Privacy Policy

Last updated: September 18, 2026

This page explains, in plain English, what personal data AriHosting collects, why we collect it, who we share it with, and what rights you have over it. We're based in Europe, your data stays in Europe, and we only collect what we actually need to run your hosting. That's the whole philosophy — the details are below.

Who we are

AriHosting is a web hosting provider operating from a European data centre. We're the "data controller" for the personal data described here — which means we decide what data is collected and why, and we're responsible for looking after it. If you have any questions, email help@arihosting.online — a real person reads that inbox.

What we collect and why

Data	Why we need it
Name and email address	To create your account, send you invoices, and communicate about your services. This is needed to perform our contract with you.
Billing address	Required for EU invoicing/tax obligations (a legal obligation).
Payment card details	To charge for your plan. Card data goes directly to Stripe (our payment processor) and is tokenized — we never see or store your full card number.
Domain name and website data you upload	To provide the hosting service itself — this is the product you're buying.
IP address and basic device/browser info	To keep the service secure: rate limiting, fraud prevention, and blocking brute-force attacks. This is our legitimate interest.
Email support correspondence	To help you when you contact us (legitimate interest in running a support service).

How we use your data (the legal bases)

Under the GDPR, every use of personal data needs a lawful basis. Ours are:

• Performance of a contract — providing and billing your hosting service.
• Legal obligation — keeping invoicing records required by EU tax law.
• Legitimate interest — keeping the platform secure, preventing fraud and abuse, and improving our service.
• Consent — only where we specifically ask for it (for example, optional marketing emails, which you can opt out of at any time). We never sell your data, and we don't use your data for advertising.

Who we share data with

We share your data only with the companies that make the service work, and only the minimum needed:

• Stripe — payment processing. They hold your card data (see their privacy policy for details); we hold only a reference token and the last four digits.
• WHMCS / cPanel infrastructure — the billing platform and control panel software that run your account. This is our own infrastructure on our own servers.
• Email services — to deliver invoices, notifications, and support replies to you.

All of these partners process data under our instruction (as "processors") under written agreements, and they are bound by the same European data-protection standards. We do not sell, rent, or trade your personal data to anyone.

Where your data lives

Your data is stored in our European data centre. We do not transfer your personal data outside the European Economic Area (EEA) for processing. Payments are handled by Stripe, which is certified under the EU–US Data Privacy Framework where any cross-border transfer is required.

How long we keep your data

• Account data — for as long as you have an active account with us.
• Invoices and billing records — kept for the period required by EU tax law (typically 6–10 years), because we are legally obliged to keep them.
• Support emails — kept for up to 2 years after your last contact so we can pick up conversations when you return.
• Security/rate-limit logs — kept briefly (typically 30 days) for threat investigation, then deleted.

When we no longer need your data, we delete it securely — including wiping it from backups on their normal schedule.

Your rights

Under the GDPR you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — correct data that's wrong or out of date.
• Erasure — ask us to delete your data ("the right to be forgotten").
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, where we rely on consent.

To exercise any of these, email help@arihosting.online. We'll respond within one month, as the law requires. If you're not satisfied with how we handle a request, you have the right to lodge a complaint with your local data protection authority (in Ireland, the Data Protection Commission).

Cookies and website analytics

We use only essential cookies needed for the site to work (for example, keeping you logged in to your account) and the Stripe card element that powers secure checkout. We do not use advertising trackers, and we don't run cross-site analytics on our own pages. See our Cookie Policy for the full list.

When you first visit our site, a small consent bar asks you to confirm you're happy with this. Your choice is stored in your browser's local storage (not a cookie), and you can clear it at any time through your browser settings, after which the consent bar will appear again. If we ever add non-essential tools — like analytics or marketing cookies — they will be switched off until you explicitly accept them.

Security of your data

• All traffic to and from our site is encrypted with HTTPS (TLS).
• Payment card data is handled entirely by Stripe, which is PCI-DSS certified — we never process or store card numbers ourselves.
• We enforce strong passwords, rate limiting, honeypots, and bot protection across our signup and login flows.
• Access to server infrastructure is restricted to authorized staff with individual credentials.

Children's privacy

Our services are not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has given us their data, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the "last updated" date at the top of this page and, for significant changes, email you before they take effect. Continued use of the service after changes means you accept the updated policy.