LidHost Privacy Policy
This document defines the procedure for collecting, using, storing, transferring, and protecting personal data of users of LidHost websites, client interfaces, services, and offerings.
1. General Provisions
Defines the scope of the policy, the categories of data subjects, and which entity may act as the data controller.
<p>1.1. This Privacy Policy and Personal Data Processing Policy defines the procedure for collecting, using, storing, transferring, and protecting personal data of users of websites, client interfaces, services, and offerings provided under the LidHost brand.</p> <p>1.2. For the purposes of this Privacy Policy, personal data is processed by IT HOSTING GROUP OÜ (Estonia), registry code 16099041, registered office: Harju maakond, Tallinn, Pirita linnaosa, Padriku tee 12/3-4, 11912.</p> <p>1.3. The specific legal basis and processing terms applicable to a particular service are determined by the terms of the selected service, payment documents, the order interface, the contract, the public offer, or other documents executed in the course of service delivery.</p> <p>1.4. This Policy applies to personal data of users, customers, customer representatives, website visitors, as well as other persons interacting with LidHost regarding services, support, payment, cooperation, and communications.</p> <p>1.5. Use of the website, placing an order, registering an account, contacting support, paying for services, or otherwise interacting with LidHost means that the user has read this Policy to the extent in which it applies.</p>
2. What Data We May Collect
Lists the categories of personal and technical data that may be processed in connection with the service.
<p>2.1. LidHost may process the following categories of data:</p> <ul> <li>last name, first name, patronymic;</li> <li>company or sole proprietor name;</li> <li>email address;</li> <li>phone number;</li> <li>payment and billing details;</li> <li>addresses, requisites, and other information required for invoicing and performance of obligations;</li> <li>account data, client identifiers, order history, and inquiry history;</li> <li>support correspondence, requests, tickets, and messages;</li> <li>technical connection and service usage data, including IP address, user-agent, device type, browser, operating system, and request date and time;</li> <li>event logs, authentication information, and actions in the control panel and client interfaces;</li> <li>other data voluntarily provided by the user when using the website and services.</li> </ul> <p>2.2. LidHost does not request or process personal data that is not necessary to achieve the stated processing purposes, except where such processing is expressly required by law or necessary for the performance of obligations to the user.</p>
3. Purposes of Personal Data Processing
Explains why collected data is used, from account servicing to infrastructure security.
<p>3.1. Personal data is processed for the following purposes:</p> <ul> <li>account registration and user identification;</li> <li>conclusion, performance, and servicing of contracts and orders;</li> <li>invoicing, payment acceptance, and settlements;</li> <li>provision of hosting services, server resources, access to services, and technical support;</li> <li>processing applications, tickets, complaints, inquiries, and requests;</li> <li>ensuring infrastructure security and preventing abuse, fraud, attacks, and unauthorized access;</li> <li>compliance with legal, regulatory, and tax obligations;</li> <li>internal accounting, auditing, and quality control;</li> <li>improving website, interface, and service functionality;</li> <li>sending service notifications related to the service, order, payment, security, or support;</li> <li>sending informational and marketing messages where permitted by applicable law and supported by an appropriate legal basis.</li> </ul> <p>3.2. Data is not used for purposes incompatible with the stated processing purposes unless otherwise provided by law or by a separate user consent.</p>
4. Legal Bases for Processing
Specifies the legal grounds on which personal data may be processed.
<p>4.1. LidHost processes personal data on one or more of the following grounds:</p> <ul> <li>conclusion and performance of a contract with the user;</li> <li>the need to take steps prior to entering into a contract at the user’s request;</li> <li>compliance with applicable law;</li> <li>the legitimate interest of LidHost, provided that such processing does not violate the rights and freedoms of the data subject;</li> <li>the user’s consent, where such consent is required.</li> </ul> <p>4.2. If processing is based on consent, the user may withdraw it in the manner prescribed by applicable law. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.</p>
5. Communications and Mailings
Separates mandatory service notifications from marketing communications and explains how to opt out.
<p>5.1. LidHost may send the user mandatory service messages related to account security, invoicing, service status, technical maintenance, support, order fulfillment, or changes to service terms.</p> <p>5.2. Such messages may be sent regardless of the user’s marketing preferences if they are necessary for contract performance, legal compliance, or service security.</p> <p>5.3. Marketing, promotional, and informational mailings about new products, offers, and events are sent only in those cases and to the extent permitted by applicable law.</p> <p>5.4. The user may unsubscribe from marketing messages via the link in the email or by contacting support at: <a href="mailto:sales@lidhost.com">sales@lidhost.com</a>.</p>
6. Transfer of Data to Third Parties
Describes who data may be shared with and under what conditions.
<p>6.1. LidHost does not sell users’ personal data and does not disclose it to third parties without a lawful basis.</p> <p>6.2. Personal data may be transferred:</p> <ul> <li>within the LidHost group of companies to the extent necessary for servicing, billing, support, compliance, and internal operations;</li> <li>to payment providers, banks, and other settlement participants;</li> <li>to technical infrastructure providers, data centers, connectivity providers, monitoring systems, and security systems;</li> <li>to contractors providing support, development, maintenance, analytics, or integration services, subject to confidentiality and data protection obligations;</li> <li>to government authorities, courts, law enforcement agencies, and other authorized bodies where required by law;</li> <li>to consultants, auditors, and other persons where necessary to protect LidHost’ rights and legitimate interests or to comply with mandatory requirements.</li> </ul> <p>6.3. All persons to whom data is transferred receive access only to the amount of information objectively necessary to achieve the relevant purpose.</p>
7. Cross-Border Data Transfer
Explains international data processing in connection with distributed infrastructure and contractors.
