Privacy Policy

We are ARKHOST LLC. We care about your privacy and this page explains what personal data we collect, why we collect it, how we use it, and what your rights are.

This notice explains how we handle personal data. Where processing requires your consent, we request it separately. You can withdraw that consent at any time.

The data controller responsible for your personal data is:

ARKHOST LLC
Movses Khorenatsi St., 26A, office 210, 0010 Yerevan, Armenia
TIN: 02947817
Email: privacy@arkhost.com

3.1 Account Data

When you register or place an order, we collect: name, address, email address, phone number, and company details (if applicable). This data is required to provide our services.

3.2 Technical Data

When you use our website, our servers process technical data such as your IP address, browser and operating-system information, access time, and requested pages for service operation and security. Our self-hosted Umami instance processes limited technical data for aggregate website analytics. Umami does not use analytics cookies, and IP addresses are anonymized.

3.3 Payment Data

For standard online purchases, Paddle acts as Merchant of Record and processes payment details. We do not store full card numbers on our servers. We retain transaction records for billing and legal purposes.

3.4 Hosted Data

If you use our hosting services, you may store personal data on our servers. Depending on the circumstances, you may be the controller of that data or a processor acting for your own customers. ArkHost acts as a processor or subprocessor, as applicable, and processes that data on your documented instructions under our Data Processing Agreement.

We process your personal data based on the following legal grounds (GDPR Article 6):

• Contract performance: Processing necessary to provide our services to you (account management, service delivery, support).
• Legal obligation: Processing required by law (invoicing, tax records, fraud prevention).
• Legitimate interest: Processing for our legitimate business interests (security, service improvement, and aggregate website analytics), where your rights do not override these interests.
• Consent: Where you have given explicit consent (marketing communications).

We use your personal data to:

• Create and manage your account
• Process orders, payments, and refunds
• Provide technical support
• Send service-related communications (invoices, renewals, security alerts)
• Maintain website and server security
• Improve our services based on usage patterns
• Comply with legal requirements
• Prevent fraud and abuse

We retain your personal data only as long as necessary:

• Active accounts: Account data is retained while your account is active.
• Account records after closure: Our own account records may be retained for up to 3 years for legitimate business purposes such as support history and dispute resolution.
• Invoices and financial records: Our invoice and financial records are retained for 7 years as required by Armenian law.
• Backups: Data in backups is destroyed within normal backup rotation cycles.
• Hosted content: Hosted content is retained and deleted under your instructions and the Data Processing Agreement, subject to legal retention obligations.

7.1 Legal Requirements

We may disclose your data if required by law, court order, or to protect rights, property, or safety.

7.2 Service Providers (Subprocessors)

Suppliers that process personal data on our instructions are bound by appropriate data-processing terms. Other suppliers may act as independent controllers under their own privacy notices. The applicable role depends on the service and the processing involved.

7.3 Business Transfers

If ArkHost is acquired or merged, your data may be transferred to the new owner. We will notify you before any such transfer.

We use suppliers to operate our business, including infrastructure providers, payment providers, and software vendors. Where a supplier processes personal data on our instructions, it acts as a processor or subprocessor and is bound by appropriate contractual terms. Supplier details are set out in our Data Processing Agreement. For further information, contact privacy@arkhost.com.

ARKHOST LLC is established in Armenia, and our infrastructure is administered remotely from Armenia, including services hosted in the European Economic Area (EEA). Some suppliers may also process personal data outside the EEA. Storage in the EEA and access from outside the EEA are separate parts of this processing. Transfers must be covered by the safeguards required under applicable data-protection law. For information about the safeguards relevant to your service, or a copy subject to necessary redaction, contact privacy@arkhost.com.

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (TLS/SSL)
• Regular security updates and patch management
• Access controls and authentication mechanisms
• Regular backups with secure offsite storage
• Firewall and intrusion detection systems
• Imunify360 server security suite

We use essential cookies required for our website to function (session management, login state, language preferences). We use self-hosted Umami for aggregate website analytics. It does not use analytics cookies. Technical request data, including IP addresses, is processed to produce anonymized usage statistics. For full details, see our Cookie Policy.

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data ("right to be forgotten").
• Right to restriction: Request limitation of processing.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time (where processing is based on consent).

We respond to requests without undue delay and in any event within one month. If a request is complex or we receive numerous requests, we may extend that period by up to two further months, and we will inform you of any extension and the reasons within the first month.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with a supervisory authority. Where GDPR applies, you may complain to the supervisory authority in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement. You may also complain to the Armenian authority:

Personal Data Protection Agency of Armenia
Official Ministry of Justice information

Our services are not directed to children. Under our Terms of Service, you must be at least 18 years old or have parental or guardian consent to use our services. We do not knowingly collect personal data from children without that consent. If you believe a child has provided personal data without the required consent, contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For significant changes, we will notify you via email or a notice in your client area.

For privacy-related questions or to exercise your rights:

ARKHOST LLC
Movses Khorenatsi St., 26A, office 210, 0010 Yerevan, Armenia
Email: privacy@arkhost.com
General inquiries: info@arkhost.com