Privacy Policy

This Privacy Policy explains how Webhosting Services Ltd (referred to as “we,” “us,” or “our”) collects, uses, stores, discloses, and protects your personal data when you access or use our services, including hosting, domain registration, virtual and dedicated servers, and related products (collectively, “Services”), as defined in our Terms of Service (“ToS”). By using our Services, you agree to the practices described in this Privacy Policy and the ToS, subject to applicable laws.

We are committed to complying with applicable data protection laws, including Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”) and other relevant laws. Webhosting Services Ltd is located at Prestige Business Center, bul. “Patriarh Evtimiy” 49, 4th floor, 1463 Sofia, Bulgaria (VAT No: BG207127194) and acts as the data controller for personal data processed in connection with the Services.

When you use our Services to process personal data of your own customers (e.g., hosting their websites or emails), you act as the data controller, and we act as a data processor on your behalf. We process such data only according to your instructions, this Privacy Policy, and the ToS.

Contact for GDPR and Data Protection Inquiries

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us at: [email protected].

Legal Bases for Processing

We collect and process your personal data based on the following legal grounds under GDPR Article 6(1):

• Consent – where you have given clear consent (e.g. for marketing).
• Contractual necessity – to provide the Services you requested.
• Legal obligation – to comply with tax, accounting or other legal requirements.
• Legitimate interests – such as fraud prevention, security, service improvement and defending legal claims (provided these do not override your rights).

Purposes of Processing

• Account creation, management and provision of Services
• Contract performance (hosting, domains, billing)
• Customer support and technical assistance
• Security, fraud prevention and abuse protection
• Legal and regulatory compliance
• Service-related communications
• Marketing (only with your consent or where permitted by law)

Types of Personal Data We Collect

Category	Examples	Purpose	Legal Basis
Identifying Data	Name, email, phone, country	Account management, communication	Contract / Consent
Technical Data	IP address, browser info, logs	Security, analytics, fraud prevention	Legitimate interests / Contract
Billing Data	Payment details, invoice data	Billing and accounting	Contract / Legal obligation
Email Data	Hosted email content and logs	Providing email service	Contract

Email Accounts and File Storage

Email messages are stored as files in your hosting account. Any person with file-level access (FTP, SSH, File Manager) can read them. You are responsible for managing access permissions to your account.

Data Retention

We keep your personal data only as long as necessary for the purposes described or as required by law (e.g. up to 10 years for accounting records). Upon termination of your account, we will delete or anonymize your data, except where retention is required by law.

International Data Transfers

Your data may be transferred to and processed in countries outside the EEA (e.g. USA, Canada). We ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) where required by GDPR.

Your Rights

You have the following rights (subject to legal limitations):

• Right of access, rectification, erasure (“right to be forgotten”)
• Right to restrict processing or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority (e.g. Bulgarian Commission for Personal Data Protection)

To exercise any of these rights, please contact us at [email protected].

Use of AI and Third-Party Support Tools

We use artificial intelligence tools, including services provided by xAI, to assist with customer support, ticket handling, and improving response quality. When you contact our support, relevant information from your ticket or account may be processed by these AI systems to provide faster and more accurate assistance. We ensure that appropriate data protection safeguards are in place with such providers, including Standard Contractual Clauses where required. You can request that your support interactions are handled without AI assistance by notifying our support team.

Cookie Policy

We use essential, functional, analytics and marketing cookies. You can manage your preferences through your browser or our cookie consent tool (where available). For more information on how to opt out of analytics and advertising cookies, please refer to the respective third-party policies (Google, Meta, etc.).

Security

We implement appropriate technical and organizational measures to protect your data. However, no system is 100% secure. We are not liable for breaches caused by factors beyond our reasonable control.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be notified via email or through the Services. Continued use of the Services after changes constitutes your acceptance of the updated policy.

Contact Information

Webhosting Services Ltd
Prestige Business Center, bul. “Patriarh Evtimiy” 49, 4th floor
1463 Sofia, Bulgaria
Email: [email protected]

Updated: June 23, 2026