Privacy Policy

1. Data Controller

Reizor Hosting is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at support@reizorhosting.com or through our support center.

2. Information We Collect

We collect the following categories of personal data:

• Identity data: name, username, email address
• Contact data: billing address
• Technical data: IP address, browser type, device information, usage patterns
• Account data: login credentials, service preferences, account settings
• Communication data: support tickets, chat logs, email communications
• Server data: server configurations, files, and content stored on our servers

Important: We do not store payment information (such as credit card numbers, bank account details, or payment card security codes) directly. All payment processing is handled by third-party payment processors, including Stripe and PayPal. These vendors are PCI-DSS compliant and store your payment information securely on their systems. We only receive transaction confirmations and payment method types (e.g., "Visa ending in 1234") from these processors.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract performance: To fulfill our contractual obligations and provide our services
• Legitimate interests: For fraud prevention, security, service improvement, and business operations
• Legal obligation: To comply with applicable laws and regulations
• Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)

4. How We Use Your Information

We use your personal data for the following purposes:

• To provide, maintain, and improve our hosting services
• To process payments and manage your account
• To send technical notices, updates, and support communications
• To respond to your inquiries and provide customer support
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our Terms of Service
• For marketing purposes (only with your consent)

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Account data is retained while your account is active and for 30 days after account closure. Billing records are retained for 7 years as required by tax and accounting laws. Server data is permanently deleted upon account termination or service cancellation.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: Request a copy of your personal data we hold
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for processing based on consent
• Right to lodge a complaint: File a complaint with your local supervisory authority

To exercise any of these rights, please contact us at support@reizorhosting.com. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

7. Your Rights Under US State Privacy Laws

If you are a resident of California, Virginia, Colorado, Connecticut, or other states with comprehensive privacy laws, you have additional rights regarding your personal information:

• Right to know: Request information about the categories and specific pieces of personal information we collect, use, disclose, and sell (if applicable)
• Right to delete: Request deletion of your personal information, subject to certain exceptions
• Right to correct: Request correction of inaccurate personal information
• Right to opt-out: Opt-out of the sale or sharing of your personal information (if applicable)
• Right to opt-out of targeted advertising: Opt-out of targeted advertising based on your personal information
• Right to opt-out of profiling: Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects
• Right to non-discrimination: Exercise your privacy rights without discrimination
• Right to data portability: Receive your personal information in a portable format

California Residents (CCPA/CPRA): We do not sell personal information as defined by the CCPA. We may share personal information with service providers for business purposes. You have the right to:

• Request disclosure of the categories of personal information collected, sold, or disclosed for business purposes
• Request deletion of personal information (subject to exceptions)
• Opt-out of the "sale" or "sharing" of personal information (we do not currently sell personal information)
• Limit the use of sensitive personal information
• Designate an authorized agent to make requests on your behalf

Virginia, Colorado, and Connecticut Residents: You have similar rights under the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and Connecticut Data Privacy Act (CTDPA), including:

• Right to confirm whether we process your personal data
• Right to access your personal data
• Right to correct inaccuracies
• Right to delete your personal data
• Right to obtain a copy of your personal data in a portable format
• Right to opt-out of targeted advertising, sale of personal data, and profiling

To exercise any of these rights, please contact us at support@reizorhosting.com or through our support center. We will verify your identity before processing your request and will respond within the timeframes required by applicable law (typically 45 days, with a possible 45-day extension if necessary). We will not discriminate against you for exercising your privacy rights.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. We may require verification of your identity and proof of authorization from the agent.

8. Data Sharing and International Transfers

We may share your personal data with:

• Payment processors: We use third-party payment processors including Stripe and PayPal to process payments. These processors collect and store your payment information (credit card numbers, bank account details, etc.) directly. We do not have access to your full payment information. These processors are PCI-DSS compliant and have their own privacy policies governing how they handle your payment data.
• Service providers who assist in operating our services (hosting providers, analytics services, email service providers)
• Legal authorities when required by law or to protect our rights
• Business partners with your explicit consent

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or adequacy decisions by the European Commission.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that may affect your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

10. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential cookies: Required for the website to function (no consent required)
• Analytics cookies: Help us understand how visitors use our website (requires consent)
• Marketing cookies: Used to deliver relevant advertisements (requires consent)

You can manage your cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect website functionality.

11. Children's Privacy

Our services are not intended for individuals under the age of 16. If you are under 16, you must have parental consent to use our services. We do not knowingly collect personal information from children under 16 without parental consent. If you become aware that a child under 16 has provided us with personal information without parental consent, please contact us immediately.

12. Third-Party Services

Our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. If this changes in the future, we will inform you and obtain your consent where required.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email.

15. Do Not Sell or Share My Personal Information

We do not sell personal information as defined by the CCPA and other state privacy laws. We may share personal information with service providers for business purposes. If you are a California resident, you have the right to opt-out of the "sale" or "sharing" of personal information. To exercise this right, please contact us at support@reizorhosting.com.

16. Contact Information and Supervisory Authority

For questions about this Privacy Policy or to exercise your rights, please contact us at:

Email: support@reizorhosting.com
Support Center: Available through our website

For California Residents: You may also contact us at the email address above to request information about our data practices or to exercise your CCPA/CPRA rights.

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority. For EU residents, you can find your local supervisory authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en