Privacy Policy

ALEXHOST — Privacy Policy v2.0 / August 2026

1. WHO WE ARE

ALEXHOST is a web hosting provider headquartered in the Republic of Moldova, providing clients worldwide with the following services:

Web hosting (Shared Hosting, VPS, Dedicated Servers)
Email hosting
Domain name management and SSL certificates
Colocation and IP subnet rentals
Related IT infrastructure services

The purpose of this Privacy Policy is to inform you what personally identifiable information we may collect, how we use, and share your personal data through alexhost.com (“Website”), products, services (collectively, the “Services”) or when you interact with us.

Based on this Privacy Policy, alexhost.com informs you about what types of data is collected, stored, and processed and what measures are being taken to ensure that personal information is protected at all times when you use the Website.

2. WHAT DATA WE COLLECT AND WHY

2.1 Data collected when creating an account and using our services

Data collected	Purpose	Legal basis
Full name	Account identification, invoicing	Art. 6(1)(b) — performance of contract
Email address	Account communications, notifications, support	Art. 6(1)(b)
Phone number	Identity verification, support	Art. 6(1)(b)
Postal address	Invoicing, tax data	Art. 6(1)(b) and (c)
National ID number / Tax number	Invoicing with tax data	Art. 6(1)(c) — legal obligation
Bank/card details (payment processing)	Payment processing	Art. 6(1)(b)
IP address at registration	Security, fraud prevention	Art. 6(1)(f) — legitimate interest
Authentication logs	Account security	Art. 6(1)(f) — legitimate interest

2.2 Technical data collected automatically

Data collected	Purpose	Legal basis
IP address	Security, abuse prevention, diagnostics	Art. 6(1)(f) — legitimate interest
Server access logs (timestamp, resource accessed)	Security, diagnostics	Art. 6(1)(f)
Browser type and operating system	Compatibility, anonymous statistics	Art. 6(1)(f)
Essential technical cookies	Website and control panel functionality	Art. 6(1)(b) — necessary for contract
Analytics cookies (if enabled)	Service improvement	Art. 6(1)(a) — consent

2.3 Data collected in the context of technical support

Data collected	Purpose	Legal basis
Support ticket content	Resolution of the technical issue	Art. 6(1)(b)
Server access logs (if provided by client)	Technical diagnostics	Art. 6(1)(b)
Server data voluntarily provided by client	Technical assistance	Art. 6(1)(b)

3. DATA WE DO NOT COLLECT

ALEXHOST does not deliberately collect:

Health data or biometric data of clients
Data concerning political, religious or philosophical beliefs
Data concerning racial or ethnic origin
Data of children under 16 years of age (our services are intended for adults and business entities)

4. DATA STORED BY CLIENTS ON OUR SERVERS

IMPORTANT NOTICE:

When you use a server from ALEXHOST to store or process personal data of third parties (your users, your clients, etc.), you are the Controller of that data, and ALEXHOST acts as a Data Processor.

This means:

ALEXHOST does not know and does not control what personal data you store on the server
You are responsible for the lawfulness of the processing of data stored on the server
ALEXHOST staff access the server only upon your explicit request (support ticket with credentials) or for backup operations
All technical accesses by ALEXHOST staff are logged

To formalise the processing relationship, we recommend signing a Data Processing Agreement (DPA) with us under Art. 28 GDPR. Contact: gdpr@alexhost.com

5. WHO WE SHARE YOUR DATA WITH

5.1 We do not sell your data

ALEXHOST does not sell, rent or commercialise clients’ personal data.

5.2 We share data only with:

Recipient	Data shared	Reason
Payment processors	Payment data, identification	Transaction processing
Domain registrars	WHOIS data (name, email, address)	Domain registration
Public authorities	Legally required data (tax authorities, etc.)	Legal obligation
Courts	Data required by court order	Legal obligation

Full list of sub-processors is available in Annex 3 of our Data Processing Agreement at https://alexhost.com/dpa/, or upon request: gdpr@alexhost.com

5.3 International transfers

Some ALEXHOST servers are located outside Moldova and the EU. Servers in the USA and United Kingdom involve international data transfers, managed through:

Standard Contractual Clauses (SCC) — the primary mechanism
Transfer Impact Assessment (TIA) — impact assessment carried out

When you choose a server location, we inform you of the transfer implications.

Servers in the EU/EEA (Romania, Bulgaria, Sweden, France, Netherlands) and Switzerland operate under adequacy decisions — no additional restrictions.

6. HOW LONG WE RETAIN YOUR DATA

Data category	Retention period
Active client account data	For the duration of the contract
Client account data after contract expiry	3 years from termination of the contract
Client server data (content)	Deleted or returned within 30 days of contract expiry or client request
Invoices and financial records	5 years from the end of the relevant financial year (legal obligation)
Server and access logs	90 days (rolling basis)
Records of security incidents	5 years
Support communications	2 years from closure of the relevant ticket
Consent records	For the duration of the consent + 1 year following withdrawal
Newsletter data	Until unsubscription

Full details in our Data Retention and Deletion Policy available upon request.

7. YOUR RIGHTS

Under GDPR and Law 195/2024, you have the following rights:

Right of Access (Art. 15) — You may request a copy of the data we hold about you and information about how we process it.

Right to Rectification (Art. 16) — You may request correction of inaccurate data or completion of incomplete data.

Right to Erasure (Art. 17) — You may request deletion of your data when it is no longer necessary or you have withdrawn consent, subject to legal archiving obligations.

Right to Restriction of Processing (Art. 18) — You may request temporary limitation of the processing of your data.

Right to Data Portability (Art. 20) — You may request your data in a structured, machine-readable format (JSON/CSV), to transfer to another provider.

Right to Object (Art. 21) — You may object to processing based on our legitimate interest. Direct marketing is stopped immediately upon objection.

Please note that we may need to retain certain information for record keeping purposes or to complete transactions, or when required by law.

If you have any inquiries regarding our processing of your personal data, please contact us. If you are displeased with our processing of personal data, you may contact us at gdpr@alexhost.com.

8. DATA SECURITY

We implement appropriate technical and organisational measures to protect your data:

Encryption in transit (HTTPS/TLS on all communications)
Access control with multi-factor authentication for administrative systems
Access logs and monitoring for detecting abnormal activity
Regular backup policy
Data access on a need-to-know basis
Employees trained in data security

In the event of a security incident affecting your data, we will notify you in accordance with our legal obligations (Art. 33–34 GDPR).

9. COOKIES

The alexhost.com website uses cookies. For full details, please see our Cookie Policy available at: https://alexhost.com/cookies/

In brief:

Essential cookies — necessary for the website and control panel to function (no consent required)
Analytics cookies — used to understand website usage (requires your consent)
Marketing cookies — used to deliver and measure advertising and promotional content (requires your consent)

You can manage your cookie preferences through the cookie banner on your first visit or through your browser settings.

10. MINORS

ALEXHOST services are intended for persons aged 18 years or over or commercial entities. We do not knowingly collect personal data from children under 16 years of age. If we learn that we have collected such data, we will delete it immediately.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Policy periodically. We will inform you of significant changes through:

Email to your registered account address (with at least 30 days’ notice before taking effect)
Notification in the client control panel
Publication on the website with the update date noted

12. CONTACT

For any questions regarding the protection of personal data:

ALEXHOST

Email: gdpr@alexhost.com

Website: alexhost.com