Effective Date: September 15, 2025
Company: VastyHost operated by ActivoAds EOOD – Bulgaria – www.vastyhost.com

At VastyHost, we respect and protect your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our hosting services. As a company based in the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Information We Collect

We may collect the following types of information when you use our services:

• Account Information – name, email address, billing details, and login credentials.

• Payment Information – processed securely through third-party payment providers (we do not store credit/debit card details).

• Service Data – domain registration details, server usage logs, and support tickets.

• Technical Data – IP addresses, browser type, device information, and cookies for website functionality and analytics.

2. How We Use Your Information

We process your data to:

• Provide and manage hosting services.

• Process payments and issue invoices.

• Offer customer support.

• Improve our website, services, and security.

• Comply with legal obligations.

• Send service-related communications (never spam).

3. Legal Basis for Processing

We rely on the following legal grounds under GDPR:

• Contractual necessity – to deliver the services you purchase.

• Legal obligations – to comply with EU laws (e.g., tax regulations).

• Legitimate interests – improving services and ensuring security.

• Consent – for optional activities such as marketing communications.

4. Data Sharing & Transfers

We do not sell your personal data. We may share your information with:

• Trusted service providers (e.g., payment processors, domain registrars, data centers).

• Regulatory or legal authorities when required by law.

If data is transferred outside the EU/EEA, we ensure adequate safeguards such as Standard Contractual Clauses (SCCs).

5. Data Retention

We retain personal data only as long as necessary:

• Account information – while you remain a customer and up to 7 years after (for legal/tax compliance).

• Technical logs – typically retained for 12 months for security purposes.

• Marketing data – until you withdraw consent.

6. Your Rights Under GDPR

As an EU user, you have the right to:

• Access the personal data we hold about you.

• Request correction or deletion of your data.

• Restrict or object to data processing.

• Data portability (receive your data in a machine-readable format).

• Withdraw consent at any time.

• File a complaint with your local Data Protection Authority (DPA).

7. Security Measures

We implement technical and organizational measures to protect your data, including:

• SSL encryption.

• Firewalls and intrusion detection.

• Access controls and secure authentication.

• Regular security audits.

8. Cookies & Tracking

We use cookies to ensure website functionality, improve performance, and analyze traffic. You can manage or disable cookies through your browser settings.

9. Contact Us

For questions or privacy-related requests, contact us at: 📧 support@vastyhost.com

10. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.