01Who we are
This Privacy Policy applies to [MilesHost legal entity name], trading as MilesHost ("MilesHost", "we", "us" or "our"). It explains how we handle information about our customers, visitors to mileshost.com and my.mileshost.com (the "Site"), and — in limited cases — visitors to our customers' websites (together, "Users").
By using the Site, ordering a Service or joining our mailing list, you accept this policy. Terms not defined here have the meaning given in our Terms of Service. This policy has three parts: general information that applies to everyone, extra rights for US residents, and extra rights for EU, UK and Swiss residents.
02Information we collect
Information you give us
- Account & billing details — name, address, email, phone number, username, company details and payment information needed to set up and bill your Services.
- Domain registration data — registrant contact details required by registries and ICANN.
- Support & enquiries — the content of tickets, chats, calls and emails, and any extra details needed to resolve your request.
Information we collect automatically
- Technical data — IP address, browser type and version, operating system, referring URL, pages visited and the date and time of access (server log files).
- Cookies and similar technologies — see Cookies & analytics.
- Service usage — how you use your Services, such as resource consumption and login activity.
Information from others
We may receive information from fraud-prevention and credit-checking services, payment processors, and our service partners. We combine it with your account to form your customer record.
Data on your websites and mailboxes
Content you or your visitors store on our Services (website files, databases, emails) is processed on your behalf to provide hosting. For that data, you are the controller and we act as your processor.
03How we use your information
- To create and manage your account, deliver and support your Services, and process payments and renewals.
- To register and manage domains with registries and registrars.
- To answer enquiries and fix technical problems.
- To send service, billing and security notices.
- To send marketing about our products, where permitted — you can opt out at any time.
- To understand how the Site is used, improve it, and keep it secure and free of abuse or fraud.
- To comply with the law, respond to valid legal requests, and establish or defend legal claims.
04Who we share it with
We do not sell your personal information. We share it only as needed to run our business and deliver your Services:
- Infrastructure partner — our hosting, server and cloud Services run on infrastructure operated by hosting.com (A2 Hosting, LLC), which processes data on our behalf.
- Domain registries and registrars — such as Enom, Inc. / Tucows Inc., which must receive registrant data. Some of it may appear in public WHOIS/RDAP records where required.
- Email and productivity providers — Titan (Titan Solution Ltd SEZC) and Google (Google Workspace) when you order those Services. They process your mailbox data under their own privacy policies.
- Payment processors — [e.g. Stripe, PayPal — confirm] process card and bank details. We do not store full card numbers.
- Business tools — providers of our client area, support desk, CRM, email delivery, analytics and advertising [list tools used].
- Authorities — where required by law, court order or subpoena, or to protect our network, customers or others from harm.
- Business transfers — if MilesHost is involved in a merger, acquisition or sale of assets.
Our service providers must protect your information to at least the standard in this policy and use it only to provide services to us. On request, we'll tell you which partners deliver your Services and link to their privacy policies. We are not responsible for the practices of third-party websites linked from our Site.
05Cookies & analytics
Cookies are small files stored on your device. Session cookies are deleted when you close your browser; persistent cookies stay until they expire or you delete them.
- Essential cookies — needed for login, shopping cart, checkout and security. These are always on.
- Analytics cookies — help us understand how visitors use the Site, such as pages viewed and time on page. Set only with your consent where the law requires it.
- Advertising cookies and pixels — measure the effectiveness of our ads and show relevant ads on other platforms. Set only with your consent where required.
You can change your choices at any time through our cookie banner or [Cookie Settings link], and you can block or delete cookies in your browser settings. Some Site features may not work without essential cookies.
Tools we may use include [confirm: Google Analytics, Google Tag Manager, Google Ads, Microsoft Advertising, Meta Pixel, Cloudflare]. Each provider's own privacy policy applies to its processing.
06Marketing & advertising
With your consent (or where otherwise lawful), we may send you emails about new products and offers. Every marketing email includes an unsubscribe link, and you can update your preferences in your client area.
If we use audience-matching features on advertising platforms, we upload only hashed (scrambled) identifiers such as email addresses, used solely to match and show ads. You can opt out of this sharing at any time from your account privacy preferences or by contacting us.
07Text messages
If you give us your mobile number, we may send transactional, account and security texts — such as login verification codes and service alerts. Frequency depends on your account activity, and message and data rates may apply. We never sell or share your mobile number or SMS consent with third parties for their own marketing.
08Security
- Every page and payment on our Site is protected by SSL/TLS encryption — look for "https://" and the lock icon in your browser.
- Passwords are stored in encrypted form, and payment details are handled by PCI-compliant processors.
- We use technical, physical and administrative safeguards against loss and unauthorised access, and our staff must keep personal data confidential.
