How We Collect, Use, Store and Protect Your Personal Information
Proposed Last Updated: 21 October 2026
1. Introduction
At iHost.al, protecting the privacy, security, and confidentiality of our customers’ personal information is an important responsibility.
This Privacy Policy explains how iHost.al (“Company”, “we”, “us”, or “our”) collects, processes, stores, shares, and protects personal information when you visit our website, register an account, purchase services, or communicate with our support team.
We are committed to handling personal data transparently and in accordance with applicable data protection legislation, including Albanian Law No. 124/2024 “On Personal Data Protection” and, where applicable, the European Union General Data Protection Regulation (GDPR).
This Policy applies to visitors, customers, account holders, and individuals who interact with our services.
2. Information We Collect
We collect personal information that is reasonably necessary to provide our services, manage customer relationships, comply with legal obligations, and maintain the security of our infrastructure.
2.1 Personal and Contact Information
When registering or purchasing services, we may collect:
Full name
Company or organization name
Email address
Telephone number
Billing address
Country and postal code
Tax identification or company registration information, where required
2.2 Account Information
We may process information associated with your customer account, including:
Account identification details
Authentication and security information
Purchased services
Service configuration information
Subscription and renewal details
Account activity and relevant security events
Passwords and other authentication secrets must be handled using appropriate technical security measures.
2.3 Billing and Transaction Information
To process orders and maintain accounting records, we may collect:
Invoice information
Transaction references
Payment dates and amounts
Payment method type
Payment status
Refund and dispute records
Applicable tax information
We aim to collect only the information required for legitimate billing and administrative purposes.
2.4 Technical Information
When customers visit our websites or use hosting services, we may automatically process technical information such as:
IP addresses
Browser type
Operating system
Access timestamps
Server connection logs
Security events
Service usage statistics
Diagnostic and error logs
This information is used to operate, protect, troubleshoot, and improve our systems.
3. How We Use Personal Information
We process personal information for the following purposes:
Service Provision: To register accounts, activate hosting services, manage domains, provide infrastructure, and fulfill customer agreements.
Billing and Payments: To generate invoices, verify payments, manage renewals, and maintain legally required financial records.
Customer Support: To respond to technical inquiries, resolve incidents, and communicate about customer services.
Security and Abuse Prevention: To investigate suspicious activity, detect fraud, prevent unauthorized access, and protect our infrastructure.
Legal Compliance: To meet applicable accounting, taxation, data protection, and other legal obligations.
Service Communications: To send important notifications concerning renewals, maintenance, service interruptions, and security matters.
Marketing Communications: To send promotional messages only where permitted by applicable law, with appropriate consent or another valid legal basis and applicable opt-out rights.
We do not sell customers’ personal information to advertisers or data brokers.
4. Legal Basis for Processing
Depending on the purpose and applicable law, we process personal data on one or more of the following legal bases:
Contractual necessity: To provide services requested or purchased by customers.
Legal obligation: To comply with tax, accounting, regulatory, and other applicable legal requirements.
Legitimate interests: To protect infrastructure, prevent fraud, maintain service security, and administer our business, where those interests are not overridden by individuals’ rights.
Consent: Where consent is legally required, including for certain marketing activities or non-essential cookies.
Where processing is based on consent, individuals may withdraw that consent in accordance with applicable law.
Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.
5. Communications With Our Staff
Customers may communicate with iHost.al through:
Support tickets
Email
Telephone
Live chat
Other official communication channels
Communications may be recorded or retained where necessary for customer support, dispute resolution, quality assurance, fraud prevention, security, or legal compliance.
Access to customer communications is restricted to authorized personnel and service providers who require the information for legitimate operational purposes.
We do not make private support conversations publicly available.
Information may be disclosed where legally required or otherwise permitted under this Privacy Policy.
6. Payment Information and Security
iHost.al uses external payment providers and banking services to process customer payments.
Depending on the selected payment method, payment processing may be handled by providers such as PayPal, card payment processors, or financial institutions.
Payment providers may independently collect and process information necessary to authorize and complete transactions.
iHost.al does not require customers to disclose their PayPal passwords to our staff.
We do not intentionally store complete payment card numbers or card security codes (CVV/CVC) in our customer billing database.
We may retain transaction identifiers, payment status, invoice records, and other information needed for billing, reconciliation, fraud prevention, and legal compliance.
If payment tokenization or saved payment methods are enabled, limited payment identifiers or tokens may be stored according to the applicable payment integration.
Customers should review the privacy policies of the payment providers they use.
7. Cookies and Website Technologies
Our websites and client portals may use cookies and similar technologies to:
Maintain authenticated sessions
Remember user preferences
Improve website functionality
Support account security
Detect potentially fraudulent activity
Measure website performance where applicable
Some cookies are necessary for the operation of the website.
Non-essential analytics or marketing cookies will be used only where permitted by applicable law and subject to any required consent.
Visitors can control cookies through their browser settings and any cookie preference controls made available on our website.
8. How We Protect Personal Information
We use technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, and misuse.
Depending on the system and relevant risk, safeguards may include:
Encrypted connections using HTTPS/TLS
Access controls and authentication
Restricted administrative permissions
Network security measures
Security monitoring and logging
Software security updates
Backup and recovery procedures
Account authentication protections
Internal access restrictions
No online service or storage system can guarantee absolute security.
We regularly assess appropriate security measures and respond to identified threats.
9. Data Storage and Hosting Infrastructure
Customer data may be stored and processed on infrastructure operated or administered by iHost.al and its authorized infrastructure providers.
