Privacy Policy

1. Scope

This Privacy Policy explains how HostSteps collects, uses, discloses, secures and retains personal information in connection with its websites, portals, billing, support, infrastructure, communications and professional services.

2. Information We Process

Depending on the service, HostSteps may process account and identity information, organization details, contact information, billing and transaction records, service configuration data, support communications, authentication and security events, device and browser data, IP addresses, logs, usage telemetry and information customers choose to provide.

3. Purposes

Information may be used to create and secure accounts; process orders and payments; provision, operate and support services; communicate service and billing information; prevent fraud and abuse; maintain security and reliability; improve services; meet legal obligations; establish or defend legal claims; and send marketing communications where permitted and subject to applicable preferences.

4. Legal Bases and Customer Roles

Where applicable data-protection law requires a legal basis, processing may rely on performance of a contract, legitimate interests, legal obligations or consent. For customer-controlled personal data hosted or processed within a service, HostSteps may act as a processor or service provider and the customer remains responsible for its instructions, notices and lawful basis.

5. Service Providers and Disclosures

HostSteps may share information with vetted infrastructure, registry, telecommunications, software, payment, fraud-prevention, analytics, communications and professional service providers to the extent necessary to deliver or protect services. Information may also be disclosed where required by law, to protect rights or safety, in connection with a corporate transaction, or with the customer's direction.

6. International Processing

Services may involve processing in more than one country because infrastructure and providers operate globally. Where required, HostSteps will use appropriate contractual, organizational or other transfer safeguards.

7. Security

HostSteps uses administrative, technical and organizational safeguards appropriate to the nature of the service and information, which may include access controls, encryption in transit, logging, monitoring, backups, network security and least-privilege practices. No system can guarantee absolute security.

8. Retention

Information is retained for as long as reasonably necessary for the purposes described, including the customer relationship, service operation, security, accounting, dispute handling and legal or regulatory obligations. Retention periods vary by record type and service.

9. Cookies and Similar Technologies

HostSteps may use essential cookies for authentication, security, checkout and preferences, and may use analytics or other optional technologies where permitted. Available cookie controls and consent choices depend on the site and applicable law.

10. Rights and Requests

Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing, request portability, withdraw consent or lodge a complaint with a competent authority. Requests are subject to identity verification, legal exceptions and HostSteps' role in relation to the data.

11. Children

HostSteps services are not intended for individuals who cannot legally enter the applicable service agreement. HostSteps does not knowingly solicit personal information from children in circumstances where parental authorization is legally required.

12. Changes

This Policy may be updated to reflect legal, technical or business changes. The published version and effective date identify the current policy.

13. Contact

Privacy questions and requests may be sent to support@hoststeps.com.