Effective Date: [03.03.2025]

1. Introduction Cvahost is committed to safeguarding the personal and sensitive data of our customers and ensuring the highest standards of security. This Data Protection & Security Policy outlines our measures to protect user data, prevent unauthorized access, and maintain compliance with applicable data protection laws.

2. Data Collection & Use We collect and process personal data solely for the purpose of providing our hosting services, customer support, and improving our offerings. The types of data collected include:

• Personal Information: Name, email address, phone number, and billing details.
• Technical Data: IP addresses, login credentials, and browsing activities.
• Payment Data: Transaction details, excluding full credit card numbers.

3. Data Storage & Retention

• Personal data is stored on secure servers with industry-standard encryption.
• We retain data for as long as necessary to fulfill contractual obligations, comply with legal requirements, and provide customer support.
• Upon account closure, personal data is securely deleted unless retention is required by law.

4. Security Measures Cvahost employs multiple layers of security, including:

• SSL/TLS encryption for data transmission.
• Firewalls and Intrusion Detection Systems (IDS) to prevent unauthorized access.
• Regular security audits and vulnerability assessments.
• Multi-factor authentication (MFA) for account access.
• Strict access controls and staff training on data security protocols.

5. Data Sharing & Third-Party Access

• Cvahost does not sell or rent user data to third parties.
• We may share necessary data with trusted partners for service fulfillment (e.g., payment processors, domain registrars) under strict confidentiality agreements.
• Data may be disclosed if required by law, regulatory authorities, or to prevent fraud.

6. User Rights & Control Customers have the right to:

• Access, update, or delete their personal data.
• Withdraw consent for data processing where applicable.
• Request data portability in a structured format.
• Lodge complaints with a data protection authority if they believe their rights are violated.

7. Incident Response & Breach Notification

• In the event of a data breach, Cvahost will promptly investigate and mitigate any risks.
• Affected users will be notified within 72 hours if their data is compromised.
• Authorities will be informed as per regulatory requirements.

8. Compliance & Updates

• Cvahost complies with GDPR, CCPA, and other relevant data protection laws.
• This policy may be updated periodically, and users will be notified of significant changes.

9. Contact Information For any inquiries or concerns regarding data protection, please contact us: Cvagroups Technologies Limited
Patna, Bihar – 800020
Email: [email protected]
Phone: +91 9471612109