<p>7.1. Due to the international nature of LidHost’ activities, personal data may be processed and transferred between jurisdictions in which group companies, contractors, data centers, and other parties involved in service delivery are located.</p> <p>7.2. Such transfer is carried out on lawful grounds and with reasonable data protection measures required by applicable law.</p> <p>7.3. The user understands and agrees that the provision of certain services may objectively require international data transfer where it is impossible to ensure service operation or contract performance otherwise.</p>
9. Data Retention Periods
Describes the general storage principles and factors affecting retention periods.
<p>9.1. Personal data is stored no longer than necessary to achieve the processing purposes unless a different period is required or permitted by applicable law, contract terms, tax, accounting, compliance, or archival obligations.</p> <p>9.2. The retention period may depend on the category of data and the purpose of its processing, including:</p> <ul> <li>the period of account activity and service provision;</li> <li>retention periods for financial and accounting documents;</li> <li>periods required for handling claims, disputes, incident investigations, and protecting LidHost’ rights;</li> <li>retention periods for backups, logs, and technical records.</li> </ul> <p>9.3. After the processing purpose has been achieved or the legal basis has ceased, the data must be deleted, anonymized, or otherwise cease to be processed unless otherwise required by law.</p>
10. Deletion and Updating of Data
Sets out how a user may request correction, updating, or deletion of personal data.
<p>10.1. The user may contact LidHost with a request to clarify, update, correct, or delete personal data if such data is inaccurate, outdated, incomplete, excessive, or processed in violation of the law.</p> <p>10.2. Requests concerning personal data should be sent to: <a href="mailto:sales@lidhost.com">sales@lidhost.com</a>.</p> <p>10.3. LidHost reviews such requests within a reasonable time, taking into account the requirements of applicable law, the nature of the request, and the need to verify the applicant’s identity.</p> <p>10.4. Deletion of data may be limited where further storage is necessary:</p> <ul> <li>for contract performance;</li> <li>for compliance with the law;</li> <li>for tax, accounting, or compliance records;</li> <li>for the establishment, exercise, or defense of legal claims;</li> <li>for information security, incident investigation, and prevention of abuse.</li> </ul> <p>10.5. Backups and archived records may not be deleted instantly but within internal retention cycles and technical procedures.</p>
11. Security of Personal Data
Lists organizational and technical measures used to protect personal data.
<p>11.1. LidHost takes reasonable organizational, legal, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, dissemination, loss, and other unlawful actions.</p> <p>11.2. In particular, the following may be used:</p> <ul> <li>access rights segregation;</li> <li>authentication and authorization systems;</li> <li>activity logging;</li> <li>security event monitoring;</li> <li>backup procedures;</li> <li>antivirus and network protection;</li> <li>contractual confidentiality obligations with employees and contractors.</li> </ul> <p>11.3. At the same time, no method of data transmission over the internet or electronic storage can guarantee absolute security. The user must also take reasonable measures to protect their credentials, devices, and communication channels.</p>
12. User Rights
Contains the list of data subject rights and the procedure for exercising them.
<p>12.1. Depending on applicable law, the user may have the right to:</p> <ul> <li>receive information about the processing of their personal data;</li> <li>request clarification, correction, or updating of data;</li> <li>request deletion of data;</li> <li>request restriction of processing;</li> <li>object to processing in cases provided by law;</li> <li>withdraw previously granted consent;</li> <li>opt out of marketing messages;</li> <li>appeal the controller’s actions to the competent authority or to a court.</li> </ul> <p>12.2. To exercise the above rights, the user may contact: <a href="mailto:sales@lidhost.com">sales@lidhost.com</a>.</p> <p>12.3. LidHost may request additional information necessary to identify the applicant and prevent unlawful access to third-party data.</p>
13. Data of Minors
Clarifies that the services are not intended for persons unable to independently enter into legally significant relations.
<p>13.1. LidHost services are not intended for persons who have not reached the age allowing them to independently enter into legally significant relations in accordance with applicable law, unless otherwise expressly provided by the relevant service.</p> <p>13.2. If LidHost becomes aware that personal data has been provided in violation of applicable requirements, the company may take measures to delete such data or restrict the relevant account.</p>
14. Changes to the Policy
Describes the procedure for updating the policy and when a new version takes effect.
<p>14.1. LidHost may amend this Policy at any time in connection with service development, changes in business processes, updates in legislation, regulatory requirements, or internal procedures.</p> <p>14.2. The current version of the Policy is published on the LidHost website and takes effect from the moment of publication unless another effective moment is additionally specified.</p> <p>14.3. Where required by law or where the changes are materially significant, LidHost may additionally notify users by an available method.</p>
15. Contacts
Provides the contact channel for matters related to personal data and privacy.
<p>For matters related to personal data processing, privacy, and the exercise of data subject rights, you may contact us at:</p> <p><strong>Email:</strong> <a href="mailto:sales@lidhost.com">sales@lidhost.com</a></p>