Privacy Policy

We are ArkHost BV. We care about your privacy and this page explains what personal data we collect, why we collect it, how we use it, and what your rights are.

By using our services, you accept this policy. If you do not agree, please do not use our website or services.

The data controller responsible for your personal data is:

ArkHost BV
Heusdenbaan 39, 9090 Melle, Belgium
VAT: BE0770880180
Email: privacy@arkhost.com

3.1 Account Data

When you register or place an order, we collect: name, address, email address, phone number, and company details (if applicable). This data is required to provide our services.

3.2 Technical Data

When you use our website, we automatically collect: IP address, browser type, operating system, access times, and pages visited. We use Umami analytics, which is privacy-friendly and runs on our own servers with anonymized IP addresses.

3.3 Payment Data

When you make a payment, our payment processors (Stripe, PayPal) collect payment card details. We do not store full card numbers on our servers. We retain transaction records for billing and legal purposes.

3.4 Hosted Data

If you use our hosting services, you may store data on our servers. You are the data controller for any personal data you store. We act as a data processor on your behalf, as outlined in our Data Processing Agreement.

We process your personal data based on the following legal grounds (GDPR Article 6):

• Contract performance: Processing necessary to provide our services to you (account management, service delivery, support).
• Legal obligation: Processing required by law (invoicing, tax records, fraud prevention).
• Legitimate interest: Processing for our legitimate business interests (security, service improvement, analytics), where your rights do not override these interests.
• Consent: Where you have given explicit consent (marketing communications).

We use your personal data to:

• Create and manage your account
• Process orders, payments, and refunds
• Provide technical support
• Send service-related communications (invoices, renewals, security alerts)
• Maintain website and server security
• Improve our services based on usage patterns
• Comply with legal requirements
• Prevent fraud and abuse

We retain your personal data only as long as necessary:

• Active accounts: Data retained while your account is active.
• After account termination: Account data retained for up to 3 years for legitimate business purposes (support history, dispute resolution).
• Invoices and financial records: Retained for 7 years as required by Belgian law.
• Backups: Destroyed within normal backup rotation cycles.
• Inactive accounts: Automatically anonymized after the configured retention period.

7.1 Legal Requirements

We may disclose your data if required by law, court order, or to protect rights, property, or safety.

7.2 Service Providers (Subprocessors)

We use third-party service providers to help operate our business. These providers only receive data necessary for their specific function and are bound by data processing agreements. See Section 8 for the full list.

7.3 Business Transfers

If ArkHost is acquired or merged, your data may be transferred to the new owner. We will notify you before any such transfer.

We use third-party service providers to operate our business, including infrastructure providers, payment processors, and software vendors. These providers only process data necessary for their specific function and are bound by data processing agreements.

The complete list of subprocessors is included in our Data Processing Agreement, available in your client area.

Some of our subprocessors are located outside the European Economic Area (EEA). When transferring personal data outside the EEA, we ensure appropriate safeguards are in place:

UK and Canada: These countries have EU adequacy decisions, meaning they provide adequate data protection.

USA: Transfers to US-based providers (Stripe, PayPal, CloudLinux) are protected by Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (TLS/SSL)
• Regular security updates and patch management
• Access controls and authentication mechanisms
• Regular backups with secure offsite storage
• Firewall and intrusion detection systems
• Imunify360 server security suite

We use essential cookies required for our website to function (session management, login state, language preferences). We use Umami for privacy-friendly analytics - it runs on our servers, does not collect personal data, and anonymizes IP addresses. For full details, see our Cookie Policy.

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data ("right to be forgotten").
• Right to restriction: Request limitation of processing.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time (where processing is based on consent).

We will respond to your request within 30 days.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with a supervisory authority. For Belgium, this is:

Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35, 1000 Brussels
www.gegevensbeschermingsautoriteit.be

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For significant changes, we will notify you via email or a notice in your client area.

For privacy-related questions or to exercise your rights:

ArkHost BV
Heusdenbaan 39, 9090 Melle, Belgium
Email: privacy@arkhost.com
General inquiries: info@arkhost.com