Draft for review. Items in [square brackets] are placeholders to be completed with your company's actual details, and the whole policy should be reviewed by a lawyer before it goes live.
1. Overview
This Privacy Policy explains how [Company legal name] ("Hostigrow", "we", "us") collects, uses, stores and shares personal data when you visit our website, create an account, or use our hosting, domain, SSL, web design and digital marketing services.
By using our services you confirm that you have read this policy. If you do not agree with it, please do not use our services.
We process personal data in line with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023.
2. Information we collect
Information you give us
- Account details: name, email address, phone number, company name and postal address.
- Billing details: invoice address, GSTIN (if provided) and payment status. Card and UPI details are handled by our payment processors and are not stored on our servers.
- Domain registration data: registrant name, address, email and phone, which registries require us to collect.
- Support communication: messages, tickets, call notes and attachments you send us.
Information collected automatically
- IP address, browser type, device and operating system, pages visited and referring page.
- Login and security logs for your account and control panel.
- Cookies and similar technologies, described in section 5.
Content you host with us
Files, databases and emails stored on your hosting account belong to you. We process them only to provide the service, such as storing, backing up and delivering them, and we do not use them for marketing.
3. How we use your information
| Purpose | Examples |
|---|---|
| Providing the service | Creating your account, provisioning servers, registering domains, issuing SSL certificates. |
| Billing and legal compliance | Generating invoices, collecting payments, tax records, responding to lawful requests. |
| Support and communication | Answering tickets, sending renewal reminders, service and maintenance notices. |
| Security and fraud prevention | Detecting abuse, unauthorised access and fraudulent payments. |
| Improving our website | Understanding which pages are useful and fixing problems. |
| Marketing (with consent) | Offers and newsletters. You can opt out at any time. |
6. Retention & security
We keep your personal data for as long as your account is active and afterwards only as long as needed for legal, tax, accounting or dispute-resolution purposes (generally [X years] for billing records). Hosted content is deleted [X days] after account termination or non-payment, as described in our Terms of Service.
We use encryption in transit, access controls, monitoring and regular updates to protect data. No system is completely secure, so please use a strong, unique password and keep your login details private. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.
7. Your rights
Subject to applicable law, you may:
- Ask for a summary of the personal data we hold about you and how it is used.
- Ask us to correct inaccurate or incomplete data, or update it.
- Ask us to erase data we no longer need to keep.
- Withdraw consent for optional processing, such as marketing emails.
- Nominate another person to exercise your rights if you are unable to.
- Raise a complaint about how your data is handled.
To use any of these rights, write to us using the details in section 10. We will respond within a reasonable period and no later than the time limits set by law.
8. Children
Our services are meant for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us their data, please contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest version. For significant changes we will notify you by email or through your account.
10. Contact & grievances
[Company legal name]
[Registered address]
GSTIN: [GSTIN]
- Privacy & support: [privacy@yourdomain]
- Phone: +91 1800-000-000
- Grievance Officer: [Name], [grievance@yourdomain]
This policy is governed by the laws of India, and courts at [city] have jurisdiction, subject to applicable law.