Privacy Policy

Effective date: October 2, 2026

1. Who Is Responsible for Your Data

This Policy (the “Policy”) explains how Amnezia Hosting (the “Service”) processes the personal data of users of the website, client area and hosting services.

2. What Data We Process

Depending on how you use the Service, we may process:

• account and contact details, such as first name, last name, email address and country;
• order and payment information, including the amount, date and payment method;
• technical data necessary for the operation and security of the Service, including IP address and client area login time;
• IP addresses and other technical identifiers associated with the servers provided;
• requests to and correspondence with support.

Full bank card details are processed by payment providers and are not stored by us, unless expressly stated otherwise.

We do not routinely review the content of Users’ servers on an ongoing basis and do not log the content of their internet traffic.

3. How We Use Data

We process personal data for the following purposes:

Provision of the Service

Creating and maintaining accounts, fulfilling orders, providing hosting, processing payments and providing support.

Legal basis: performance of a contract or steps taken at the User’s request before entering into it.

Security and abuse prevention

Protecting accounts, infrastructure and users; detecting fraud, technical attacks and violations of the terms of use.

Legal basis: our legitimate interests in ensuring security and protecting the Service and its users.

Legal compliance

Fulfilling applicable accounting, tax and other legal obligations, as well as mandatory requests from competent authorities.

Legal basis: compliance with a legal obligation.

Marketing communications

If we use personal data for marketing emails on the basis of consent, such consent may be withdrawn at any time.

4. Who We May Share Data With

We may share personal data only to the extent necessary for the relevant purpose with:

• companies involved in providing and supporting the Service;
• payment providers;
• technical service providers that process data on our behalf;
• professional advisers, where necessary;
• government or other competent authorities, where disclosure is required by law.

We do not sell personal data.

If personal data is transferred to another jurisdiction, including outside the European Economic Area, and applicable law, including the GDPR, requires specific safeguards for such a transfer, we use the mechanisms provided by applicable law to protect such transfers.

5. Retention Period

We keep personal data no longer than necessary for the purposes for which it was collected.

Account data is usually kept for as long as the account is in use and, after it is closed, only for as long as necessary to fulfil legal obligations, keep accounting records, resolve disputes, prevent fraud and protect legitimate interests.

Login logs and security-related technical data are generally kept for no more than 90 days, unless longer retention is required to investigate a specific incident or to fulfil a legal obligation.

At the end of the applicable period, data is deleted or anonymised.

6. Cookies

We may use necessary cookies and similar technologies for the operation of the website, client area, authentication and security.

If optional analytics or marketing cookies are used, they are only used with the necessary consent. Such consent can be changed or withdrawn through the available cookie settings.

7. Data Hosted on the User’s Server

The User alone determines the content and purposes of use of the data they host on the server.

If the User hosts personal data of third parties on the server, they are solely responsible for having a lawful basis for such processing.

To the extent that the Service processes such data solely for the technical provision of hosting services on behalf of the User, the Service acts as a data processor. Where required by law, such processing is governed by the relevant data processing terms.

8. Your Rights

In cases provided for by applicable law, you may:

• access your personal data;
• request its rectification;
• request erasure of the data;
• request restriction of processing;
• receive the data in a portable format;
• object to processing based on legitimate interests;
• withdraw previously given consent at any time;
• lodge a complaint with a competent data protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at privacy@amnezia.host. We respond to requests within the time limits set by applicable law, usually within one month.

9. Security

We apply appropriate technical and organisational measures to protect personal data, taking into account the nature of the data, the methods of processing and the associated risks.

No method of storing or transmitting information is completely secure, but we take reasonable measures to prevent unauthorised access, alteration, disclosure and destruction of data.

10. Changes to the Policy

We may update the Policy from time to time.

The current version is published on the website with its effective date. If changes materially affect how personal data is processed, we provide additional notice where required by applicable law.

11. Contact

For privacy and personal data inquiries: privacy@amnezia.host