No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. Please keep your login details safe and enable two-factor authentication where available.
09How long we keep it
We keep personal data only for as long as needed for the purposes in this policy — usually for the life of your account and afterwards for as long as required by tax, accounting or other legal obligations, or to resolve disputes. Enquiry data is deleted once your request is resolved unless we need to keep it. When data is no longer needed, we delete or anonymise it.
10International transfers
MilesHost and its partners operate in several countries, including the United States, so your data may be processed outside your country of residence. Where we transfer data from the EU, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or on providers certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
11Children
Our Services are for adults; you must be 18 or older to open an account. We do not knowingly collect personal data from children under 13 (or under 16 in the EU). If you believe a child has given us personal data, please contact us and we will delete it.
12Health data (HIPAA)
MilesHost is not a "Covered Entity" or "Business Associate" under the US Health Insurance Portability and Accountability Act (HIPAA), and our Services are not designed to meet HIPAA requirements. Please do not use our Services to store or transmit HIPAA-regulated health information.
13Testimonials
If you give us a review or endorsement, we may publish it with your first name, last initial, region and likeness, as described in our Terms of Service. Contact us at any time and we will stop using it.
14Your choices
- Update your details at any time in your client area.
- Ask for access, correction or deletion of your data by contacting us. We may need to verify your identity first, and may keep some data where the law requires.
- Unsubscribe from marketing using the link in any marketing email or in your account preferences.
- Manage cookies through our cookie settings or your browser.
Rights under the CCPA/CPRA and other US state privacy laws.
California residents
Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to:
- Know what personal information we collect, use and disclose, and why.
- Delete personal information we hold about you, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising — including hashed emails used for ad matching. You can do this in your account privacy preferences.
- Limit the use of sensitive personal information.
- Not be discriminated against for exercising these rights.
We respond to verifiable requests within 45 days, as required by law. You may use an authorised agent to make a request on your behalf.
Other US states
Residents of Colorado, Connecticut, Virginia, Texas, Oregon, Montana and other states with comprehensive privacy laws have similar rights to access, delete and correct their data and to opt out of targeted advertising. To exercise any of these rights, email [privacy email, e.g. privacy@mileshost.com].
Information required by the GDPR and UK GDPR.
Data controller
The controller of your personal data is [MilesHost legal entity name], [registered address], email [privacy email]. [If required: EU/UK representative under Art. 27 GDPR — name & address].
Why we process your data and our legal basis
| DATA | WHY WE USE IT | LEGAL BASIS (GDPR) |
|---|---|---|
| Account, billing & order data | Providing, billing and supporting your Services | Contract — Art. 6(1)(b) |
| Invoices & tax records | Meeting accounting and tax obligations | Legal obligation — Art. 6(1)(c) |
| Server logs & security data | Keeping the Site and network secure and working | Legitimate interests — Art. 6(1)(f) |
| Support & enquiry data | Answering your questions | Contract or legitimate interests |
| Analytics & advertising cookies | Measuring and improving the Site and our ads | Consent — Art. 6(1)(a) |
| Marketing emails | Telling you about our products | Consent or legitimate interests |
Where processing relies on consent, you can withdraw it at any time; this does not affect processing that took place before withdrawal. Where we use processors, we have data processing agreements in place as required by Art. 28 GDPR.
Your rights
- Access — get a copy of the data we hold about you, its source, recipients and purpose.
- Rectification — have inaccurate data corrected.
- Erasure — have your data deleted where there is no reason for us to keep it.
- Restriction — ask us to limit processing, for example while we check the accuracy of your data or consider an objection.
- Portability — receive data you provided in a common, machine-readable format, or have it sent to another provider where technically feasible.
- Complaint — lodge a complaint with your local data protection authority (in the UK, the ICO), in particular where you live or work.
RIGHT TO OBJECT (ART. 21 GDPR): WHERE WE PROCESS YOUR DATA BASED ON LEGITIMATE INTERESTS, YOU MAY OBJECT AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. WE WILL STOP UNLESS WE HAVE COMPELLING LEGITIMATE GROUNDS OR NEED THE DATA FOR LEGAL CLAIMS. YOU MAY ALSO OBJECT AT ANY TIME TO THE USE OF YOUR DATA FOR DIRECT MARKETING, INCLUDING RELATED PROFILING — AND WE WILL THEN STOP USING IT FOR THAT PURPOSE.
17Changes to this policy
We may update this policy from time to time. If we make a material change, we will notify you by email, post a notice on the Site, or mark the policy as updated. The "Last updated" date at the top shows when it last changed.
18Contact us
For privacy questions or to exercise your rights, contact us:
[privacy email, e.g. privacy@mileshost.com]
[MilesHost legal entity name]
[Registered address]
Ask our team and we'll handle your request quickly.
