We have recently updated our Privacy Policy to comply with the GDPR.
EdaptHosting (henceforth referred to as "we", "us", or "the company") is an independently-owned web hosting company providing server space, domains, and online tools for our clients (henceforth referred to as "you", "your", or "the client") to create a professional or personal website and establish an online presence. We are committed to protecting the personal data of our clients.
This privacy policy details what information we require from you, why we require this information, and how we use, share, store, and secure your information. Under the General Data Protection Regulation ("GDPR") established by the European Union, EdaptHosting is the data controller.
If you have any questions about your personal data or our general practice regarding personal data, you can email us at support@edaphosting.com
This policy outlines the personal data collected from you during sign-up, use of our services, support communications, website visits, or other interactions that occur during the normal operating procedure of the company. This policy applies to and governs all divisions, subdomains, and aspects of the company or its services in equal measure.
This policy does not outline the personal data or content you, as a client, upload, share, display, or store on the website or server space provided to you by use of our services. We strongly advise that any business or individual using our services and subject to the GDPR develop their own GDPR-compliant privacy policy and security measures for personal data.
Any personal data we collect will be used, shared, and stored in accordance with the provisions set forth in this policy.
We may ask for or otherwise obtain the following personal data about you in order to provide you with service and support.
EdaptHosting has an account on various social media platforms, such as Facebook, Twitter, and LinkedIn, that you may visit, interact with, comment on, or contact us through. When you do so, certain personal data on the relevant social media platform may become available to us. The data we are allowed to access is determined by the social media platform you are using and your privacy settings on that platform. You can manage and request information about your social media privacy settings on the relevant social media platform's website.
Your personal data is stored securely in various locations depending on the data, its source, and its use. The EdaptHosting website is secured via HTTPS/SSL encryption, server-side security features, and other advanced software to protect against unauthorized access.
We use WHMCS as our billing system, which stores the majority of your billing and contact information. WHMCS is coded in laravel, and all pages of WHMCS are heavily encrypted as proprietary technology, even to EdaptHosting. WHMCS is GDPR-compliant. For more information on how WHMCS helps to secure and protect your data, please see the WHMCS Privacy Policy.
We use Enom as our domain registrar, which stores your domain registrant information if you have registered a domain through EdaptHosting. To learn more about how Enom secures and protects your personal data, please see the Enom Privacy Policy.
Your personal data may be stored in the following ways:
We may use your data individually and/or collectively for the below purposes:
We may also use your personal data in an anonymized, statistical format to view and analyze trends and behaviors as a collective group, such as for searches, page hits, email open rates, clicks, geographic locations, and conversion rates.
We do not sell, trade, or share client data with advertising agencies, political campaigns, individuals, or any third party unless it is for the explicit purpose of providing you with a service or feature you have requested or purchased.
EdaptHosting acts as a reseller for certain services or features that we do not directly provide. In order for us to provide you with these services, such as domain names or SSL certificates, we are required to share certain aspects of your personal data with the third party who provides the service, as detailed below.
EdaptHosting is a reseller of Enom domain names. When you purchase a domain, a domain registrar is required to register the domain on your behalf, for use on the internet by the domain registrant (you). When you purchase a domain from us, we send an automated request with your domain name, TLD, registration period, and registrant information to Enom.
Enom requires this data about you to authorize and validate you as the registrant (owner) of the domain name, and perform the following actions:
A domain name cannot be registered unless it meets the above requirements. We do not share your data with Enom unless you purchase or currently own a domain name registered by Enom.
We use WHMCS to store, access, and manage the profile information of all our clients. The WHMCS hosting automation software is proprietary, meaning the internal mechanisms are encrypted and kept private, even from us. Due to this privatization, errors and bugs occurring within the WHMCS installation we run cannot always be fixed by EdaptHosting employees or developers.
In the event one of these errors occurs in our internal system and affects our ability to provide you with full service, we may provide WHMCS with temporary access to our WHMCS installation for the purpose of investigating, troubleshooting, and fixing the error in our installation of their software. This access potentially allows them to view some areas of your personal data as it is reflected in our system. Access to our system is revoked and deleted when the error is resolved.
WHMCS is GDPR-compliant.
When you install or sign up for the WordPress CMS for use with our services, you may be required to enter limited personal data for your WordPress account. Most WordPress problems and changes can be successfully completed or resolved by EdaptHosting, but in the rare event that your WordPress account experiences an error that we cannot fix, we may request additional support from WordPress. In the process of providing support, WordPress may temporarily access the personal data you provided on your WordPress account, such as your contact email address or information you have posted to your WordPress website.
Please see the WordPress.org Privacy Policy for more details.
