MudahHosting.com ("we", "our", "us") is committed to protecting the privacy and personal data of our customers, visitors, and users. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website and hosting services.
By using any portion of MudahHosting's services or website, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. This policy is to be read together with our Terms of Service and Fair Usage Policy.
We collect personal data only when it is necessary for providing our services. The categories of data we collect include:
- Full name — used for account identification and billing
- Email address — primary contact for account notifications, invoices, and support
- Phone number — for account verification and critical service notifications
- Billing address — required for invoice generation and payment processing
- Company name — if applicable, for business accounts
- Payment transaction IDs — retained for billing records and dispute resolution
- Payment method type — e.g. PayPal, credit card (we do not store full card numbers)
- Full payment card data is processed and stored exclusively by our payment processor; we do not retain raw card details on our servers.
- IP addresses — logged for security, abuse prevention, and FraudRecord/FraudLabsPro fraud screening
- Browser type and version — for support diagnostics and compatibility
- Access logs — server-level logs including timestamps, resource access, and response codes
- Hosting account activity — resource usage (CPU, RAM, bandwidth, disk) monitored for fair usage compliance
- Support tickets and chat logs — retained to maintain service history and resolve disputes
- Email correspondence — retained for a reasonable period for service and compliance purposes
- If you register a domain through MudahHosting, registrant data (name, address, contact details) is submitted to and stored by the relevant domain Registry and ICANN in accordance with their policies. This data may be publicly visible via WHOIS unless domain privacy is enabled.
We use the personal data we collect for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Name, email, phone | Contractual necessity |
| Billing & invoicing | Name, address, payment info | Contractual necessity |
| Service delivery & support | Account data, support logs | Contractual necessity |
| Security & fraud prevention | IP address, usage logs | Legitimate interest |
| FraudRecord/FraudLabsPro screening | One-way hashed account data | Legitimate interest |
| Legal & compliance obligations | Account & billing records | Legal obligation |
| Service notifications & alerts | Email, phone | Contractual necessity |
| Marketing communications | Email (opt-out available) | Consent / Legitimate interest |
| Abuse & TOS violation monitoring | Server logs, usage data | Legitimate interest |
We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:
- Payment processors (e.g. PayPal) — to process payments securely. They operate under their own privacy policies.
- FraudRecord & FraudLabsPro — one-way hashed information is shared for fraud screening on new orders and TOS violators.
- Domain Registries & ICANN — registrant data is submitted to the relevant registry as required for domain registration.
- Data centre & infrastructure providers — our server infrastructure providers may have access to data stored on servers as part of their operations, subject to strict confidentiality obligations.
- We may disclose your data if required to do so by law, court order, or government authority.
- We may disclose data to regulatory, administrative, or governmental authorities in cases of warez, copyright infringement, illegal content, or other serious TOS violations as described in our Terms of Service.
- We may disclose data to protect the rights, property, or safety of MudahHosting, our customers, or others.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal obligations.
| Data Type | Retention Period |
|---|---|
| Account & billing records | 7 years (financial compliance) |
| Support tickets & communications | 3 years after account closure |
| Server access logs | 90 days (rolling) |
| Payment transaction records | 7 years (financial compliance) |
| Hosting account backups | 3 days on-server (see Backup Policy in TOS) |
| Fraud screening records | As determined by FraudRecord / FraudLabsPro policies |
After the retention period expires, personal data is securely deleted or anonymised. You may request early deletion subject to our legal retention obligations — see Your Rights below.
Our website uses cookies and similar technologies to provide a better user experience and to analyse site usage.
- Essential cookies — Required for the website to function. These include session cookies for the client area and support portal login. Cannot be disabled.
- Functional cookies — Remember your preferences such as language and display settings.
- Analytics cookies — Help us understand how visitors interact with our website (e.g. pages visited, time on site). Data is aggregated and anonymised where possible.
- Security cookies — Used to detect and prevent fraudulent activity and protect account logins.
MudahHosting implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
- SSL/TLS encryption — all data transmitted between your browser and our website is encrypted using industry-standard TLS protocols.
- Access controls — personal data is accessible only to staff who need it to perform their job functions, under strict confidentiality obligations.
- Password security — account passwords are stored using one-way cryptographic hashing and are never stored in plain text.
- Payment security — payment card data is handled exclusively by PCI-DSS compliant payment processors. We do not store raw card numbers on our systems.
- Infrastructure security — our server infrastructure is protected by firewalls, intrusion detection systems, and regular security audits.
Depending on your jurisdiction, you may have the following rights in relation to your personal data. To exercise any of these rights, please contact us at support@mudahhosting.com.
MudahHosting's services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at support@mudahhosting.com and we will take steps to delete such information from our systems.
Our website and client portal may contain links to third-party websites, services, and resources. This Privacy Policy applies only to MudahHosting.com and our direct services. We are not responsible for the privacy practices of third-party websites.
We encourage you to review the privacy policies of any third-party services you access through links on our website, including but not limited to payment processors, domain registries, and software providers.
MudahHosting reserves the right to update or modify this Privacy Policy at any time. Changes will be published at mudahhosting.com/privacy-policy with the revised effective date.
For material changes that significantly affect how we handle your personal data, we will notify you by email at the address associated with your account prior to the change taking effect. Your continued use of our services after notification constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us. We take all privacy enquiries seriously and will respond promptly.