Last updated: August 5, 2026
This policy explains what data ZFHosts collects, how we use it, who we share it with, and the rights you have over it.
Data we collect
- Account information — name, email address, and billing address, collected when you create an account in our client portal.
- Payment information — processed by our payment provider. We do not store card numbers on our systems.
- Server logs and usage data — standard web server and system logs used for troubleshooting, security, and performance monitoring. Logs are rotated on a rolling basis.
- Support communications — the content of tickets and messages you send us.
How we use your data
- To provision, operate, and support your hosting services
- To communicate about your account, invoices, renewals, and service updates
- To secure our infrastructure and investigate abuse
- To improve our services
We do not sell your personal data, and we do not use it for third-party advertising.
Cookies
Our website and client portal use cookies that are necessary for them to function — session and login cookies, and security cookies such as CAPTCHA verification. We do not use advertising or cross-site tracking cookies. Our website also loads fonts from Google Fonts, which means your browser requests those files from Google’s servers; Google may log your IP address as part of serving that request.
Who we share data with
We share data only with the service providers needed to operate ZFHosts:
- Infrastructure — all hosting runs on Vultr infrastructure. Shared hosting is served from Chicago; dedicated servers reside in the data center region applicable to your service.
- Network and security — Cloudflare provides DNS, TLS termination, and protective filtering for traffic to hosted sites, and processes visitor IP addresses and request metadata in doing so.
- Payment processing — Stripe handles card and payment data. We do not store full card numbers.
- Billing and support — our client portal (FOSSBilling) stores account, order, and ticket data.
- Transactional email — Amazon SES sends account, billing, and support email on our behalf, and processes recipient addresses and message content.
- Monitoring — Plesk 360 records the availability of our shared hosting server. It monitors the server, not individual sites.
We also disclose data where required by law or to protect the rights, safety, or property of ZFHosts and its customers.
Data retention
We keep account and billing data for as long as your account is active and as required for tax and accounting obligations afterwards. Server logs are retained on a rolling basis and then deleted. After account termination, hosted content and backups are retained for a limited wind-down period (typically 30 days) and then deleted.
Your rights
You can access and update your account information in the client portal at any time. You may also request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it (subject to data we must keep for legal reasons). To make a request, open a ticket in the client portal. If you are in a jurisdiction that grants specific privacy rights (such as the EU/UK GDPR or California CCPA), we will honor requests in line with those laws.
Security
We protect data with access controls, encryption in transit, and system logging. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you as required by law.
Children
ZFHosts services are not directed to children and we do not knowingly collect personal data from anyone under 16.
Changes to this policy
We will post updates to this page and, for material changes, notify account holders through the client portal or by email.
Contact
Privacy questions or requests: open a ticket in the client portal or use our contact page.