Privacy Policy

How we collect, use, and protect your personal data. Last updated: 20 January 2026.

1. Quick overview

• We only collect data necessary for providing our services
• Your data is encrypted and securely stored
• We never sell your personal information
• You have full control over your data

2. Data controller

Articles 13–14 GDPR

• Company name: AraHoster
• Data Protection Officer: privacy@arahoster.com

3. Information we collect

Article 13(1)(d) GDPR

Personal information

• Identity data: Name, username, date of birth
• Contact data: Email address, phone number, billing address
• Financial data: Payment card details (processed by Stripe/PayPal)
• Account data: Account credentials, preferences, settings

Technical information

• Device data: IP address, browser type, operating system
• Usage data: Pages visited, time spent, click patterns
• Location data: Approximate location based on IP address
• Cookie data: As described in the cookie section below

Communication data

• Support tickets: Messages exchanged with our support team
• Email correspondence: Emails sent to and from our team
• Feedback: Reviews, surveys, and feedback you provide

4. Legal bases for processing

Article 6 GDPR

• Consent (Art. 6(1)(a)): Marketing communications, analytics cookies, optional features
• Contract (Art. 6(1)(b)): Service delivery, account management, billing
• Legal obligation (Art. 6(1)(c)): Tax records, fraud prevention, legal compliance
• Legitimate interest (Art. 6(1)(f)): Security, fraud detection, service improvement

5. How we use your data

Article 13(1)(c) GDPR

• Service delivery: To provide, maintain, and improve our hosting services
• Account management: To manage your account, process payments, and send service notifications
• Security & fraud prevention: To protect our services and users from fraud, abuse, and security threats
• Customer support: To respond to your inquiries and provide technical assistance
• Marketing (with consent): To send promotional offers, newsletters, and product updates
• Analytics & improvement: To analyze usage patterns and improve our services

6. Your data rights

Articles 15–22 GDPR

• Right of access (Article 15): Request a copy of your personal data
• Right to rectification (Article 16): Correct inaccurate or incomplete data
• Right to erasure (Article 17): Request deletion of your data
• Right to restriction (Article 18): Limit how we process your data
• Right to portability (Article 20): Receive your data in a portable format
• Right to object (Article 21): Object to processing based on legitimate interests

To use any of these rights, email privacy@arahoster.com or open a support ticket.

7. Data retention periods

Article 13(2)(a) GDPR

8. Data sharing & transfers

Articles 44–49 GDPR

We may share your data with trusted third parties:

• Payment processors: Stripe, PayPal for secure payment processing
• Cloud infrastructure: Secure data centers in the EU and compliant regions
• Analytics services: Privacy-focused analytics to improve our services
• Legal authorities: When required by law or to protect our rights

Third-party services

• MarketGoo SEO: SEO tools and website analytics for performance optimization. Processes website metadata and ranking data.
• WPMU DEV Plugins: Premium WordPress plugins and tools. Processes website configuration and performance data.

International transfers

When we transfer data outside the EU/EEA, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

9. Data security

Article 32 GDPR

We implement robust security measures to protect your data:

• Encryption: All data encrypted at rest (AES-256) and in transit (TLS 1.3)
• Access controls: Role-based access with multi-factor authentication
• 24/7 monitoring: Continuous security monitoring and intrusion detection
• Regular backups: Encrypted backups with geographic redundancy
• Security audits: Regular penetration testing and vulnerability assessments

10. Data breach notification

Articles 33–34 GDPR

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms:

• We will notify the relevant supervisory authority within 72 hours of becoming aware
• If the breach poses a high risk to you, we will notify you directly without undue delay
• Notification will include the nature of the breach, likely consequences, and measures taken

11. Cookies & tracking

ePrivacy Directive

We use cookies and similar technologies to enhance your experience:

• Essential cookies: Required for the website to function properly
• Analytics cookies: Help us understand how visitors use our site (with consent)
• Marketing cookies: Used to deliver relevant advertisements (with consent)

The full list of cookies on this site and the button to change your choice are below.

12. Children's privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or prominent notice on our website at least 30 days before changes take effect.

14. Contact our Data Protection Officer

For any privacy-related questions or to exercise your data rights, email privacy@arahoster.com.