Official Data Protection & Privacy Statement

Privacy Policy

At wpshost (a brand operated by WPS INFOTECH), we prioritize the confidentiality, security, and integrity of your personal and business data. Learn how we collect, safeguard, and process your information in full compliance with the Indian Digital Personal Data Protection (DPDP) Act 2023, GDPR, and ICANN regulations.

Last Updated: October 2026 Legal Entity: WPS INFOTECH 256-Bit SSL Encrypted Portal
Section 1

Entity Identification & Scope of Policy

This Privacy Policy sets forth the privacy practices and data protection commitments of wpshost, a premier web hosting, cloud computing, and infrastructure brand owned and operated under the legal entity WPS INFOTECH (hereinafter referred to as "wpshost", "we", "us", or "our").

This policy applies to all visitors, registered account holders, clients, and subscribers of our services, which include but are not limited to: Web Hosting (Shared, WordPress, Reseller, Cloud), Virtual Private Servers (VPS), Dedicated Server Infrastructure, Business Email Hosting, Domain Name Registration & Management, SSL Certificates, and the WHMCS Client Management Portal.

Registered Corporate Address: 14/3 Veer Maruti Nagar, Mhow, Indore, Madhya Pradesh, India - 453441. By using our website (wpshost.in) or purchasing any hosting product, you acknowledge and agree to the practices outlined in this policy.

Section 2

Information We Collect

In accordance with data minimization principles, we only collect information necessary to deliver, bill, secure, and maintain your hosting accounts and domain registrations. We collect the following categories of information:

Account & Identity Data

Full legal name, organization/company name, primary email address, alternate contact emails, mobile phone number, postal street address, state, postal code, and country.

Billing & Invoicing Data

Transaction IDs, payment gateway tokens, billing address, tax identification (GSTIN / PAN for Indian businesses), invoices, and renewal preference history.

Domain Registrant (WHOIS)

Registrant, administrative, technical, and billing contact records required by ICANN, registry authorities (.in NIXI, .com Verisign), and domain registrars.

Technical & Diagnostic Logs

IP addresses, operating system, browser headers, referring URLs, SSH/cPanel/Webmail access attempts, firewall blocks, and server health telemetry.

Section 3

How We Use Your Information (Purposes & Legal Grounds)

We process your information based on legitimate contractual necessity, statutory obligations, and your explicit consent for the following operational objectives:

  • Service Provisioning & Fulfillment: Creating hosting accounts, configuring cPanel/WHM environments, allocating IP addresses, provisioning VPS/Dedicated nodes, and routing DNS records.
  • Account Management & Billing: Generating tax-compliant invoices, processing automated renewals, sending service expiration reminders, and updating subscription statuses.
  • Technical Support & Ticket Resolution: Diagnosing server incidents, reviewing error logs, responding to client assistance requests via tickets, email, or telephone.
  • Infrastructure Defense & Anti-Abuse: Preventing phishing, unauthorized port scanning, brute-force SSH/FTP attacks, zero-day botnet outbreaks, and mitigating Distributed Denial of Service (DDoS) attempts.
  • Legal Compliance: Adhering to applicable regulatory directives, CERT-In cybersecurity emergency mandates, and judicial court orders.
Strict Zero-Spam Guarantee: wpshost does NOT rent, sell, trade, or monetize your contact details to third-party marketing firms or data brokers. Ever.
Section 4

Domain Name Registration & ICANN WHOIS Policy

When you register, renew, or transfer a top-level domain (e.g., .com, .net, .in, .org), ICANN (Internet Corporation for Assigned Names and Numbers) and country-code registry operators (such as NIXI for .in) mandate the collection and transmission of Registrant, Administrative, and Technical contact data.

  • Public Directory (WHOIS): In compliance with ICANN's Temporary Specification and GDPR privacy rules, personal identifying details for generic TLDs are masked or redacted in public WHOIS databases wherever supported.
  • WHOIS ID Protection: For supported extensions, wpshost offers WHOIS ID Protection services that replace your personal phone, email, and home address with proxy credentials to safeguard you against spammers and unwanted solicitations.
  • Accuracy Obligation: Registrants are legally required by ICANN to provide true, accurate, and current contact information. Failure to verify domain ownership contact within 15 days may lead to domain suspension as per ICANN guidelines.
Section 5

Customer Hosted Content, Databases & Backup Policy

You retain 100% full ownership and intellectual property rights of all website files, source code, media, databases, scripts, and email messages uploaded or hosted on your wpshost hosting packages, VPS servers, or dedicated servers.

Data Custodian Role

wpshost acts strictly as an infrastructure host and data processor. Our technical personnel do not inspect, crawl, read, or distribute your private database records or hosted website assets without your explicit written ticket consent for debugging.

Disaster Recovery Backups

While we maintain system-level snapshots and disaster recovery backups for infrastructure resilience, customers remain primarily responsible for downloading independent off-site copies of their data via cPanel backup tools or automated backup add-ons.

