Privacy Policy

This notice explains how CloudRevol handles information about visitors, account holders and people contacting our team. Account and billing information may include your name, business name, email, telephone number, address, order history and support correspondence.

We collect information you provide when registering, placing orders, contacting support or using platform features. We may also receive transaction confirmations from payment providers and information from your authorised account users. Information required to fulfil an order or secure an account may be necessary to provide the requested service.

Technical records may include IP addresses, browser and device details, timestamps, access logs, authentication events, resource alerts and security events. These records may constitute personal data; they are not automatically anonymous.

We use relevant information to create and administer accounts, fulfil orders, provide hosting and subscribed features, process billing, respond to support requests, deliver service notices and investigate faults or abuse.

Security logs and technical information help protect accounts and infrastructure, investigate incidents and improve reliability. Access to customer-hosted content is limited to authorised service work, necessary security investigation or legal requirements.

Where a legal basis is required, processing may rely on performance of a contract, legal obligations, consent or legitimate interests in operating and securing our services. Any legitimate-interest processing must take account of your rights and applicable law.

Marketing communications are separate from operational messages and follow applicable consent or other lawful requirements. You may unsubscribe from marketing emails; essential billing, security and service notices may continue.

Cookies and similar technologies may support authentication, account sessions, security and preferences. Optional analytics or marketing technologies, where used, must be distinguished from essential service functions.

Where applicable law requires consent, optional technologies require your choice before use. Browsing this website or accepting hosting terms does not by itself provide consent for optional tracking.

You can manage cookies through available site controls and browser settings. Blocking essential cookies may prevent login or other functions. Contact us for details of technologies used on a specific CloudRevol service.

Payments are handled through the payment methods and providers offered at checkout. Payment providers process payment information under their own privacy notices and applicable obligations.

CloudRevol does not retain full credit-card details after a transaction. Billing and transaction records may be retained for accounting, refunds, disputes and legal obligations. Any saved payment method or recurring-payment arrangement depends on the provider and the option authorised at checkout.

This notice does not claim PCI certification for CloudRevol or guarantee that any payment system is risk-free. Please do not send full card details, card security codes or banking passwords in support messages.

We do not sell, trade or rent personal information. We may disclose relevant information to providers performing functions necessary for the services, subject to appropriate contractual and confidentiality arrangements.

Depending on the subscribed features, recipients may include infrastructure and data-centre providers, backup-storage providers, payment processors, transactional-email services, support systems and security or CDN providers. Enabled features such as Secure Edge may route request and security information through the relevant provider.

We may disclose information where required by law or reasonably necessary to investigate fraud or security threats, enforce lawful contractual rights or protect people and services. Requests are assessed against applicable legal requirements.

In a merger, acquisition or transfer of the business, relevant information may be transferred subject to applicable law, appropriate confidentiality and required notices.

Active service data is retained to provide the subscribed service. After termination, hosted files and databases are subject to the applicable contract and deletion process. The 30-day post-termination deletion period relates to ordinary hosted service data, not every account, billing, security or legal record, and does not promise continued access or recovery during that period.

Backup copies expire according to the configured retention schedule. Standard database and subscribed offsite backups generally have 15-day retention as described in the service terms. Deletion from active storage may therefore precede expiry of backup copies.

Account, invoice, transaction, support and security records may be retained as needed for their purpose, legal or tax requirements, fraud prevention and the establishment or defence of claims. Retention depends on the record type, statutory requirements, dispute status and operational need; information is deleted or anonymised when no longer required.

Customers should export required data and retain independent backups before cancelling. Legal holds or other mandatory preservation obligations may delay deletion. A deletion request does not automatically require removal of records that must lawfully be retained.

We use appropriate technical and organisational safeguards to reduce risks of unauthorised access, loss, alteration or disclosure. No hosting service, security tool, encryption method or backup system can guarantee absolute security.

Customers must secure their credentials, use MFA where available, keep authorised users current and maintain their applications and dependencies. Under self-managed hosting, application security and application-level privacy compliance remain the customer's responsibility.

Subscribed monitoring and security features may record events and take automated protective action, including blocking suspicious traffic. Trusted-IP exceptions are specific to the supported controls and do not guarantee access across every security layer.

If a personal-data incident occurs, we will assess it and provide notifications and cooperation where required by applicable law or the relevant agreement. General infrastructure alerts are not a substitute for legally required incident notification.

Customers determine the purposes and content of their websites and applications and are responsible for their own privacy notices, permissions and lawful processing. CloudRevol handles hosted data to deliver the agreed hosting services and authorised instructions, subject to applicable law.

Where required, the parties must use an appropriate data-processing agreement to define their controller and processor roles, instructions, safeguards, subprocessors and assistance obligations. This notice does not replace that agreement.

A visitor seeking access to or deletion of information held by a customer-hosted website should contact that website operator. CloudRevol may assist the customer where required by law or contract, but cannot independently approve requests concerning data the customer controls.

Data locations depend on the selected hosting region and the providers used for support, billing, backups and enabled features. Selecting a server region does not by itself guarantee that all related service information remains in that country.

Where transfers require safeguards under applicable law, the relevant legal mechanism and safeguards must be used. Contact [email protected] for information about locations and transfer arrangements applicable to your service.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, or withdraw consent. These rights are subject to lawful exceptions; withdrawing consent does not invalidate earlier lawful processing.

Send requests to [email protected]. We may request information reasonably necessary to verify identity and authority before disclosing or changing data. We respond within the time required by applicable law and explain any lawful limitation.

You may raise a privacy concern with our team and, where applicable, complain to the relevant data-protection authority. Contractual support or billing limits do not remove mandatory privacy rights.

This is a privacy notice describing processing; using the website does not waive your privacy rights or constitute blanket consent to all processing.

We may update this notice to reflect changes in services, practices or law. Material changes will be communicated where required, and fresh consent will be obtained where necessary. Updates do not retrospectively authorise an incompatible use of information.

For privacy questions, requests or concerns, contact [email protected]. Please identify the service or account involved and provide enough information for us to understand your request without including unnecessary sensitive information.

For hosting support, contact [email protected]. Privacy enquiries and legal rights are handled separately from additional paid application-management work.