This Privacy Policy explains how KingsHost ("KingsHost," "we," "us," or "our") collects, uses, discloses, and safeguards information when you visit kingshost.net or use our hosting, domain, and related services (collectively, the "Services"). It also describes the rights you have over your personal data and how to exercise them. By using the Services, you agree to the practices described below.
1. Who We Are and How to Contact Us
KingsHost is a hosting service provider. For any privacy-related question or to exercise your rights, contact us at support@kingshost.net. We act as a data controller for personal data of our customers and website visitors, and as a data processor for personal data our customers store on our infrastructure.
2. Information We Collect
We collect the following categories of information:
- Account information you provide when registering — name, billing address, email address, phone number, company name (where applicable), and account credentials.
- Payment information processed by our PCI-DSS-compliant payment processors (Stripe and PayPal). We do not store full card numbers on our systems; we receive only a payment token and the last four digits for receipt purposes.
- Service usage data — server logs, IP addresses, request timestamps, the resources you access on our infrastructure, and abuse-detection signals required to operate the Services securely.
- Support communications — the contents of tickets, emails, and chat exchanges with our team.
- Website analytics — aggregate, mostly anonymized data about how visitors use kingshost.net (pages viewed, referrer, approximate location based on IP, device type).
- Cookies and similar technologies as described in our Cookie Policy.
3. How We Use Your Information
We process your personal data to:
- Provide, operate, and maintain the Services and your account;
- Process payments, send invoices, and recover overdue balances;
- Communicate service-related notifications, security alerts, and policy updates;
- Provide customer support and respond to your requests;
- Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Acceptable Use Policy;
- Comply with legal obligations, including tax, accounting, and law-enforcement requests where legally required;
- Improve the Services through aggregated, non-identifying analytics.
Our legal bases for processing under the GDPR include: (a) performance of a contract with you, (b) compliance with legal obligations, (c) our legitimate interests in operating a secure and effective hosting service, and (d) your consent where required (e.g., for non-essential cookies and marketing emails).
4. How We Share Information
We do not sell your personal data. We share information only with:
- Payment processors — Stripe and PayPal, to process transactions. Their handling of payment data is governed by their own privacy policies.
- Infrastructure providers — datacenter operators and network providers who host the physical and virtual infrastructure on which the Services run. These providers process data on our behalf under written agreements.
- Domain registries and registrars — when you register or transfer a domain, ICANN-mandated registration data is transmitted to the relevant registry.
- Communications and analytics providers — for transactional email delivery, ticket-system operation, and aggregate website analytics.
- Professional advisors — accountants, auditors, and legal counsel where reasonably necessary.
- Authorities — when we are legally compelled by valid legal process, or when disclosure is necessary to protect rights, property, or the safety of any person.
- Successors — in the event of a merger, acquisition, or sale of assets, your information may transfer to the successor entity, subject to the protections of this Policy.
5. International Transfers
Our infrastructure spans multiple regions. By using the Services, you understand that your information may be transferred to and processed in jurisdictions outside your country of residence, including the United States and the European Economic Area. Where required, we implement appropriate safeguards such as Standard Contractual Clauses to protect cross-border transfers.
6. Data Retention
We retain personal data only for as long as reasonably necessary to provide the Services and to comply with our legal obligations:
- Account and billing records — retained for the duration of your account and up to seven years after closure to comply with tax and accounting laws.
- Server access logs — typically 30–90 days, longer when required for security investigations.
- Support correspondence — typically up to 24 months after the ticket is closed.
- Backups — daily backups retained for up to 14 days on a rolling basis.
7. Security
We implement technical and organizational measures appropriate to the risks our customers and we face, including encryption in transit (TLS), encryption at rest where supported, access controls, audit logging, two-factor authentication, isolation between accounts, and routine vulnerability testing. No system is perfectly secure; we encourage you to use strong, unique passwords and to enable two-factor authentication on your account.
8. Your Rights
Depending on your location, you may have the following rights over your personal data:
- Access — to receive a copy of the personal data we hold about you.
- Rectification — to correct inaccurate or incomplete data.
- Erasure — to request deletion of your data, subject to legal retention requirements.
- Restriction — to limit how we process your data.
- Portability — to receive your data in a structured, machine-readable format.
- Objection — to object to processing based on legitimate interests.
- Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.
- Complaint — to lodge a complaint with your local data protection authority.
California residents have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and the right not to be discriminated against for exercising those rights. We do not sell personal information as defined under the CCPA.
To exercise any of these rights, contact us at support@kingshost.net. We will respond within the timeframes required by applicable law.
9. Children's Privacy
The Services are not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by posting a prominent notice on kingshost.net before the changes take effect.
11. Contact
Questions, requests, or complaints about this Policy or your data can be sent to support@kingshost.net. We aim to respond to all privacy inquiries within 30 days.