Legal
Privacy policy
What personal data we collect, why we collect it, who we share it with, and the rights you have over it.
Last updated September 2026
Please have a lawyer review this. This document is a well-structured starting point written for a US-based shared hosting and domain reseller, not legal advice. Have counsel licensed in Missouri review it before you publish.
What we collect
Account and billing data: name, business name, postal address, email address, telephone number, and tax identifiers where required. Card details are captured and stored by our payment processor; we never store full card numbers.
Domain registration data: registrant, administrative, technical, and billing contact details, which we are required to pass to the registry and registrar.
Technical and service data: server and application logs, IP addresses, access and error logs, resource usage, and support correspondence.
Website analytics: aggregate, privacy-respecting usage statistics for this website. We do not use advertising trackers or third-party marketing cookies.
Why we process it
To provide and support the services you buy; to take payment and prevent fraud; to register and administer domains as the registry requires; to secure the platform and investigate abuse; to send service and security notices; and to meet legal and accounting obligations. Where we rely on legitimate interests, we have balanced those against your rights.
Who we share it with
Only where necessary: our infrastructure and data centre providers; our ICANN-accredited registrar partner and the relevant domain registries; our payment processor; our billing and support platform; and professional advisers or authorities where legally required. We do not sell personal data and we do not share it for third-party advertising.
Domain data and public WHOIS
Registries require registrant contact data. Where the registry permits it we enable WHOIS privacy by default at no cost, which substitutes proxy details in the public record. Some country-code and restricted extensions do not allow this, and for those your details may appear publicly. Registries and registrars may also be required to disclose data under ICANN policy or applicable law.
How long we keep it
Account and billing records are retained for seven years to meet accounting and tax obligations. Server and access logs are retained for ninety days. Support tickets are retained for three years. Hosted content and backups are deleted within thirty days of account termination. Domain registration data is retained for as long as the registry requires.
Security
Encryption in transit and at rest, access control on a least-privilege basis, two-factor authentication for staff and customers, network and host-level firewalling, and logged administrative access. No system is perfectly secure; if a breach affects your personal data we will notify you and any applicable regulator without undue delay.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA and CPRA, including the right to know and to delete, and the right not to be discriminated against for exercising them — we do not sell or share personal information as those terms are defined. Residents of the EEA and UK have rights under the GDPR and may complain to their supervisory authority.
To exercise any right, email privacy@greatcloudhosting.com. We respond within thirty days and will verify your identity first. Note that we cannot delete domain registration data the registry requires us to retain.
Children
Our services are for business and adult use. We do not knowingly collect personal data from anyone under sixteen. If you believe a child has provided us data, contact us and we will delete it.
International transfers
We operate from the United States and our infrastructure and vendors may process data there and elsewhere. Where we transfer personal data out of the EEA or UK we rely on appropriate safeguards, including the European Commission's standard contractual clauses.
Changes
We will post material changes to this policy here and email account holders before they take effect.
Contact
Questions about this document: legal@greatcloudhosting.com, or write to Great Cloud Hosting, a Great Cloud Holdings company, St. Louis, Missouri, United States.