Who We Are7081936 Canada Inc., which trades under the name Web Hosting Canada (together with its agents, representatives, consultants, employees, officers, and directors — collectively, “WHC”, “we”, or “us”) provides web hosting, domain name, website creation, website security, and online marketing services. We are a Canadian corporation based in Montreal, Canada.
You may withdraw your consent to our management of your personal information, at any time, subject to legal and contractual restrictions, upon reasonable notice. However, such a withdrawal may reduce our ability to provide you with certain products and services. For more information on the implications of withdrawing your consent or to notify us of the withdrawal of your consent, please contact our Data Protection Team.
What We Collect and ReceiveFor you to use our website, products, and services, we need to collect and process certain information. Depending on your use of our website, products, and services, this may include the following types of information.
General personal information
- Information you provide by completing forms on our website — your name, company name, email and mailing addresses, telephone number, login, and password details. We may ask you for this information if you register for an account on our website, order our products or services, subscribe to our newsletters, login to our online “Client Area”, upload or submit content through our website (including the “Client Area”), or if you contact us.
- Information you provide for identity verification purposes when contacting us or for the purposes of processing your payment. In some cases, our payment processor will request that you provide additional personal information to confirm your identity before payment can be processed.
- For certain domain name products and services, we may request your residency status or whether you are a member of certain organizations. This information is required by certain domain name registries (e.g., Canadian Internet Registration Authority) for the purposes of registering your chosen domain name(s) with the registry.
- Details of any transactions you make through our website, products, or services. As part of a transaction, we may collect and store payment information, including credit card or bank account details (as applicable), expiration date, and country, which we require for payment processing, tax, and regulatory purposes.
- We partner with other companies (such as PayPal) for payment processing, and the payment information you submit is collected and used by them in accordance with their privacy policies.
Statistical and cookie information
- Statistical information about the way visitors and users interact with our website, products, and services, in the form of website traffic analytics (i.e., Google Analytics). The analytics engine passively gathers visitor and user information, including your IP address; the type of device, operating system, and browser you use; and your activity on our website. This information helps us to improve our website, products, and services, allowing us to provide you with a more friendly and secure user experience. You can opt out of having your data used by Google Analytics here.
- Cookies are small data files that are issued to your device when you visit a website and that store information about your use of the website. URL query strings are small amounts of data transmitted as part of a URL (e.g., website address) when you click on a hyperlink or submit a form in an internet browser.
Communication history information
- Communications you send to us (e.g., technical support tickets, questions, or feedback).
Sensitive personal information
- We ask that you do not send or disclose to us any sensitive personal information, including social insurance or social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background, or trade union membership.
- User content uploaded, collected, stored, used, transferred, or disclosed in connection with our website, products, or services. Such content includes website and email content in connection with our web hosting, website creation, website security, email solutions and marketing products and services.
How We Use This InformationWe use the information we collect from you for the following purposes:
- To enable us to provide you with our website, products, and services.
- To process transactions in connection with our website, products, and services. After a transaction, your personal information (e.g., credit card or financial information) may be kept on file in order to facilitate automated renewals. You may request that your credit card or financial information be deleted from our system and files at any point by contacting us.
- To create and administer your account, contact you, and customize your experience on our website or while using our products or services.
- To keep your account secure and protect our website, products, and services (including to prevent fraud and abuse).
- To restore your account or data where it was accidentally or maliciously deleted, corrupted, or otherwise damaged.
- To improve customer service by helping us to more effectively respond to your customer service requests and support needs.
- To help promote our website, products, and services.
- To send you periodic emails concerning order information, product or service information, company news, promotions, and legal information.
- To track and analyze use of our website, products, and services so we can improve them and provide you with the best experience possible.
- To meet regulatory requirements (e.g., tax laws).
European Union UsersData protection law in Europe requires a “lawful basis” for collecting and retaining personal information from citizens or residents of the European Union. Our lawful bases include:
- Performing the contract we have with you: We need your personal information to comply with our contractual obligation to deliver you our products or services.
- Legal compliance: Sometimes the law says we need to collect and use your data. For example, tax laws require us to retain records of payments made for our products and services.
- Legitimate interests: This is a technical term in data protection law which essentially means we have a good and fair reason to use your data and we do so in ways which do not hurt your interests and rights. We sometimes require your data to pursue our legitimate interests in a way that might reasonably be expected as part of running our business and that does not materially impact your rights, freedom, or interests. For example, we may use identity, device, and location information to prevent fraud and abuse and to keep our website, products, and services secure. We may also send you promotional communications about our products or services, subject to your right to control whether we do so.
- We analyze how users interact with our website, products, and services so we can better understand which elements of the design are working well and which are not working so well. This allows us to develop and improve the quality of the online experience we offer to all our users.
How Your Information Is SharedWe respect your privacy. We do not disclose, sell, trade, or otherwise transfer your personal information to third-parties without your prior consent, except as described below.
When you register for a domain name, we are obligated to transmit certain personal contact information (e.g., your name, address, telephone number, and email address) to the applicable domain name registrar for publication in the publicly accessible WHOIS database. Domain name registrants are required to provide and maintain accurate contact information in the WHOIS database. Unfortunately, as the WHOIS database is publicly accessible, it is a target for data harvesting by persons or organizations engaged in spam, fraud, and identity theft. Consequently, we offer you a Privacy Protection service that will shield your personal information by making us your WHOIS trustee and by listing the contact information of our privacy team instead of your own in the WHOIS database. The Privacy Protection service is available with most domain types during registration or transfer orders, but you may opt out by unselecting the service during the order process. We highly recommend against opting out, but should you do so or should you register a domain type that does not support Privacy Protection, you accept that your personal contact information will be publicly disclosed in the WHOIS database.
