Privacy Policy

FormoHost LLC is a Delaware limited liability company registered in Wilmington, Delaware, United States. We sell KVM virtual private servers in 44 countries and dedicated servers in 22. In this policy, “we”, “us” and “FormoHost” mean FormoHost LLC, and “you” means the person or company holding a FormoHost account.

We are the data controller for the account, billing and support information described below. You are the controller for whatever data you choose to store on a server you rent from us; we do not inspect it in the ordinary course of business.

Account information. Your name, email address, postal address, phone number and, if you give one, a company name. This is collected when you create an account in our client area and is required to issue a valid invoice.

Billing records. Invoices, payment status, currency and the last four digits and card type reported back to us by our payment processor. We never receive or store your full card number. Card details are entered directly with Stripe or PayPal.

Technical information. The IP addresses we assign to your servers, the IP addresses you log in from, order and login timestamps, and abuse or network reports we receive about a server.

Support content. Whatever you write in a support ticket, and our replies.

Website usage. On our public website we use Google Analytics, loaded through Google Tag Manager, to count visits and see which pages are read. Our pages also load web fonts from Google Fonts, which means your browser contacts a Google server and Google receives your IP address in the process.

To provide the service you ordered — creating and delivering servers, issuing invoices, answering tickets. Legal basis: performance of a contract.

To keep the network safe — investigating abuse reports, blocking fraud, and protecting our IP ranges from being blacklisted. Legal basis: our legitimate interests, and the terms you agreed to.

To meet legal obligations — retaining accounting records, and responding to lawful requests from authorities as described in our Terms of Service. Legal basis: legal obligation.

To understand how the website is used — aggregate analytics. Legal basis: consent, which you can withdraw by blocking analytics cookies in your browser.

We do not sell your personal data, and we do not use it for advertising or profiling.

We share the minimum necessary with:

Payment processors — Stripe and PayPal, to take payment and handle refunds and disputes. They act as independent controllers for the payment data you give them.

Datacentre and infrastructure providers — in each country we serve, the operator that houses the physical hardware. Where a provider needs to identify the account behind a server (for example to act on an abuse report), we may pass on your account details.

Google — analytics and web font delivery on the public website, as described above.

Authorities — where we are legally required to, or where we are responding to a valid abuse or law-enforcement request.

We do not otherwise disclose your information to third parties.

Our account and billing systems are operated by us and hosted on our own infrastructure. Servers you order are located in the country you chose at checkout, in a datacentre operated by a local provider — so the data you put on a server stays in that country unless you move it.

Because we operate in 44 countries and are a United States company, your account information may be transferred to and processed in countries outside your own, including the United States. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the appropriate safeguards available to us, including the European Commission Standard Contractual Clauses where they apply.

Account and billing records: for as long as your account is open, and afterwards for the period we are required to keep accounting records — generally seven years.

Server and login logs: normally kept for a short operational period and then discarded, unless retained as part of an open abuse investigation.

Support tickets: kept while your account is open so we have the history of your service.

When you close your account we delete the server and its contents. We do not keep a copy of your server data.

Depending on where you live, you may have the right to ask us to: give you a copy of the personal data we hold about you; correct it if it is wrong; delete it; restrict how we use it; give it to you in a portable format; or object to a particular use.

To exercise any of these, open a support ticket from your client area or email support@formohost.com. We will respond within one month. We may need to verify who you are before acting.

Some data we cannot delete on request — accounting records we are legally required to keep, and records of abuse we need in order to protect the network.

If you are in the European Economic Area or the United Kingdom and you are not satisfied with our response, you may complain to your national data protection authority.

Our client area sets a session cookie so you stay logged in. This is required for the service to work and cannot be turned off while you are signed in.

Our public website sets Google Analytics cookies to count visits. If you block or clear them, the site still works normally.

Access to our billing system is limited to accounts that need it and is protected by password and, where available, two-factor authentication. Traffic to our website and client area is encrypted in transit.

No system is perfectly secure. You are responsible for the security of the servers you rent, including the operating system, the software you install and the credentials you use.

If we change this policy we will update the date at the top of this page. If the change is significant, we will say so on the website or by email to account holders.

Questions about this policy, or about the data we hold on you, go to support@formohost.com, or open a ticket from your client area.

FormoHost LLC, Wilmington, Delaware, United States.