Privacy policy

Wasevo LLC (trading as WaseerHost)
1500 N Grant St, Ste R, Denver, CO 80203, USA
Website: https://waseerhost.com · Account: https://my.waseerhost.com
Privacy contact: [email protected]

1. Summary

• Wasevo LLC ("WaseerHost", "we", "us") is responsible for the personal data described in this policy.
• We collect what we need to sell, run, secure and support hosting, domains, email and related services, and to meet our legal duties.
• We do not sell your personal information, and we do not share it for cross-context behavioural advertising unless you opt in through our cookie settings.
• We use trusted service providers (for example, payment processors and data centres) who may only use your data to help us.
• Depending on where you live, you may have rights to access, correct, delete or export your data, and to object to or limit some uses. Section 11 explains how.

2. Scope and our role

This policy covers personal data we handle when you visit waseerhost.com, use your account at my.waseerhost.com, contact us, or buy and use our Services.

Controller. For account, billing, support, marketing and website data, Wasevo LLC is the controller (the party that decides why and how the data is used).

Processor. For the content you and your visitors store on our servers (websites, databases, mailboxes, files), you are the controller and we act as your processor. We only process that content to provide the Services on your instructions, as described in our Terms of Service and our Data Processing Addendum, which is available on request from [email protected]. If you want to know what a website hosted with us does with your data, please contact that website's owner.

3. Personal data we collect

Information you give us

• Identity and contact details: name, company name, postal address, email address, phone number.
• Account details: username, password (stored in hashed form), security questions, two-factor settings, account preferences.
• Billing details: billing address, tax ID where relevant, invoice history, and the last four digits and type of your card. Full card numbers are collected and stored by our payment processors, not by us.
• Domain registrant details: the contact information that registries and ICANN require for domain registration.
• Support communications: tickets, live-chat transcripts, emails and any attachments you send.
• Identity verification: where we need to check for fraud, a copy of an ID document or business record. We delete these once the check is complete unless we must keep them longer for a legal or fraud-prevention reason.

Information collected automatically

• Technical and log data: IP address, browser and device type, operating system, pages visited, referring page, timestamps and error logs.
• Security and fraud signals: IP reputation, order patterns, and device and browser characteristics used to detect fraudulent orders and account takeovers.
• Cookies and similar technologies: see our Cookie Policy.
• Service usage data: resource use, uptime monitoring data and server logs related to your Services.

Information from others

• Payment processors: confirmation that a payment succeeded or failed, and fraud-screening results.
• Domain registries and registrars: status information about your domains.
• Affiliates and referral partners: the fact that you arrived through their link, so we can pay commission. When you open a referral link we record the visit: the partner, the page you landed on, the website that sent you (its domain only), any campaign tags in the link (UTM parameters) and the time. To count each visitor once per day we store a one-way, keyed hash of your IP address and browser type for that day, never the IP address itself. If you then sign up or order, we link the account or order to the partner and track whether the commission is earned (for example, after your invoice is paid or if it is refunded). Partners see visit counts, order numbers, order values and commission status, never your name, email or contact details.
• Public and security sources: blocklists and threat-intelligence feeds used to protect our network.

4. Why we use your data and our legal bases

If you are in the EEA (the EU plus Iceland, Liechtenstein and Norway) or the United Kingdom, the GDPR or UK GDPR requires us to have a legal basis for each use. The table below sets out our purposes and bases.

Where we rely on legitimate interests, we have weighed our interests against your rights and concluded they are not overridden. You can ask us for details of that assessment.

Where we rely on consent, you can withdraw it at any time without affecting earlier processing.

If you do not provide information we need to perform a contract (for example, a valid billing address), we may not be able to provide the Service.

We do not use your personal data for automated decision-making that has legal or similarly significant effects on you, except that our fraud-screening system may automatically hold an order for manual review. A member of staff reviews any held order, and you may contest the outcome.

5. Who we share data with

We share personal data only as needed for the purposes above, with:

• Payment processors such as Stripe and PayPal, to take payments and screen fraud. They act as independent controllers for some purposes under their own privacy notices.
• Infrastructure providers: data centre and network operators in the USA, Germany and Finland that host our servers; their names are available on request.
• Software and platform providers: our billing and account platform (WHMCS, self-hosted by us), help-desk and live-chat tools, email delivery services, control-panel and licence vendors, and monitoring tools.
• Domain registrars and registries: to register and manage domains, as required by ICANN and registry rules. Some registrant details may appear in public registration data services where the registry requires it.
• Certificate authorities: to validate and issue SSL certificates.
• Affiliates and referral partners: if you came through a partner's link, the partner sees that a referred visit, signup or order happened, with the order number, order value and commission status. We do not give them your name or contact details.
• Analytics and advertising providers: only where you have allowed the relevant cookies (see our Cookie Policy).
• Professional advisers: lawyers, accountants and auditors under duties of confidentiality.
• Authorities and rights holders: where required by law, a valid legal process, or to protect the rights, safety and property of our customers, the public or us. Where lawful, we will tell you before disclosing your data in response to a request about your account.
• Business transfers: a buyer or successor if all or part of our business is sold, merged or reorganised, subject to this policy.

