1. Scope
This policy describes personal data handling for the Hoststare website, client area, billing and support. You remain responsible for data processing in websites or applications you operate inside a VPS. This policy does not replace your own notice to your users.
2. Account and service records
Records include the name, email, phone, country, address or billing details requested by the form, plus orders, configuration, invoices, payment status and tickets. Supply a valid email and accurate location details. Required fields are marked on the Hoststare form.
3. Purposes and necessity
These records support account management, purchased services, billing and payment reconciliation, support, service notices and security or abuse handling. Submit only information needed for the task. Tickets and screenshots should not contain passwords, private keys, complete card numbers or authentication codes.
4. Technical records and cookies
Login and cart functions use session cookies. Web requests may also produce IP, timestamp, browser and error records. See our Cookie Information for controls. Optional analytics or advertising added later require appropriate information and choices; visiting the site is not unlimited consent to all tracking.
5. Service providers and lawful disclosure
Infrastructure, email, payment or technical maintenance providers may process data needed for their tasks. Valid legal requirements or security incidents may also require disclosure. Ask us about provider categories, purposes or processing through a privacy request. Using providers does not remove Hoststare’s own responsibilities.
6. VPS contents and third-party data
VPS contents and account records are different data scopes. Obtain necessary authority for third-party data you process and control access. When support involves VPS contents, explain the issue and authorised assistance. Legal, abuse and urgent security handling may require separate necessary action.
7. Retention, deletion and security
Records are retained as needed to provide services, handle billing and disputes, and meet legal requirements. Different records may have different retention requirements. Cancelling a VPS does not immediately erase all account and invoice records. Records no longer needed will be deleted or de-identified.
8. Access, correction and deletion requests
Update editable details in the client area, or request access, correction or deletion through a ticket or [email protected]. Describe the records and account reference; identity checks may be necessary. We explain the processing scope if legal, billing or dispute requirements require retention. We respond within a reasonable time and explain the outcome.
9. External sites and updates
An external site’s own privacy policy applies to its processing. Material Hoststare policy updates are explained on the site or through account notices. Use the contact details above for privacy questions.
10. Marketing, sale and choices
Hoststare does not sell customer personal data or supply it to third parties for marketing without separately obtaining the required explicit consent. Service, billing and security notices are operational communications, not unlimited advertising permission. You can ask to stop an optional promotional use without disabling necessary service notices.
11. Breach notification and remediation
Access restrictions, transmission and sign-in protection, and security records reduce the risk of unauthorised access, alteration, disclosure or destruction. Online services can still face security incidents. On discovering a breach, we assess the scope, contain exposure and promptly notify affected customers as required, providing the impact, recommended action and contact details.
12. Aggregate analysis and purpose changes
Quality analysis should use aggregated or anonymous records that do not reasonably identify a person. A new purpose involving identifiable data, optional tracking or other new processing requires an explanation and applicable choices rather than unlimited authority under this policy.