Trust starts with clear terms
Privacy and personal data policy
What we collect, why, where it is processed, recipients, and individual rights.
1. Scope and roles
Hostazi is controller for account, order, billing, support, and security data. For personal data a client places in a site, server, or app, the client is normally controller and Hostazi processor.
2. Data categories
We may process identity, contact, business, billing, payment, IP, device and login data, orders, domains, tickets, communications, and fraud-prevention evidence.
3. Purposes and grounds
Data is used to open accounts, perform contracts, bill, support, secure services, prevent fraud, comply with law, and improve reliability.
The ground depends on the activity: contract, legal duty, balanced legitimate interest, or specific consent.
4. Recipients
Access is limited to authorised people. Registrars, datacenters, OVHcloud, and payment, email, support, security, or accounting providers receive only what their role requires.
Hostazi does not sell personal data.
5. Algeria, France, and transfers
Services may be hosted in Algeria or France. Transfers from Algeria are handled under Law 18-07 as amended and supplemented, including required safeguards and authorisations.
Where the GDPR applies, appropriate processing contracts and transfer mechanisms are used.
6. Retention
Data is retained as needed for the contract, accounting, security, and legal claims. Limited backup copies expire through protected rotation cycles.
7. Security and incidents
Controls include access restrictions, logs, patching, isolation, encrypted transport, monitoring, and service-appropriate backups, without promising absolute security.
Confirmed incidents are assessed, contained, and notified under applicable conditions and deadlines.
8. Your rights
Algerian Law 18-07 of 10 June 2018, as amended and supplemented by Law 25-11 of 24 July 2025, provides rights including information, access, correction, and objection.
Reasonable identity verification may be required. Legal retention and third-party rights may limit a request.
9. Requests and complaints
Requests go to the displayed legal contact. Individuals may complain to Algeria’s National Personal Data Protection Authority through its official procedure.
Each client remains responsible for the privacy policy of their own website or app.
Official references
