1. Introduction & Overview

Welcome to Apaxhost (accessible at apaxhost.com). Apaxhost is a trading name and division operated under Apex Digital Group LTD (“we,” “us,” or “our”).

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website, register for an account, or utilize our web hosting infrastructure, VPS, dedicated servers, domain management, and cloud services (collectively, the “Services”).

By accessing or using Apaxhost, you agree to the collection and use of information in accordance with this Privacy Policy.

2. The Data We Collect

We collect different types of information from and about users of our Services, including:

A. Personal Identification Data

• Contact Information: Name, email address, phone number, physical/billing address, and business name.

• Account Credentials: Passwords (stored only in secure, hashed formats), usernames, and security verification details.

• Billing & Payment Data: Payment processor transaction IDs and payment methods. (Note: We do not directly store full credit/debit card numbers on our servers; payments are processed securely by PCI-DSS compliant third-party payment gateways like Stripe).

B. Technical & Infrastructure Data

• Server Logs & Usage Data: IP addresses, browser type, operating system, access timestamps, bandwidth usage, resource consumption metrics, and referring URLs.

• Domain & DNS Information: Nameserver records, WHOIS contact details, and DNS zone configurations required to route domain services.

C. Customer Content & Server Data

• Hosted Data: Files, databases, emails, and applications uploaded to or hosted on your Apaxhost account. You retain full ownership and control over your Hosted Data. We access this data strictly to provide automated backups, perform server management, execute security scans, or comply with lawful requests.

3. How We Use Your Data

We process your personal information under the following legal bases:

1. To Fulfill Our Contract:

   • Provisioning, managing, and maintaining your hosting accounts, domain registrations, and cloud servers.

   • Processing invoices, renewal payments, and account notifications.

   • Providing 24/7 technical, routing, and billing customer support.

2. To Maintain Infrastructure Security & Safety:

   • Monitoring server networks to prevent DDoS attacks, brute-force attempts, spamming, and unauthorized server intrusion.

   • Executing automated malware scans and maintaining system backup protocols.

3. To Comply with Legal Obligations:

   • Fulfilling tax, corporate accounting, and regulatory compliance standards under UK law (including Companies House and HMRC record-keeping requirements).

   • Responding to valid legal requests, court orders, or abuse notifications.

4. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data to third parties or advertisers. We only share information with trusted third-party service providers (Data Processors) strictly necessary to run our infrastructure:

• Upstream Data Center & Infrastructure Partners: Providers who house our physical cloud clusters, server hardware, and network routing backbones.

• Payment Processors: PCI-compliant financial networks (e.g., Stripe) to process billing securely.

• Domain Registrars & Registries: Official domain authorities required to complete WHOIS registrations and TLD provisioning.

• Legal & Regulatory Authorities: Law enforcement or regulatory bodies, only when explicitly mandated by law or court order.

5. Data Security & Storage Standards

We implement robust administrative, physical, and technical safeguards to protect your personal information and server data against unauthorized access, loss, or misuse:

• Storage Environment: Data is housed in isolated, enterprise-class cloud networks and data center facilities.

• Encryption: Sensitive transmissions across our dashboard and client portals are encrypted using standard SSL/TLS protocols.

• Automated Backups: Routine daily and weekly off-site backups are maintained for account protection and rapid disaster recovery.

6. Your Data Rights (GDPR & UK GDPR Compliance)

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request correction of any inaccurate or incomplete personal information.

• Right to Erasure (“Right to be Forgotten”): Request the deletion of your account and personal data, subject to statutory record-keeping requirements (e.g., tax records).

• Right to Data Portability: Request a structured copy of your personal data to transfer to another service provider.

• Right to Object/Restrict: Object to specific processing activities or restrict how we process your information.

To exercise any of these rights, please contact our support team through your client control dashboard.

7. Data Retention

We retain your personal data only for as long as your account remains active or as necessary to fulfill the purposes outlined in this policy. Following account termination:

• Hosted Server Files & Backups: Permanently deleted from our servers after the designated account suspension/cancellation period.

• Financial & Invoice Records: Retained for the statutory period required by UK accounting and tax legislation.

8. Cookies & Tracking

Our website uses essential cookies necessary for authentication, maintaining user sessions, portal navigation, and keeping your cart items active during checkout. You can manage cookie preferences directly through your web browser settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our legal obligations or operational practices. Any updates will be posted on this page with an updated “Effective Date.” Continued use of our Services following any changes constitutes your acceptance of the revised policy.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data safety practices, please reach out to us:

• Operating Entity: Apex Digital Group LTD (t/a Apaxhost)

• Website: apaxhost.com

• Support Channel: Via your account control panel at cp.apaxhost.com or through our website contact page.