Privacy Policy
Last updated: 27 July 2026
This policy explains what personal data Host Lint Pvt Ltd collects, why we collect it, how long we keep it, and what rights you have over it.
1. What we collect
Information you give us
- Name, email address, postal address and phone number
- Company name and tax identifiers, where applicable
- Support ticket contents and correspondence
- Domain registration details, where we register domains on your behalf
Information collected automatically
- IP addresses and timestamps in server access and authentication logs
- Browser and device information sent by your browser
- Resource usage associated with your account
Payment information
Card details are collected and processed by our payment processor and are not stored on our systems. We retain only the transaction reference, the last four digits, and the card type in order to identify payments and process refunds.
2. What we do not do
- We do not sell or rent personal data to anyone
- We do not use third-party advertising or tracking cookies on this site
- We do not read the contents of your hosted files, databases or mailboxes except where you explicitly ask us to for support, or where required to investigate an abuse report or legal obligation
3. Why we process your data
| Purpose | Lawful basis |
|---|---|
| Providing and administering the Services | Performance of a contract |
| Billing, invoicing and collecting payment | Performance of a contract |
| Security monitoring and abuse prevention | Legitimate interests |
| Service and maintenance notifications | Legitimate interests |
| Marketing email about our services | Consent (opt-in, withdrawable) |
| Tax and accounting records | Legal obligation |
4. Cookies
This website sets no cookies and includes no analytics or advertising scripts. The client area sets a session cookie that is strictly necessary to keep you logged in; it is removed when you log out or when the session expires.
5. Who we share data with
We share the minimum necessary with:
- Our payment processor — to take payment
- Domain registrars and registries — where you register a domain, as required by ICANN and registry policy
- Microsoft — where you purchase a Microsoft 365 mailbox through us
- Cloud and datacentre providers — which host the underlying infrastructure
- Law enforcement and regulators — where we are legally compelled, including under the Prevention of Electronic Crimes Act 2016 and directions of competent Pakistani authorities. We will notify you unless prohibited from doing so
6. Where your data is held
Customer data and hosted content are stored on infrastructure we operate, with backups replicated to separate storage also under our control. Where a Service you have chosen is delivered through a third party — for example Microsoft 365, or a cloud provider account we manage for you — data is held in the region selected for that service. We will confirm the specific locations applying to your services on request, and rely on appropriate safeguards for any transfer between them.
7. How long we keep it
| Data | Retention |
|---|---|
| Account and contact details | Life of the account, then 14 days |
| Hosted content and mailboxes | 14 days after termination, then deleted |
| Backups | Rolling window, oldest copies expire automatically |
| Server and access logs | Up to 90 days |
| Invoices and payment records | As required by tax law (typically 6–7 years) |
| Support tickets | 3 years after closure |
8. Security
We protect your data with encryption in transit (TLS on all services), isolation between accounts, restricted administrative access, continuous monitoring, and nightly backups to separate storage.
If a breach affects your personal data, we will notify you and any applicable regulator within the timeframes required by law.
9. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct inaccurate data, request deletion, object to or restrict processing, receive your data in a portable format, and withdraw consent for marketing at any time.
To exercise any of these, email privacy@hostlint.com. We will respond within 30 days. We will not charge you or treat you differently for exercising these rights.
10. Data we hold on behalf of our clients
Where you host a website, servers or mailboxes with us, you are the data controller for the personal data of your own users, and we act as a processor on your instructions. You are responsible for having a lawful basis for that data, for providing any notices and obtaining any consents your own users require, and for responding to their requests. You indemnify us against claims arising from your handling of that data, as set out in section 14 of the Terms of Service. We process that data only to provide the Services. If you require a data processing agreement, contact privacy@hostlint.com.
11. Children
Our Services are not directed at children under 16, and we do not knowingly collect their personal data.
12. Changes
We will notify you by email of material changes to this policy before they take effect.
13. Contact
Privacy questions and requests: privacy@hostlint.com.