Our service providers act as our processors or sub-processors under written contracts that limit their use of your data to providing services to us. A list of current sub-processors is available on request from [email protected].

6. International data transfers

Our company is US-based, and our servers sit in data centres in the USA, Germany and Finland. Your account and billing data is managed from the United States, and hosted content is stored in the data centre location you select when ordering.

When personal data from the EEA, UK or Switzerland is transferred to a country that has not been found to provide adequate protection, we use a recognised safeguard, such as:

• the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where relevant; and
• additional technical and organisational measures, such as encryption in transit.

You can request a copy of the relevant safeguards by contacting us.

7. How long we keep data

We keep personal data only as long as needed for the purposes described, then delete or anonymise it. Typical periods are:

8. Security

We use administrative, technical and physical safeguards designed to protect personal data. These include encryption in transit (TLS), hashed passwords, access controls based on need-to-know, two-factor authentication for staff access, network firewalls, malware scanning and regular patching. No system is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify you and the relevant authorities as the law requires.

You play a part too: use a strong, unique password and turn on two-factor authentication in your account.

9. Cookies

We use cookies and comparable tools on waseerhost.com and in your account. Essential cookies are always on. Analytics and marketing cookies are only used with your consent where the law requires it. See our Cookie Policy for details and choices.

10. Marketing

We will only send marketing emails where the law allows. Every marketing email includes an unsubscribe link, and you can also change your preferences in your account. Opting out of marketing does not stop service messages such as invoices, renewal reminders and security alerts, which we need to send to run your account.

11. Your privacy rights

11.1 Rights for everyone

Wherever you live, you can ask us to:

• tell you which personal data of yours we keep, and give you a copy;
• correct information that is wrong;
• delete your account and personal data, subject to the records we must keep by law; and
• stop sending you marketing.

11.2 EEA and UK residents (GDPR / UK GDPR)

In addition, you are entitled to:

• Access your personal data and receive information about how it is used.
• Rectification of inaccurate or incomplete data.
• Erasure in certain circumstances.
• Restriction of processing in certain circumstances.
• Data portability: to get a copy, in a structured and machine-readable format, of the data you gave us, and have it sent to another controller.
• Object to processing based on legitimate interests, and to object at any time to direct marketing.
• Withdraw consent where we rely on it.
• Complain to a data protection supervisory authority, in particular in the country where you live or work, or where you believe an infringement took place. In the UK, this is the Information Commissioner's Office (ico.org.uk).

Contact from the EU and UK. If you are in the European Union or the United Kingdom, you can contact us directly about any data protection matter at [email protected].

11.3 California and other US state residents (CCPA/CPRA and similar laws)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the following rights. Residents of other US states with comprehensive privacy laws (for example Colorado, Virginia, Connecticut, Utah, Texas and Oregon) have similar rights, and we honour them in the same way.

• Right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties we disclose it to.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell personal information and do not "share" it for cross-context behavioural advertising as defined by the CCPA, unless you accept marketing cookies. You can withdraw that at any time in the cookie settings, and we honour Global Privacy Control (GPC) browser signals as a valid opt-out.
• Right to limit use of sensitive personal information. We only use sensitive personal information (such as account login credentials and, where collected, government ID for verification) for purposes permitted by law, such as security and fraud prevention, so this right does not currently apply.
• Right to non-discrimination. We will not deny you service, charge you a different price or give you a lower quality of service because you used your privacy rights.

Categories collected in the last 12 months. In the terms used by the CCPA, we collect: identifiers (name, email, IP address, account ID); customer records (address, phone, billing details); commercial information (products bought, order history); internet or network activity (log and usage data); approximate geolocation (from IP address); audio or electronic information (support chats and any call recordings, with notice); professional information (company name, where given); and sensitive personal information limited to account credentials and identity documents used for verification. The sources, purposes and recipients are described in sections 3 to 5. We are not aware of collecting personal information from anyone under 16.

Retention. See section 7.

Authorised agents. You may use an authorised agent to make a request. We may ask the agent for proof of authority and ask you to verify your identity directly.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing [email protected] with "Privacy Appeal" in the subject line. If you are a Colorado resident and are unhappy with the outcome of your appeal, you may contact the Colorado Attorney General.

11.4 How to make a request

Email [email protected] or open a ticket in your account. To protect you, we will verify your identity before acting, usually by asking you to confirm the request from your account's email address or to log in. We respond within the time the law requires: one month under the GDPR and UK GDPR (extendable in some cases) and 45 days under US state laws (extendable once by 45 days). Requests are free unless they are clearly unfounded or excessive.

12. Children

Our Services are for adults and businesses. We never intentionally gather personal data from children under 16 (or under 13 in the US). If you believe a child has given us personal data, contact us and we will delete it.

13. Links to other websites

Our website may link to third-party websites and services. Their privacy practices are their own, and we encourage you to read their policies.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, notify account holders by email before the change takes effect.

15. Contact us

Privacy questions and requests: [email protected] Post: Wasevo LLC, Attn: Privacy, 1500 N Grant St, Ste R, Denver, CO 80203, USA