1. Introduction
HostKum ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit hostkum.com or use our hosting services.
This policy applies to all customers, prospective customers, and visitors of HostKum services. By using our services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Information you provide
- Payment information: Payment card details, PayPal email, or cryptocurrency wallet — processed by our PCI-DSS compliant payment processors. We do not store full card numbers.
- Support correspondence: Tickets, emails, and chat transcripts you send to our support team.
- Domain registration: Information required by ICANN for domain registration (WHOIS data).
Information collected automatically
- Server logs: Access logs, error logs, and resource usage metrics for security and operational purposes.
- Cookies: Essential cookies for authentication and security. See our Cookie Policy for details.
3. How We Use Your Information
We use collected information for the following purposes:
- Provide and maintain hosting services to you
- Process payments and billing
- Communicate about your account, services, and important updates
- Provide technical support
- Monitor and improve service quality and security
- Comply with legal obligations and respond to lawful requests
- Prevent fraud, abuse, and illegal activity on our network
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data based on:
- Contract performance: Processing necessary to provide hosting services you've ordered.
- Legitimate interests: Improving services, fraud prevention, network security.
- Legal obligations: Tax, accounting, anti-money-laundering compliance.
- Consent: For marketing communications (you may withdraw consent anytime).
5. Information Sharing
We share information only with:
- Payment processors (Stripe, PayPal) to process transactions
- Domain registrars for WHOIS records as required by ICANN
- Datacenter and infrastructure partners who maintain our servers under strict NDAs
- Email and support tools for customer communications
- Legal authorities when required by valid legal process
All third-party processors are bound by data processing agreements meeting GDPR standards.
6. Data Retention
We retain personal data only as long as necessary:
- Active accounts: Throughout the lifetime of your service plus 90 days.
- Billing records: 7 years (for tax compliance).
- Support tickets: 3 years for quality and reference.
- Server logs: 30–90 days for security analysis.
- Closed accounts: Anonymized or deleted after 90 days, except where law requires longer retention.
7. Your Rights
Subject to applicable law, you have the right to:
- Access personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict processing in certain circumstances
- Port your data to another service
- Object to processing based on legitimate interests
- Withdraw consent at any time for consent-based processing
- Lodge a complaint with a supervisory authority
To exercise any of these rights, email privacy@hostkum.com. We respond within 30 days.
8. Security
We protect your data through:
- TLS encryption for all data in transit
- Encrypted storage for sensitive fields
- Strict access controls and audit logging
- Regular security audits and vulnerability scanning
- PCI-DSS compliance for payment handling
- Two-factor authentication available on all accounts
9. International Transfers
Your data may be processed in jurisdictions outside your country of residence. When we transfer personal data internationally, we use appropriate safeguards including Standard Contractual Clauses approved by the European Commission for transfers outside the EEA.
10. Children's Privacy
HostKum services are not directed at individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact privacy@hostkum.com and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated by email and via a notice on our website at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.
12. Contact
For privacy questions or to exercise your rights:
- Email: privacy@hostkum.com
- General contact: support@hostkum.com