Section 6

Third-Party Disclosures & Service Sub-Processors

We only disclose personal data to vetted third-party vendors and sub-processors strictly required to fulfill essential web hosting services:

Category Purpose & Scope Data Transferred
Domain Registrars & Registries ICANN, NIXI (.in Registry), Verisign, and accredited registrars for domain registration and WHOIS records. Registrant Name, Address, Email, Phone
Payment Gateways PCI-DSS Level 1 compliant processors (Razorpay, Stripe, PayPal) for credit/debit/UPI payments. Billing Name, Email, Transaction Amount
SSL Certificate Authorities Sectigo, Let's Encrypt, DigiCert for issuing and verifying SSL/TLS certificates. Domain Name, Organization/Contact verification
Datacenter & Network Nodes Tier-3/Tier-4 secure server colocation facilities for server hardware, electrical, and upstream routing. Encrypted server volumes, Server IP addresses
Legal & Law Enforcement In response to valid Indian judicial subpoenas, court orders, or national cybersecurity CERT-In advisories. Scope strictly limited to legal order specification
Section 7

Payment Security & PCI-DSS Compliance

Financial security is of paramount importance at wpshost. We enforce strict financial safeguards across all billing channels:

  • Zero Raw Card Storage: We never store credit card numbers, debit card numbers, or CVV security codes on our local WHMCS database servers.
  • Tokenized Transactions: All card, Net Banking, and UPI payment transactions are handled through encrypted tokenization directly via certified PCI-DSS Level 1 payment gateways.
  • Transport Layer Security: All billing checkout transactions are encrypted in transit using modern TLS 1.3 / 256-bit SSL encryption.
Section 8

Cookie Policy & Tracking Technologies

Cookies are small alphanumeric data packets saved on your device to ensure seamless navigation and portal operations. We use cookies in the following ways:

Strictly Necessary

Maintains your authenticated login session, shopping cart items, and CSRF security tokens inside the WHMCS client portal.

Functional Preferences

Remembers selected language, currency preferences (e.g., INR vs USD), and responsive layout choices across site visits.

Security & Abuse

Identifies suspicious repeat login failures, detects automated bot spam, and shields customer accounts from session hijacking.

Managing Cookies: You can configure your browser to block or notify you about cookies. Note that disabling essential session cookies may impair your ability to login or checkout in the client area.

Section 9

Data Retention & Account Termination Lifecycle

We retain customer records in accordance with operational necessity, contract duration, and statutory Indian taxation rules:

  • Active Subscriptions: Data is actively maintained throughout the lifetime of your active hosting account or active domain registration.
  • Tax & Financial Invoices: Payment receipts, GST invoices, and transaction logs are preserved for up to 7 years as mandated by Indian Corporate, GST, and Income Tax legislation.
  • System Access Logs: Web server access logs, firewall blocks, and diagnostic traffic captures are rotated and purged within 90 to 180 days.
  • Terminated Hosting Nodes: Upon permanent service cancellation or overdue account termination, all hosted files, MySQL databases, and mailboxes are securely and irrevocably wiped from server storage nodes following our standard grace period.
Section 10

Information Security, DDoS Protection & Infrastructure Safeguards

wpshost deploys multi-tiered technical, organizational, and physical safeguards engineered to defend against unauthorized access, alteration, destruction, or interception:

Enterprise Hardware Firewalls & Real-Time WAF Filtering
Layer 3 / 4 / 7 Distributed Anti-DDoS Mitigation
Proactive Server Malware & Rootkit Scanning
Two-Factor Authentication (2FA) for Staff & Clients
Role-Based Access Control (RBAC) & Need-to-Know Privilege
24/7/365 Automated Uptime & Network Surveillance
Section 11

Your Privacy Rights (Indian DPDP Act 2023 & GDPR)

Under applicable data protection frameworks, including the Indian Digital Personal Data Protection Act 2023 and global standards (such as GDPR), you enjoy distinct rights regarding your personal information:

Right to Access

Review a summary of personal information we process concerning your account directly via the Client Portal.

Right to Rectification

Modify, correct, or update inaccurate contact addresses, billing phones, or registrant names anytime in your profile.

Right to Data Portability

Export complete cPanel site backups, MySQL databases, and email files freely in industry standard tar/zip archives.

Right to Erasure ("Forgotten")

Request account closure and personal data deletion, subject only to necessary legal, tax, and anti-fraud retention periods.

Section 12

Grievance Redressal Officer & Official Contact Information

In accordance with the Information Technology Act 2000, Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, and the Digital Personal Data Protection Act 2023, the details of our Grievance Redressal Officer and Corporate Office are provided below:

Corporate Office & Entity
  • Brand Name: wpshost
  • Legal Entity: WPS INFOTECH
  • Registered Address: 14/3 Veer Maruti Nagar, Mhow, Indore, Madhya Pradesh, India - 453441
  • Operating Hours: 24/7/365 Customer Care
Direct Communication Channels