Data may be processed in Albania or other countries depending on the purchased service, infrastructure configuration, and authorized service providers.
Where personal information is transferred internationally, we apply the safeguards required by applicable data protection laws.
Specific hosting locations, recipient categories, and international transfer mechanisms should be disclosed where required by law.
10. Sharing Information With Third Parties
We do not sell personal data to third parties.
However, certain information may be shared with authorized organizations where necessary for legitimate purposes.
These may include:
Payment processors and financial institutions
Domain registrars and registry operators
Data center and infrastructure providers
Technical service providers
Security and fraud prevention providers
Professional advisers
Competent public authorities where legally required
We seek to limit disclosures to information necessary for the relevant purpose.
Where third parties process personal data on our behalf, appropriate contractual and security safeguards will be used as required by applicable law.
11. Domain Registration Information
When customers register domain names, certain information may need to be transmitted to domain registrars or registry operators.
This may include registration contact details and information required for domain ownership, administration, and compliance.
The processing and disclosure of domain registration data may be governed by the relevant registry rules and applicable data protection requirements.
Where supported, domain registration privacy features may be available.
12. Customer-Hosted Data
Customers may store personal data, files, databases, websites, and other content using iHost.al hosting services.
For customer-hosted content, the customer generally determines the purposes and means of processing the information, while iHost.al provides the contracted hosting infrastructure.
Depending on the specific service and processing activities, iHost.al may act as a data processor on behalf of the customer.
Customers remain responsible for ensuring that information processed through their websites and applications is collected and used lawfully.
Where required, appropriate Data Processing Agreements (DPAs) will govern the processing of customer-controlled personal data.
13. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.
Retention periods depend on the nature and purpose of the information.
Examples include:
Account records: Retained during the customer relationship and, where justified, for a limited period afterward.
Billing records: Retained for the period required by applicable accounting and taxation laws.
Support communications: Retained according to operational needs and the applicable retention schedule.
Security logs: Retained for a proportionate period necessary for security, abuse prevention, and incident investigations.
Hosted customer data: Retained according to the active service agreement, termination procedures, and backup retention arrangements.
We periodically review data retention requirements and remove or anonymize information when it is no longer required.
14. What Happens After Service Termination?
When a hosting service is canceled, expires, or is terminated, access to the associated hosting environment may be disabled.
Customer-hosted files, databases, email content, and related service data may subsequently be deleted according to our termination and retention procedures.
Important: Termination of a hosting service does not necessarily mean that every associated record is deleted immediately.
Certain information may remain temporarily or for legally required periods, including:
Invoices and accounting records
Payment and transaction references
Information required for legal compliance
Records relevant to outstanding disputes
Security and abuse investigation records
Data retained in backups pending expiration of the applicable backup retention period
Backups are removed according to the relevant backup lifecycle and retention policies.
Once data has been permanently deleted from active systems and applicable backups, recovery may no longer be possible.
Customers are responsible for obtaining their own backups before termination.
15. Your Privacy Rights
Depending on applicable law and the circumstances of processing, individuals may have the right to:
Request access to their personal information.
Request correction of inaccurate or incomplete information.
Request deletion of personal data.
Request restriction of certain processing activities.
Object to processing based on applicable legal grounds.
Request portability of eligible personal information.
Withdraw consent where processing relies on consent.
Submit a complaint to a competent data protection authority.
Some requests may be restricted where information must be retained to comply with a legal obligation or establish, exercise, or defend legal claims.
We may request reasonable identity verification before processing requests involving personal information.
Requests will be handled within the time limits required by applicable law.
16. Marketing and Email Preferences
We may send customers necessary transactional and service-related communications, including:
Payment and renewal notifications
Security alerts
Maintenance announcements
Service status information
Important account notifications
These communications are not necessarily marketing messages.
Promotional communications will be managed separately and sent only where legally permitted.
Customers may withdraw marketing consent or unsubscribe from promotional communications using the available methods.
17. Children’s Privacy
Our services are primarily intended for individuals and organizations legally authorized to enter into contracts.
We do not knowingly collect children’s personal information in violation of applicable laws.
Where we discover that personal data has been collected unlawfully from a child, we will take appropriate corrective action.
18. Data Breaches and Security Incidents
If a personal data breach occurs, iHost.al will assess the incident, take reasonable containment measures, and investigate the potential impact.
Where required under applicable data protection legislation, we will notify the competent supervisory authority and affected individuals within the relevant statutory timeframes.
Our response will take into account the nature of the incident, affected information, associated risks, and applicable legal obligations.
19. Links to Third-Party Websites
Our websites may contain links to external websites, payment platforms, registrars, and other third-party services.
We are not responsible for the privacy practices or content of independent third-party websites.
Customers should review the privacy policies of external services before providing personal information.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
Applicable laws and regulations
Data processing activities
Security practices
Technology and infrastructure
Business operations
Services offered
Material changes will be communicated where required by applicable law.
The latest version will be published on the official iHost.al website with its corresponding revision date.
21. Contact and Privacy Requests
For questions, complaints, or requests regarding personal data, customers may contact us through our official support channels.
At iHost.al, we respect the privacy of our customers and recognize the importance of maintaining secure and reliable digital services.
We are committed to collecting only information appropriate for legitimate business purposes, using personal data transparently, and implementing suitable safeguards to protect the information entrusted to us.
By using our services, you acknowledge that you have been informed of the personal data processing practices described in this Privacy Policy. Where consent is required by law, it will be requested separately.
Our Clients
"We love what we do & We do what our clients love..."
