INTRODUCTION
Surf Hosting (“we”, “us” or “our”) is committed to protecting the privacy of information of users who engage with our services (the “Services”).
This Privacy Policy sets out the specificities under which your data is stored and controlled, as well as the conditions under which your data is retained. Additionally, it outlines your rights in relation to data that is about you and how you can exercise those rights.
We will not use personal data that you provide to us in a manner inconsistent with the purposes for which you provided it to us, as set out below.
This Privacy Policy is effective as of 25 May 2023. Amendments, additions and/or omissions may be made to this document at any time, with or without prior notice from Surf Hosting. We endeavour to notify users when signicant changes to the Privacy Policy are made at least thirty (30) days before changes take legal effect.
WHAT DATA DO WE COLLECT FROM YOU?
Personal information means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person ("Personal Information").
Surf Hosting, via WHMCS (https://whmcs.com/), may collect the following personal information from you:
- name;
- address;
- telephone number;
- postal address;
- e-mail address
- IP address;
- information about the type of browser you use;
- your operating system;
- the screen resolution of your browser;
- your IPS;
- which pages you view on the website and the time and duration of your visits to the website;
- credit card number (in the case of direct customers);
- company name;
- postal address;
- telephone number;
- credit card number or tax ID number as well as similiar information concerning technical contacts, marketing contacts, and executive contacts within your company or organization.
If you communicate with Surf Hosting, we may collect information relating to that communication whether it takes the form of e-mail, letter, or any other form of communication between you and Surf Hosting or submitted by you to the website (collectively, "User Communications").
If you use one of WHMCS' software products through Surf Hosting such as WHMCS' proprietaryWeb Hosting, Billing and Automation Solution, WHMCS may collect certain informationconcerning such software and concerning the server upon which the software operates. Specificity of this information includes: (a) the licensed or unlicensed status of the software; (b) the sourcefrom which the licence for the software was obtained (i.e., WHMCS or a WHMCS affiliate); or (c)information about the server upon which the software is installed including (i) the public IPaddress, (ii) the operating system and (iii) the use of any virtualisation technologies.
Surf Hosting also collects data in a form that does not, on its own, allow for direct association with any specific individual. We may collect, use, transfer, and disclose non-personal information for any purpose.
PAYMENT INFORMATION AND TRANSACTIONS
When making a payment for a service provided by Surf Hosting, information that is inputted by you is handled and stored by payment processors including, but not limited to, Stripe and PayPal. You can access Stripe’s Privacy Policy at https://stripe.com/privacy and PayPal’s at https://www.paypal.com/us/legalhub/privacy-full. This is referenced as to allow you to access the most up-to-date information from the payment processor.
Information provided to Stripe to allow for transactions to be made cannot be accessed by any employee or agent of Surf Hosting and we cannot be held liable for any losses that may be incurred as a result of failing to check that information provided is correct.
HOW DO WE PROCESS YOUR DATA?
For our legitimate interests, including to:
- allow for you to use our services to their fullest capacity;
- enforce the terms of our services;
- manage our everyday needs, such as monitoring and analyzing usage; and
- manage risk and abuse of the services.
We may also use your data in the following ways:
- to administer our websites;
- to respond to any communications, queries or requests for information or services from you, howsoever received;
- for recruitment, employee and human resources management purposes;
- for auditing purposes;
- for procurement of services;
- for managing our relationships with our partners;
- to comply with our legal or regulatory obligations; and
- to establish, exercise or defend legal claims.
Your data is held in a secure environment and is only accessible to Surf Hosting employees & contractors on a ‘need-to-know’ basis, where it is essential for access to be granted in order to fulfil their job responsibilities. Employees must exercise caution and ensure data is handled appropriately.
STATUTORY COMPLIANCE
Surf Hosting holds itself to the standard expected of businesses as per the California Consumer Privacy Act (CCPA). Specifically, it constitutes the following for consumers:
- the right to know about the personal information a business collects about them and how it is used and shared;
- the right to delete personal information collected from them (with some exceptions);
- the right to opt-out of the sale or sharing of their personal information; and
- the right to non-discrimination for exercising their CCPA rights.
These provisions are incorporated throughout this Privacy Policy.
We will not sell your data in any way, for any reason, at any time. Further, it is only held for as long as is needed for us to allow us to fulfil our responsibilities and to provide you a service.
REQUEST FOR ERASURE OF YOUR DATA
As a user of our Services, you are afforded the right to have your data removed from our database(s) perpetually.
After processing a data erasure request, we are not able to fulfil any requests for reversion as this is not possible. You may only request a data erasure request once every 30 days.
REQUEST FOR DISCLOSURE OF DATA
If you would like to access data about yourself, you may contact us at support@surfhosting.co. Surf Hosting reserves the right to withhold data about you if the disclosure of this data would compromise the interests of the company. An example of prohibited disclosure would be internal communications about you. You may only request a Subject Access Request once every 30 days.
QUESTIONS AND COMPLIANTS
You have the right to complain about the way your data is being used or ask questions about any part of this Privacy Policy. You may contact Surf Hosting’s representatives at support@surfhosting.co.