What we collect
Enough to provide the service and invoice you.
Account details such as your name, email address, billing address and phone number. Technical data including IP addresses, server logs and support correspondence. Payment details are handled by our payment providers and are never stored on our systems.
Why we collect it
To run your service and answer your tickets.
To provide and maintain your services, process payments, respond to support requests, detect abuse and comply with legal obligations. Registrant details for domain registrations are passed to the relevant registry, as their rules require.
What we never do
We do not sell it. Ever.
We do not sell, rent or trade personal data. We do not add customers to marketing lists without explicit opt-in. We do not use your content for advertising, profiling or model training of any kind.
Who we share it with
Only who we have to, and only what they need.
Payment processors, domain registries, certificate authorities and infrastructure providers, each receiving only what is necessary for their function. We disclose data to authorities only where legally compelled, and we notify you where we are permitted to.
How long we keep it
As long as your account exists, plus a legal minimum.
Account data is retained while your account is active and for a period afterwards to meet accounting and tax obligations, typically seven years for financial records. Server logs are retained for a shorter operational window. Content on cancelled services is deleted after the retention period stated in your plan.
Your rights
You can ask for it, correct it, or have it deleted.
You may request a copy of the personal data we hold, ask us to correct inaccuracies, or request deletion where no legal obligation requires us to retain it. Requests go to privacy@hostelevate.com and are answered within thirty days.
Cookies
Only what the site needs to work.
Our website uses cookies necessary for session handling and currency preference. We use privacy-respecting analytics that do not track individuals across sites, and we do not run advertising or third-party tracking pixels.
Security and breaches
We will tell you if something goes wrong.
Data is encrypted in transit and access to production systems is restricted and logged. In the event of a breach affecting personal data we notify affected customers and the relevant authority within the timeframes the applicable law requires.