Comprehensive Privacy Policy

1. Introduction

Welcome to Wondrhost ("we," "our," or "us"). We recognize that your privacy is paramount. This Comprehensive Privacy Policy explains in detail how we collect, use, disclose, safeguard, and manage your personal data when you use our website, client portal (WHMCS), Web Hosting, Reseller Hosting, VPS, Dedicated Servers, Server Licenses, and associated support services.

By registering an account, purchasing our services, or interacting with our network infrastructure, you explicitly consent to the data practices described in this policy. If you do not agree with the terms outlined herein, please discontinue use of our site and services immediately.

2. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with you ("Personal Information"). We collect this data in order to provision hosting environments, activate software licenses, process payments, and provide technical support.

2.1 Information You Provide Directly to Us

• Account & Contact Data: When you register an account in our client portal, we collect your full name, email address, postal address, phone number, company name (if applicable), and WhatsApp contact details.
• Financial & Billing Data: When you purchase services, we collect data necessary to process your transaction. Note: Wondrhost does not store full credit card numbers or sensitive payment details directly on our servers. All transactions are securely processed and tokenized via PCI-DSS compliant third-party gateways such as Razorpay, PayPal, Stripe, Cashfree, or designated cryptocurrency processors.
• Verification Data (KYC): In order to maintain a secure network and prevent fraud, spam, or abuse, we may occasionally request government-issued identification or official business registration documents to verify your identity before provisioning a Dedicated Server or VPS.
• Communications & Support Data: When you open a support ticket, email us, or chat with our team via WhatsApp or Live Chat, we retain records of those communications, including technical logs you share, to assist you effectively and improve our service quality.

2.2 Information Collected Automatically

When you access our website or utilize our hosting infrastructure, we automatically collect certain technical data:

• Usage & Device Data: We log your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits to our main website and client portal.
• Server & Infrastructure Logs: As a web hosting provider, our network infrastructure, firewalls (e.g., Imunify360, Cloudflare), and operating systems automatically log technical metadata about the traffic flowing to and from the websites or servers you host with us. This is strictly for security analysis, DDoS mitigation, and performance monitoring.
• Cookies & Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to keep you authenticated in your client portal, track affiliate referrals, and analyze website traffic patterns.

3. How We Use Your Information

Wondrhost uses your Personal Information strictly for the following business and operational purposes:

• Service Provisioning & Delivery: To automatically or manually provision your Web Hosting, VPS, Dedicated Server, or to generate and activate your software licenses (e.g., cPanel, LiteSpeed) upon receipt of payment.
• Domain Name Registration: To register, renew, and manage domain names on your behalf through our accredited registrar partners.
• Account Management & Billing: To manage your subscriptions, process recurring billing, generate invoices, and send administrative emails or WhatsApp notifications regarding your account status (e.g., suspension or termination notices).
• Customer Support & Technical Assistance: To troubleshoot technical issues, perform requested Server Setups or Website Migrations, and respond comprehensively to your inquiries.
• Security & Network Integrity: To monitor our infrastructure, detect malicious activity, prevent fraud, mitigate DDoS attacks, and enforce our Terms of Service.
• Legal & Regulatory Compliance: To comply with applicable laws, ICANN regulations for domain registration, tax obligations, and valid law enforcement requests.

4. How and Why We Share Your Information

Wondrhost does not sell or rent your Personal Information to third parties for marketing purposes. We only disclose your data to trusted partners and third parties under the following strict circumstances:

4.1 Third-Party Vendors and Service Providers

We share necessary data with vendors who perform specialized services on our behalf. These include:

• Payment Gateways: To process credit cards, UPI, and other payment methods securely.
• Software License Providers: To issue and validate licenses for software installed on your server. We must share your server's IP address with companies like cPanel, CloudLinux, LiteSpeed, JetBackup, and Virtualizor to activate the software.
• SSL Certificate Authorities: To generate and validate free Let's Encrypt or premium SSL certificates for your hosted domains.
• Data Center Partners: In some instances, we may need to share IP allocation data with our upstream data center providers in India or France for routing and security purposes.

4.2 Domain Registrars & The Public WHOIS Database

When you register a domain name through Wondrhost, we are mandated by ICANN (the Internet Corporation for Assigned Names and Numbers) to collect your contact information (Name, Address, Phone, Email) and share it with the relevant domain registry.

Depending on the specific Top-Level Domain (TLD) and whether you have purchased/enabled WHOIS Privacy Protection, this contact information may be made publicly accessible in the global WHOIS database. By registering a domain, you consent to this mandatory data sharing.

4.3 Legal Requirements and Law Enforcement

We may disclose your Personal Information, server logs, or hosted data if we believe in good faith that such disclosure is necessary to:

• Comply with a valid legal obligation, subpoena, warrant, or court order.
• Protect and defend the rights, property, or safety of Wondrhost, our network, our clients, or the public.
• Investigate, prevent, or take action regarding suspected fraud, abuse, illegal activities, or severe violations of our Terms of Service (e.g., phishing, botnets).

5. Data Security Measures

Protecting your data and our infrastructure is our top priority. We implement robust, industry-standard security measures, including:

• Encryption: SSL/TLS encryption for all data transmission between your browser and our client portal/website.
• Infrastructure Security: Enterprise-grade firewalls, Imunify360 proactive defense, and automated DDoS mitigation across our network.
• Access Controls: Strict internal access controls and authentication protocols for our staff managing the servers.
• Software Updates: Regular patching and updates (e.g., via KernelCare) to our billing systems and server operating systems.

Despite these extensive measures, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

6. Data Retention Policies

We retain your Personal Information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy. Specifically:

• Active Accounts: We retain your data for the duration your Wondrhost account remains active.
• Cancelled Accounts: If you cancel your services, we may retain certain account, billing, and transactional data for a period of up to seven (7) years to comply with global tax, accounting, and legal obligations, or to resolve potential disputes and enforce our agreements.
• Server Data: Upon termination of a VPS, Dedicated Server, or Hosting plan, all hosted data (websites, databases, emails) is permanently and irrevocably deleted from our servers during the automated termination process.

7. Your Privacy Rights and Controls

Depending on your jurisdiction, you may have specific rights regarding your personal data. Wondrhost provides you with the ability to:

• Access and Update: You can view, edit, and update your personal contact details, billing information, and password directly within your Wondrhost Client Area at any time.
• Data Deletion: You may request the deletion of your account and associated personal data by opening a support ticket. Please note that we must retain certain transactional data for legal compliance, even if your active hosting services are terminated.
• Opt-Out of Communications: You may opt-out of promotional or marketing emails by clicking the "unsubscribe" link at the bottom of the email, or by adjusting your email preferences in the Client Area. You cannot opt-out of essential transactional or administrative emails (e.g., invoice notices, server suspension warnings).

8. Changes to This Privacy Policy

Wondrhost reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our business practices, technology, or legal requirements. We will post the revised policy on this page and update the "Last Updated" date at the top. We encourage you to review this policy periodically. Continued use of our services after any modifications signifies your acceptance of the updated policy.

9. Contact Information

If you have any questions, concerns, or requests regarding this Comprehensive Privacy Policy, our data practices, or your personal information, please contact us:

Support System: Open a ticket via your Wondrhost Client Area.
WhatsApp Support: +91 7209133179
Email: Support@wondrhost.net