1. Who we are
ZevsHost.Net IT Corporation (“ZevsHost”, “we”) operates the website www.zevshost.net and provides hosting, VDS/VPS, dedicated server, and domain-registration services. Contact: support@zevshost.net.
2. What data we collect
- Account data: email, name, phone number, billing address — provided by you at registration.
- Billing data: payment method identifier, transaction history — handled by our payment processors; we do NOT store full card numbers.
- Technical data: IP address, browser user-agent, requested URLs, timestamps — collected automatically in server logs.
- Cookies: essential session cookies and language preference. Optional analytics cookies only after your explicit consent via the banner.
3. Legal basis
We process personal data on the following bases: (a) contract performance — to provide the services you order; (b) legitimate interest — fraud prevention, security logs, service quality; (c) legal obligation — tax and accounting records; (d) consent — for optional analytics and marketing.
4. How long we keep it
Account data: for the lifetime of your account + 3 years after closure (Ukrainian tax law). Server logs: 90 days rolling. Billing transactions: 7 years. Support tickets: 3 years.
5. Who we share with
Data-center partners (Volia, ServerCentral, OVH) for infrastructure operation; payment processors (Visa/Mastercard networks, PayPal, WebMoney, cryptocurrency gateways) for billing; law-enforcement bodies upon lawful request. We never sell your data.
6. Your rights (GDPR + Law № 2297-VI)
- Access — you can request a copy of your personal data.
- Rectification — you can correct inaccurate data.
- Erasure — you can request deletion (subject to legal retention requirements).
- Portability — you can receive your data in a machine-readable format.
- Objection — you can object to processing for marketing.
- Complaint — you can lodge a complaint with the Ukrainian Commissioner for Human Rights or your local EU DPA.
To exercise any of these rights, email support@zevshost.net.
7. Security
All data-in-transit is encrypted via TLS 1.2+. Passwords are hashed with Argon2id. Backups are encrypted at rest. Access to production data is limited to authorized personnel under NDA.
8. Cookies
Essential cookies (session, language) are set on first visit. Analytics cookies are only set after you click “Accept” in the banner. You can decline via the same banner; you can also clear cookies in your browser at any time.
9. Changes
We may update this policy; the effective date above always shows the current version. Material changes are announced via email to registered customers.