Privacy Policy
This policy explains what personal data ahosting collects, why we collect it, how long we keep it, and what rights you have over it.
1. Data we collect
Data you give us
- Account data — name, email address, and where applicable company name, billing address and telephone number.
- Billing data — invoice records, payment history, and the amounts and dates of transactions.
- Support data — the content of tickets you open and any information you choose to include in them.
Data collected automatically
- Authentication logs — IP address, timestamp, browser user agent, and outcome of each login attempt.
- Server logs — web server access logs covering requests to ahosting.site and my.ahosting.site.
- Network telemetry — aggregate traffic volume and flow data for the Services you operate, used for capacity planning and abuse detection.
Data we do not collect
We do not hold your payment card number. Card and cryptocurrency payments are processed entirely by our payment providers; we receive only a transaction reference, the amount, and the status.
We do not inspect, index, or analyse the content stored on your server, except where necessary to investigate a substantiated abuse report or where compelled by law.
2. Why we process it
| Purpose | Data used |
|---|---|
| Providing and provisioning the Service | Account, billing |
| Invoicing and collecting payment | Billing |
| Responding to support requests | Account, support |
| Securing the platform and detecting abuse | Authentication logs, network telemetry |
| Meeting accounting and tax obligations | Billing |
| Service notices about outages and changes | Account |
We do not use your data for advertising, and we do not sell or rent it to anyone.
3. Marketing
We send operational email — invoices, provisioning notices, outage notifications, ticket replies — as part of delivering the Service. These are not marketing and cannot be unsubscribed from while you hold an active Service.
Any promotional email is sent only with your consent, and every such message carries an unsubscribe link that takes effect immediately.
4. Who we share data with
We share the minimum necessary data with the following categories of processor:
- Payment providers — to process the payments you initiate. They receive the transaction amount and, where required by their own compliance obligations, your name and email.
- Email delivery provider — to deliver transactional email. It receives the recipient address and message content.
- Infrastructure and network providers — the data centres and transit providers hosting our nodes. They do not receive account data in the ordinary course.
We disclose data to a public authority only where we are legally required to do so, and only to the extent required. Where the law permits us to notify you of such a request, we will.
5. Where data is held
Our infrastructure is located in Europe. Account and billing records are held on systems operated by us and by the processors listed above.
6. How long we keep it
| Category | Retention |
|---|---|
| Account data | Duration of the account, then 12 months |
| Invoices and billing records | As required by accounting law, normally 7 years |
| Support tickets | 3 years from closure |
| Authentication logs | 12 months |
| Web server access logs | 90 days |
| Server contents on a terminated Service | Deleted at termination; not recoverable |
7. Cookies
The public site ahosting.site sets no tracking or advertising cookies and runs no third-party analytics.
The client area at my.ahosting.site sets a session cookie required to keep you logged in, and a CSRF token cookie required to protect form submissions. Both are strictly necessary and cannot be disabled while using the client area.
8. Security
All connections to our websites and client area are encrypted with TLS. Passwords are stored hashed, never in plaintext. Administrative access to production systems is restricted to named personnel and logged. We keep infrastructure patched and monitor for unauthorised access.
No system is perfectly secure. Where a breach affects your personal data and presents a risk to you, we will notify you within the periods required by law.
9. Your rights
Subject to the conditions set out in applicable law, you have the right to:
- Obtain a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Have data erased where we no longer have a lawful basis to keep it. Note that invoicing records must be retained for the statutory period and cannot be erased on request.
- Object to processing carried out on the basis of our legitimate interest.
- Receive your account data in a portable, machine-readable format.
- Withdraw consent, where processing is based on consent, at any time.
To exercise any of these, email support@ahosting.site or open a ticket in the client area. We respond within 30 days. We may ask you to verify your identity before acting on a request.
10. Changes
We may update this policy. Material changes are notified by email and in the client area before they take effect. The date at the top of this page always reflects the current version.
11. Contact
Data protection enquiries: support@ahosting.site. Postal address and telephone are on the contact page.