1. Who we are

Best Hosting WordPress, Inc. is the data controller for personal data collected through this website and for our hosting services. Our registered office is 1390 Market Street, Suite 200, San Francisco, CA 94102, USA. For privacy inquiries write to privacy@best-hosting-wordpress.com.

2. Data we collect

  • Account data: name, email, country, optionally phone.
  • Service data: domain provided at checkout, generated cPanel username.
  • Payment data: handled by PayPal. We store only the order ID, amount, currency and payer email — never card data.
  • Technical data: IP, browser, pages visited (security & analytics).

3. Legal bases

Under the EU GDPR we rely on the following legal bases:

  • Contract — to provide the hosting service and issue receipts.
  • Legal obligation — to comply with tax and consumer-protection laws.
  • Legitimate interest — security, fraud prevention, service improvement.
  • Consent — for non-essential cookies or marketing.

4. CCPA disclosures (California residents)

We do not sell personal information. California residents may exercise their rights to know, delete, correct and limit the use of sensitive personal information by emailing privacy@best-hosting-wordpress.com.

5. Retention

Account & payment records are retained for the legally required period (typically 5–10 years under US tax law). Server logs are retained for up to 90 days.

6. Recipients & sub-processors

  • PayPal, Inc. — payment processing.
  • Verpex Hosting — hosting infrastructure (server IP 195.250.27.134).
  • SMTP provider — transactional email delivery.

7. International transfers

When data is transferred outside the EEA/UK we rely on Standard Contractual Clauses or adequacy decisions issued by the European Commission.

8. Your rights (GDPR Art. 15–22)

  • Access, rectification, erasure, restriction, portability, objection.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with your data protection authority.

Exercise any right by writing to privacy@best-hosting-wordpress.com.

9. Security

We use TLS in transit, bcrypt-hashed passwords, server-side payment verification, JWT-protected client area and least-privilege access for our infrastructure.

10. Cookies

See our Cookie Policy.

11. Changes

We will notify material updates by email and on this page.