When you install or sign up for the Weebly website builder we offer for use with our services, you may be required to enter limited personal data for your Weebly account. Most Weebly problems and changes can be successfully completed or resolved by EdaptHosting, but in the rare event that your Weebly account experiences an error that we cannot fix, we may request additional support from Weebly. In the process of providing support, Weebly may temporarily access the personal data you provided on your Weebly account, such as your contact email address or information you have posted to your Weebly website.
Please see the Weebly Privacy Policy for more details.
When you sign up for hosting, we provide you with your own version of cPanel, a control panel for web hosting accounts that easily displays the settings and management areas of your website. cPanel may have limited access to data stored on your cPanel, such as your name, email address, or IP Address, in the event that cPanel is granted access to one of our servers to fix a problem with their product or services.
Please see the cPanel Privacy Policy for more details.
When you purchase an SSL Certificate or a Wildcard SSL, EdaptHosting purchases the SSL from the Certificate Authority SSL Vendor, DigiCert. In order for your SSL to be configured and set up, some personal data is required, such as your email address, geographical location, and company name, division, or industry if applicable. This data is used solely to set up and enable your SSL Certificate and is not shared beyond that.
EdaptHosting uses MailChimp for its newsletter program. When you use a form field on our website, order form, or elsewhere to opt-in to marketing communications from us, the data is received by our MailChimp account for addition to our mailing list, including your email address. We only use this data to send you the marketing communications to which you opted-in. MailChimp is GDPR-Compliant.
Please see the MailChimp Privacy Policy for more details.
We fully comply with law enforcement and legal entities. In the event your personal data or account is involved in a police investigation, legal proceedings, or there is a subpoena for the data we have collected from you, any and all necessary and required data will be shared with relevant parties such as law enforcement officials, attorneys, courts of law, or other relvant and authortized parties.
We may disclose your data as part of the legal process if you are:
This compliance may include transferring your data to another state or country, which may not necessarily be part of the United States, European Union, or your country of citizenship.
EdaptHosting does not receive personal data from any third parties or businesses. The only data we receive is anonymized, statistical data such as data provided by Google Analytics when you visit our website (geographic location and time spent on a page) or data we receive when you sign up for our services, newsletter, or otherwise manually enter and submit your data into a form field anywhere on our website.
Online forms of communication are never completely secure or protected due to the nature of technology. We will take every available measure to protect and keep private your data, but we cannot make any guarantees. Data you choose to transmit over the internet is done so at your own risk. Please never send your credit card information by email or chat. No EdaptHosting employee will ask you to do so. Please only enter billing information from the section in your secure client billing area, or via phone to a EdaptHosting employee if absolutely necessary. Financial data such as credit card numbers received via proper methods are immediately encrypted and protected during and after transmission.
When we receive data transmitted to us, all applicable and necessary data security measures are taken to prevent your data from loss, theft, or unathorized use, modification, or access.
EdaptHosting will not call you with marketing offers, advertising, or for any other reason than to follow up with you regarding a recent support ticket or problem with your account, or if you requested a call from us. If you do not wish to be called about support tickets or chats you have submitted, please state as such in your email or chat so that we may note your choice.
To opt-out of the EdaptHosting Newsletter or any other marketing communication from us, please use the link contained in the footer of the email where you may change your email preferences or unsubscribe. Alternatively, you may email marketing@edaphosting.com at any time to request which data you would like removed or changed.
Important information about your account and billing notifications are not included in this opt-out procedure. To stop receiving service-related emails or renewal notifications, you will need to cancel your account. Cancellation instructions and procedure can be found in our Billing Policy or by emailing billing@edaphosting.com.
To opt-out of social media posts or notifications from one of our Social Media profiles, please unfollow, unsubscribe, mute, or otherwise remove EdaptHosting's social media account using the preferences and options provided by the social media platform in question.
If your account, website, or personal data is accessed by someone without your knowledge or consent, or if a subaccount or additional account is created using your personal data without your consent, please contact abuse@edaphosting.com to secure your account and request removal of the data or account in question.
We keep your personal data stored in our secure system when necessary to provide you with service, comply with legal obligations, resolve account ownership or payment disputes, notify you of important information pertaining to your services and their billing, keep your services active and working until you choose to cancel them, and to enforce our terms of service and billing policy.
Should you wish to alter how or how long your personal data is stored, please contact billing@edaphosting.com to request the steps you must take to make these changes.
EdaptHosting processes your data for the following reasons under the GDPR, with variations depending on what data we have collected from you and how we have collected it:
Under the GDPR, you have certain rights and control over your personal data as it is stored or accessed in our system. You may exercise your rights in the following ways if you are able to verify your identity with information that only the account owner would know. EdaptHosting may deny you access based on inability to verify your identity or other behaviors or patterns that give us a legal basis to deny access to an account. You will be informed of the reason why your access is being denied, and given options to help resolve this if possible.
We verify account ownership using one or a combination of the following personal information:
You have the right to know if we process your personal data, and to access any data we hold on you, as well as who we share this data with and how we use the data we have collected.
You may access and view your own data at any time by logging into your client area.
You have the right to receive a machine-read file containing your personal data, transmitted online via the method of your choice, delivered to yourself or to a third party as specified. EdaptHosting is not responsible for the processing or transmission security of the data you request to be sent to a third party or to yourself, if it is compromised as a result of your request.
You have the right to correct your personal data if it is inaccurate or incomplete. You may do so any time by logging into your client area or by contacting us explaining the need for correction and which data should be corrected.
You have the right to request erasure of your personal data in the following situations:
Please provide all relevant documentation and supporting reasoning in your request for erasure so that we may accurately determine if you have a valid reason for erasure.
You have the right to request we stop processing your data but retain the data in storage in the following situations:
You have the right to object to us processing your data. Please contact us detailing your objection and the reason for it so we may investigate if there is a legitimate reason for us to continue processing your data.
If you have provided us with consent to process or store your data, you may withdraw that consent at any time by contacting us.
If you wish for us to stop processing, remove, or alter to be unusable your personal data, certain services or features you have signed up for will cease to function, depending on the data in question and its necessity to continue providing you with service. We cannot provide you with service if we do not have data with which to do so, and withdrawing consent to process, store, or retain your data may result in the termination or discontinuation or services dependent on that data.
We will notify you before proceeding if this is the case, to affirm you wish to proceed with the removal of data and the consequences resulting from its removal, up to and including irreversible termination of all services and functions.
To provide you with service, your personal data is transferred to, stored, and processed in the United States. Your personal data may also be processed by EdaptHosting employees or contractors working outside the United States or European Union, as necessary. These employees use your data to help ensure proper function of your services, and to provide support when you have an issue with your service. All necessary steps are taken to secure this data, both in the United States and by remote employees as applicable.
If you choose to transfer your data to another hosting company, upon completion of the transfer, your data becomes subject to the other company's privacy policy, security, and regulations. The data stored with EdaptHosting should be considered a separate and distinct dataset, and your direction for how we store, process, or remove this data will not affect, or be affected by, data transferred to another company, system, or third party.
Cookies are small files stored on your computer or device that help us to provide you with features and functions of your account. They allow us to record pre-defined information about your interactions with or visits to our website, services, or features. Similar technology, such as pixels, are also used to help keep track of when another site or person refers you to EdaptHosting, such as through our Refer-A-Friend Program.
We use cookies and pixels to make our website easier to use, and to ensure credit is given where credit is due. Cookies allow you to stay logged into our client area for the entire session, keep track of which websites referred you to us, and record information about sales that occur so that the affiliate or referring friend whose link you clicked can receive credit for bringing us your business.
We use session cookies, which are cookies that expire when you close your browser, to help keep you logged into your client area through clicks, and to keep items in your card as you're going through the order process. These cookies are vital for most internet browsing requiring a login or for information to be retained when you click to a new page.
We use permanent cookies, which are cookies that remain stored in your browser, even when it's closed, to keep you logged in to your client area across multiple sessions so you don't have to type your login details every time, and to track sales made through affiliate or referral links. Tracked sales provide us with information about the sale, such as the amount, the date the order was placed, and the affiliate or friend who referred you, so that we can give them the correct credit for referring you.
We use third-party cookies to collect anonymized, statistical information about the pages you visit, links you click, and interactions you have on our site, as well as general information like your location or industry. We use this data to help target pages on our site that are performing poorly, correct broken links, and get a general idea about what our clients are most interested in, to help cater our content to fit your needs. We primarily use Google Analytics to aggregate, understand, and act upon this data.
We use cookies for the following reasons:
You can control your cookies, including which websites are allowed to use cookies, the kinds of cookies that are allowed, and removal of individual cookies you no longer want active, from your browser's settings or preferences. Please note that if you disable all cookies, certain aspects of our services or website will become unusable by nature, such as the ability to stay logged into your client area or cPanel.
You can opt-out of Google Analytics without impacting your ability to view websites using Google Analytics. To learn more about Google Analytics and how it safeguards the data it collects from you, please click here.
Our services are not intended for use by persons under the age of 18. If you are the parent or guardian of a child who has provided us with personal data without your consent, please contact us. If we become aware of storing the personal data of a minor (as defined by United States law), we will delete this data and terminate any associated services, unless the parent or guardian of the child contacts us to store this data pending a legal inquiry or investigation, at which time we will provide any stored data to authorities prior to deletion.
If you wish to complain about how we process, store, or use your personal data, please contact us with your complaints so that we may propose the best solution to appease your situation.
This Privacy Policy is subject to change at any time, so please check this page frequently. You will be notified of any changes to this policy on this page, or by email if the change is deemed significant and you have not opted-out of email notifications. Your continued use of the services following a Privacy Policy change constitutes acceptance of the updated terms of the policy.
Last modified June 18, 2018.
