This policy explains the data AlaaiHost needs to operate its website and protected digital services.
AlaaiHost may process verified account identity, contact details, billing and tax information, domain registrant data, support correspondence, security events, service configuration, usage metadata and transaction references. Payment-card credentials are handled by the selected payment provider rather than stored by AlaaiHost.
Information is used to authenticate users, answer enquiries, calculate and verify an order, provision and support a requested service, prevent abuse, maintain audit records, comply with legal duties and resolve billing or security incidents.
The edge network may provide a coarse country code so AlaaiHost can select an initial language and currency. Manual preferences are stored on the user’s device. The public currency converter sends only the selected currency pair to the reference-rate service; it is not used to authorise checkout.
Data is shared only as reasonably necessary with infrastructure, registry, identity, payment, communications, security and professional-service providers, or where required by law. Domain registrant details may be processed under registry and registrar rules.
Records are retained for the period necessary for the service, security, dispute, tax, accounting and legal purposes for which they were collected. Retention periods may differ by record type and jurisdiction. Data is deleted or de-identified when it is no longer required.
AlaaiHost uses server-side access checks, protected secrets, origin checks, signed payment callbacks where enabled, audit records and encrypted storage where applicable. No internet service can promise absolute security.
Subject to applicable law, a person may request access, correction, deletion, restriction, portability or withdrawal of consent. Certain records may be retained where required for legal, security, fraud-prevention, accounting or contractual reasons.
Service providers may process data in other countries with appropriate contractual and technical safeguards. AlaaiHost’s commercial hosting services are not directed to children acting without a parent or lawful guardian.
Privacy questions and rights requests should use the current support channel published on the Contact Us page. Identity may be verified before a request affecting account data is completed.