are issued for your domain names. Like all public certificates, they are recorded in public Certificate Transparency logs, which show the domain name but no personal data about you.
- Domain registries and registrars: when you register or transfer a domain, the registration data required by the registry is passed to them. Some registries publish part of it in WHOIS/RDAP; privacy protection is applied where the extension supports it.
We disclose data to authorities only where we are legally obliged to, after reviewing that the request is lawful under the law that applies to us. Where we are allowed to, we inform the affected customer.
4. Where data is stored
Hosting accounts, customer data and backups are stored on servers in our offshore infrastructure. Website traffic passes through Cloudflare's global network, and service providers named above may process data in their own locations.
5. How long we keep data
- Account data: for as long as your account exists. You can ask us to close your account and delete your data once no services or invoices are open.
- Invoices and payment records: for as long as we are required to keep them for accounting purposes.
- Login and security logs: for a limited period needed for security and investigation of misuse.
- Server logs: rotated automatically and kept for a limited period.
- Backups: hosting backups are taken twice a week and older copies are overwritten as new ones are created. After a service is terminated, its data disappears from backups when those copies are replaced.
- Support tickets: for as long as your account exists, so we can see the history of your requests.
6. Security
We protect data with encrypted connections (HTTPS), hashed passwords, optional passkeys and two-factor authentication, per-account isolation on our servers and restricted administrative access.
7. Your rights
You can ask us to:
- tell you which personal data we hold about you and give you a copy;
- correct inaccurate data (most data can be changed directly in the Client Area);
- delete your data, unless we must keep it for legal reasons or open invoices;
- restrict or object to certain processing;
- export your data in a common format.
Send requests through a support ticket or to [email protected]. We may need to confirm your identity before we act on a request.
8. Children
Our services are not intended for people under 18, and we do not knowingly collect data from them.
9. Cookies
Information about cookies and similar technologies is in our Cookie Policy.
10. Changes
We may update this Privacy Policy. The current version is always published on this page with its effective date. Significant changes are announced by email or in the Client Area.
11. Contact
For privacy questions, write to [email protected] or open a support ticket.