We may use certain personal information for promotional purposes (e.g., testimonials on our website). When submitting testimonials through our website or our social media pages you agree that your name, testimonial and website address may be used without additional consent. We will not publicly disclose any of your sensitive information, including your account information, payment information, or personal contact information, without your explicit consent.
Non-personally identifiable visitor and user information may be provided to other parties for marketing, advertising, analytics, or similar purposes.
- Your personal information, including your contact information, residency or membership status, and password details.
- Your payment information, including credit card details and transaction history.
- Your communication history information, including any communications you send to us (e.g., technical support tickets, questions, or feedback).
- Your sensitive personal information.
Information that is shared with trusted third-party servicesWe may share your information with certain trusted third-party services to help us provide, improve, promote, or protect our website, products, and services. When we share data with third-party services that support our delivery of our products and services, we require that they use your information only for the purposes we have authorized. We may also share information that is aggregated and anonymized in a way that it does not directly identify you.
Our trusted third-party partners include:
- Datacenter and data hosting providers.
- Domain name registrars and registries (e.g., Canadian Internet Registration Authority).
- Payment processors (e.g., PayPal).
- Server Software providers (e.g., cPanel).
- Customer support service providers.
- Website builder and search engine optimization service providers (e.g., RankingCoach).
- SSL certificate and website protection service providers.
- Email distribution and marketing service providers.
- Analytics processors (e.g., Google Analytics).
Information that is shared to protect WHC and comply with the lawWe reserve the right to disclose personal information when we believe that doing so is reasonably necessary to comply with the law or law enforcement, to prevent fraud or abuse, or to protect the rights, property, or safety of WHC, its employees, users, or others.
We may retain archival copies of your information for up to 9 months after your data or account is flagged for deletion or otherwise becomes inactive. Archival copies may be used to restore your data or account in case the data or account is accidentally or maliciously deleted, corrupted, or otherwise damaged. If you wish your information to be deleted prior to the end of the above 9-month period, please contact our Data Protection Team.
We will also retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and protect our legal rights.
We also collect and maintain aggregated, anonymized, or pseudonymized information which we may retain indefinitely to protect the safety and security of our website, products, and services, improve them, or comply with legal obligations.
These third-party countries have their own laws governing data protection and government access to information. The rules that protect your personal information under these laws may be different than in your home country.
If you choose to use our website, products, or services, you must agree to our Terms of Service, which set out the contract between WHC and you. Further, you consent to having the necessary personal information transferred to trusted third-party service providers, located in Canada and other countries, for processing to provide you with the products and services for which you have contracted us.
Your RightsUsers residing in certain countries, including Canada and European Union member states, are afforded certain rights regarding their personal information. Except where an exception or exemption applies, these rights include your ability to access, correct, and request deletion of your personal information. While these rights are not applicable globally, all users of our products or services can manage and revise their personal information in the “Client Area” on our website or by contacting Customer Service. We may request that you provide us with personal information to verify your identity before we can disclose, change, or delete any personal information related to your account.
To modify or delete the personal information you have provided to us, please log in to the “Client Area” and update your profile or contact Customer Service.
To request an electronic copy of your personal information, please contact Customer Service.
To delete your account, please contact Customer Service. We may retain certain information as required by law or as necessary for our legitimate business purposes.
To opt out of having your personal information disclosed to third-parties for direct marketing purposes, please contact our Data Protection Team.
Residents of European Union member states have the right to restrict or object to the processing of their personal information under certain circumstances (e.g., to contest the accuracy of the data). They have the right to object to processing of their personal information for direct marketing purposes. To exercise any of these rights, please contact our Data Protection Team.
Residents of European Union member states have the right to lodge a complaint with a supervisory authority (e.g., privacy office) in the country where they live, where they work, or where an alleged infringement took place, if they consider that the processing of their personal information has infringed European Union privacy law.
Email NotificationsWe may send you email regarding your order information, product or service information, company news, promotions, and legal information.
We want to communicate with you only if you want to hear from us. We try to keep emails to a minimum and give you the ability to opt in to any marketing communications we send. You may opt out of receiving marketing email communications by following the detailed unsubscribe instructions located at the bottom of each email or by contacting Customer Service and requesting to opt out.
From time to time, we may provide you with necessary information (e.g., service-related announcements or legal information) to which you will not be able to opt out.
SecurityWe take security seriously, and the security of your personal information is important to us. We employ a variety of security measures to maintain the safety of your personal information when you place an order with us or access your personal information.
- Your personal information is stored on secure servers or in secure file storage.
- All sensitive/credit information supplied via our website is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our database, only to be accessed by authorized personnel.
No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee its absolute security. Your account information is protected by a password, which you should choose carefully and keep secure. If you disclose your password to a third-party, you may lose considerable control over your personal information and you may risk that legally binding actions be taken on your behalf. If the security of your password has been compromised, for whatever reason, you should change it immediately.
We encourage the responsible disclosure of vulnerabilities of our website, products, or services by contacting our Data Protection Team.
ChildrenYou must be 13 years of age or older to register with us. We will not knowingly collect any personal information from children under the age of 13. However, if a child under the age of 13 provides us with personal information, upon written request by a parent or legal guardian, we will delete this information from our files.
Data Protection TeamIf you have any questions regarding our privacy practices, you may contact us by email at email@example.com, or by mail at: Web Hosting Canada 1030 rue Beaubien Est, #103 Montréal, QC Canada H2S 1T4
Effective: May 25, 2018