Privacy Policy
This Privacy Policy explains what personal data ModHost collects, why we collect it, how we use it, who we share it with, and what rights you have. It applies to visitors to modhost.com, customers of ModHost services, and anyone who contacts us.
We have written this policy in plain language. Where we use formal terms (such as "controller," "processor," "legal basis"), they have the meanings given in the EU General Data Protection Regulation (GDPR) and the Georgian Law on Personal Data Protection.
If you have a question this policy doesn't answer, contact us at privacy@modhost.com.
On this page
1.Who we are
ModHost is the data controller for personal data described in this policy.
ModHost IE. Registration No : 326124144.
31C Meskheti St., office 3, Borjomi, Georgia.
Email: privacy@modhost.com
ModHost has provided web hosting services since 2003 and operates as a registered individual entrepreneur in Georgia.
2.Personal data we collect
We collect personal data in three contexts: when you visit the website, when you create a customer account, and when you contact us.
Website visitors. When you visit modhost.com, our server records the IP address making the request, the page requested, the response code, the referring page, the user agent string, and the timestamp. This is standard web server logging. We do not use third-party analytics services, and we do not place tracking cookies or advertising pixels on the website.
Customer account data. When you create an account, we collect:
- Your name
- Your email address
- Your billing address and country
- Your phone number (optional)
- A password (stored only as a hash; we cannot read or recover the original)
- Payment method details (handled by our payment processor; see Section 5)
Service usage data. While you use our hosting services, we collect:
- Login records to the customer area, hosting control panel, and webmail
- Domain names registered through ModHost and associated WHOIS contact information
- Server resource usage (CPU, memory, disk, bandwidth)
- Email logs for outbound mail handling and abuse prevention
- Backup snapshots of your hosted data, retained per Section 7
Support correspondence. When you contact support, we retain the messages, ticket history, and any information you include in those messages.
End-user data on hosted sites. When you operate a website on ModHost, that website may collect personal data from your own visitors (for example, contact form submissions or e-commerce orders). For that data, you are the controller and ModHost acts as a processor. Our role is governed by our Data Processing Addendum (see Section 12).
3.Why we collect it (legal bases under GDPR)
We collect and process personal data for the following purposes and on the following legal bases:
To provide the service you requested (legal basis: performance of a contract). Account creation, hosting provisioning, billing, support, and account communications are all part of providing the service you signed up for.
To meet legal obligations (legal basis: legal obligation). We retain financial records as required by Georgian tax law, respond to valid legal requests, and comply with applicable hosting and registrar obligations.
To operate and protect our infrastructure (legal basis: legitimate interest). Server logs, abuse detection, anti-spam filtering, backup operations, and security monitoring are necessary to run the service safely. We balance these legitimate interests against your privacy rights and limit data retention to what is needed.
To improve the service (legal basis: legitimate interest). We review aggregated usage patterns and support trends to identify problems and improve operations. This processing does not involve profiling or automated decisions affecting you.
We do not use personal data for advertising, do not sell personal data, and do not share personal data with marketing partners.
4.How we use it
We use the data described above to:
- Create and maintain your account
- Provide hosting, domain, and related services
- Send transactional emails (account confirmations, invoices, renewal reminders, service notifications, security alerts)
- Respond to support requests
- Investigate suspected abuse, security incidents, or violations of our Acceptable Use Policy
- Maintain accurate financial records
- Comply with applicable laws
We do not send marketing emails or promotional communications without your explicit opt-in. Transactional emails about your service are sent regardless of marketing preferences because they are part of the service itself.
6.International data transfers
ModHost is based in Georgia, and our servers are located in the United States. If you are in the European Union or another jurisdiction with data protection rules, your personal data is transferred outside that jurisdiction when you use ModHost services.
For transfers of EU personal data to the United States, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for international transfer. We have these clauses in place with our US-based service providers.
For data we process on behalf of EU customers (end-user data on hosted sites), the transfer mechanism is set out in our Data Processing Addendum (see Section 12).
7.How long we keep data
We keep personal data only as long as we need it for the purposes described in this policy.
Active account data. Retained for as long as your account is active.
Closed account data. General account data is deleted within 30 days after account closure. Backup snapshots that include closed-account data are retained for up to 1 year as part of our backup rotation, after which they are overwritten.
Financial and transaction records. Retained for 7 years as required by Georgian tax law and standard business record-keeping practice.
Support ticket history. Retained for 3 years after the last interaction, then deleted.
Server and security logs. Standard server logs are retained for 30 to 90 days. Security incident records may be retained longer if needed for ongoing investigation.
If you ask us to delete your data earlier (see Section 9), we will delete what we are not legally required to retain.
8.How we protect data
ModHost takes reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
These measures include:
- TLS encryption for all data in transit (website, customer area, control panel, webmail, billing)
- Hashed password storage using current best-practice algorithms
- Network segmentation between public-facing services and internal systems
- Restricted administrative access on a need-to-know basis
- Regular security updates and patch management
- Backup integrity checks and secure storage
- Monitoring for unusual activity
No system is perfectly secure. If we become aware of a security incident affecting your personal data, we will notify affected customers and applicable authorities as required by law.
9.Your rights
If you are in the EU, the UK, Georgia, or another jurisdiction with data protection laws, you have the following rights regarding your personal data:
Right of access. You can request a copy of the personal data we hold about you.
Right of rectification. You can ask us to correct inaccurate or incomplete personal data.
Right of erasure ("right to be forgotten"). You can ask us to delete your personal data, subject to legal retention requirements (such as the 7-year financial record retention noted in Section 7).
Right to restrict processing. In certain circumstances, you can ask us to limit how we use your data.
Right to data portability. You can ask for your data in a structured, machine-readable format.
Right to object. You can object to processing based on legitimate interest.
Right to withdraw consent. Where processing is based on consent, you can withdraw that consent at any time.
For California residents (CCPA/CPRA). You also have the right to know what categories of personal information we have collected, the right to delete personal information (subject to legal retention requirements), the right to correct inaccurate personal information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
To exercise any of these rights, contact us at privacy@modhost.com from the email address associated with your account, or with sufficient information to verify your identity. We respond to verified requests within 30 days.
10.Complaints
If you believe we have not handled your personal data appropriately, we would prefer to address it directly — please contact us at privacy@modhost.com.
You also have the right to lodge a complaint with a data protection authority. The relevant authority depends on your location:
- Georgia: Personal Data Protection Service of Georgia (personaldata.ge)
- European Union: the supervisory authority of your member state of residence
- United Kingdom: Information Commissioner's Office (ico.org.uk)
12.Data Processing Addendum (for customers)
When you use ModHost to operate a website, you are processing personal data of your own visitors and users, with ModHost acting as your data processor. GDPR requires a written agreement governing this relationship.
Our standard Data Processing Addendum (DPA) is available at modhost.com/dpa and forms part of our agreement with all customers who process personal data through ModHost services. The DPA covers our obligations as a processor, sub-processor handling, security measures, breach notification timelines, and assistance with data-subject requests.
You do not need to take any action to accept the DPA — it applies automatically to all customers as part of our terms.
13.Children's data
ModHost services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided personal data to us, contact us at privacy@modhost.com and we will delete it.
14.Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active customers by email at least 30 days before they take effect. The current version is always available at modhost.com/privacy.
15.Contact
For privacy questions, requests under Section 9, or complaints under Section 10: