Privacy Policy

1. Overview

This Privacy Policy explains what personal information BanaHosting.com ("BanaHosting", "we") collects from visitors and customers of our website and Services, why we collect it, who we share it with and the rights you have over it. It is written to be understood — if anything is unclear, ask us.

2. Information We Collect

• Account and contact information — the name, email address and contact details you provide when you register or order.
• Billing information — billing address and payment details. Card and PayPal payments are handled by our payment processors; we do not store full card numbers on our systems.
• Service data — the domains, hosting configuration and settings of the products you contract with us.
• Support communications — tickets, chats, emails and calls with our team, kept as an accurate record of your requests.
• Technical logs — IP address, browser/device data and server request logs generated when you use the website or Services, used for security and diagnostics.
• Analytics — aggregated, non-identifying usage statistics via Google Analytics 4 (see our Cookie Policy).

3. Why We Process It and Legal Bases

• Contract — to create your account, provision and operate your services, process orders and renewals, and provide support.
• Legitimate interests — to secure our network and systems, prevent fraud and abuse, diagnose problems, and understand how the website is used so we can improve it.
• Legal obligation — to keep the records we are required to keep (for example billing records) and to respond to lawful requests.
• Consent — for marketing communications such as newsletters and offers. You can withdraw consent at any time and it does not affect your services.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as defined by the California Consumer Privacy Act (CCPA/CPRA).

4. Cookies and Similar Technologies

This website stores two local preferences (language and theme) in your browser and uses Google Analytics 4 for aggregated statistics; the client area uses strictly necessary session cookies. The full detail — including every name and how to opt out — is in our Cookie Policy.

5. Who We Share Information With

• Payment processors — to charge your chosen payment method securely.
• Domain registrars and registries — when you register or transfer a domain, the registrant data required by the ICANN-accredited registrar and the corresponding registry (WHOIS/RDDS).
• Infrastructure providers — the datacenter and network providers in the USA and Europe on which the Services run.
• Authorities — when disclosure is required by law, a court order, or to protect our users and platform from fraud or abuse.
• Business transfers — in the event of a merger, acquisition or sale of assets, under equivalent confidentiality obligations.

6. International Transfers

Your information is processed in the United States and Europe, where our infrastructure operates. Where personal data is transferred between these regions, we take steps to ensure it receives an adequate level of protection consistent with this Policy and applicable law.

7. Security

Information you enter on the website and client area is encrypted in transit with SSL/TLS. Access to personal information is restricted to the personnel who need it to do their job, and our platforms apply layered security controls. No system is 100% secure, but we treat the protection of your data as a core part of the service.

8. Data Retention

We keep personal information only as long as needed: account data for as long as your account is active; billing records for the periods required by law; support history while it remains useful as a record of your requests; technical logs on short rotation cycles. When information is no longer needed, it is deleted or anonymized.

9. Your Rights

Depending on where you live (including under the GDPR and the CCPA/CPRA), you have the right to:

• Access the personal information we hold about you and receive a copy.
• Correct inaccurate or incomplete information.
• Delete your personal information ('right to be forgotten').
• Receive your data in a portable format (data portability).
• Object to, or ask us to restrict, certain processing — including any based on our legitimate interests.
• Withdraw consent at any time, where consent is the basis (for example, marketing).
• Not be discriminated against for exercising any of these rights.

You can manage much of your information directly from the "My Details" section of the client area. For anything else, contact us and we will respond within the timelines required by applicable law; we may need to verify your identity first. Certain data may be exempt where we must retain it (for example billing records) — if an exception applies, we will tell you. You also have the right to lodge a complaint with your local data protection authority.

10. Children

Our Services are not directed to children. We do not sell products, provide services or knowingly collect personal information from anyone under the age of 13. If you believe a minor has provided us personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates are posted on this page with a revised "last updated" date, and material changes will be announced through the client area or by email.

12. Contact

To ask a question about this Policy, exercise any of your rights, or raise a concern about how your information is handled, reach us through our contact page — no account required.