Privacy Policy
Version 2.0 – Published 3 November 2026. Applies to orders placed from that date, and to existing customers from 3 December 2026.
1. Who we are
The controller of your personal data is SNG Hosting. Contact for privacy matters: privacy@snghosting.com.
This policy covers our websites (snghosting.com and its subdomains), the client area, the cart, our APIs, plugins and support channels. It does not cover the content your own websites or servers process on our infrastructure; for that data you are the controller and we act as your processor under the Data Processing Terms.
2. Data we collect
Account: name, email, phone, country, company, language, password hash, 2FA settings, linked Google, Discord or GitHub sign-in. Source: you, sign-in provider.
Billing: billing address, tax ID, invoices, orders, credit balance. Source: you, us.
Payments: transaction references and status, payment-provider token, last four digits and card brand, renewal agreement, bank-transfer receipts, crypto transaction references. Source: you, payment providers.
Support: tickets, chat messages, call notes, attachments. Source: you.
Technical and security: IP address, device and browser data, logs of logins, API calls and actions in the client area, server and network logs. Source: automatically.
Services: domains, server identifiers and configuration, usage metrics. Source: automatically.
Domain registrations: registrant contact data required by the registry. Source: you.
Marketing and analytics (only with consent where required): pages viewed, clicks, campaign and referral identifiers, cookie IDs, conversion events. Source: cookies and similar technologies.
Affiliate programme: referral codes, referred orders, payout details. Source: you, automatically.
Integrations: OAuth grants, API token metadata, connected AI agents and their permitted scopes. Source: you, automatically.
We never ask for your full card number or CVC by email, chat or ticket, and we do not store them.
3. Why we use it and on which legal basis
Creating your account and providing the services you order: performance of a contract.
Billing, payments, renewals, refunds, accounting and tax records: contract; legal obligation.
Support and service communications: contract; legitimate interest.
Security, fraud prevention, abuse handling, enforcing our Terms: legitimate interest; legal obligation.
Domain registration and WHOIS obligations: contract; legal obligation.
Improving the website and measuring performance: consent (analytics cookies) or legitimate interest where consent is not required.
Advertising and measuring campaigns: consent.
Marketing emails: consent, or legitimate interest for similar services to existing customers; you can opt out at any time.
Responding to authorities and legal claims: legal obligation; legitimate interest.
4. Who receives your data
We do not sell personal data. We share it only with:
- Payment providers and banks: Kashier (cards, Apple Pay and wallets), Cryptomus (cryptocurrency payments), and banks for transfers. They process data under their own policies and legal obligations.
- Infrastructure providers: data centres, network and CDN providers (including Cloudflare), email delivery and backup providers.
- Support tools: our live chat and tickets run on our own servers. If you contact us on WhatsApp, your messages are also processed by WhatsApp (Meta).
- Sign-in providers: if you sign in with Google, Discord or GitHub, that provider sends us your email address and basic profile and learns that you signed in to SNG.
- Service tools: Sentry (error monitoring of our systems), Pusher (live notifications in the client area), Cloudflare Turnstile (bot protection on sign-in and forms) and ipapi.co (detecting your country on the sign-up page).
- Analytics and advertising providers, only for visitors who consented where consent is required: Google (Analytics, Tag Manager, Ads), TikTok, Microsoft (Clarity), OpenAI (ads measurement) and Trustpilot (reviews widget). For conversion measurement we may send these providers event data and hashed identifiers, such as a hashed email address.
- Domain registries and registrars, as required to register and maintain domains, including publication in WHOIS/RDAP where the registry requires it.
- AI providers, only when you use an AI-assisted feature, and only the content you submit to that feature.
- Professional advisers, auditors and insurers.
- Authorities, when required by law, court order or to protect rights, safety and security.
- A buyer or successor, if our business or assets are transferred.
5. International transfers
We and our providers process data in Egypt, the European Union (mainly Germany and Finland), Saudi Arabia, the United States and other countries where our providers operate. Where the law requires it, we use appropriate safeguards such as standard contractual clauses.
6. How long we keep data
Account and service data: while the account is active, then up to 12 months.
Invoices, payments and accounting records: as required by tax and commercial law (generally 5 years).
Support tickets: 3 years after closure.
Security and access logs: up to 12 months, longer when needed for an investigation.
Hosted Content after a service ends: 14 days, then deleted.
Marketing consent records: as long as needed to prove consent.
Analytics and advertising cookies: see the Cookie Policy.
7. Security
We use security measures appropriate to the risk, such as encryption in transit, access controls, monitoring and backups. No system is completely secure; if a breach is likely to affect you, we will inform you and the authorities as the law requires.
8. Your rights
Depending on the law that applies to you, you may request access to your data, correction, deletion, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent at any time. You can also object to marketing at any time.
Send requests to privacy@snghosting.com from the email on your account. We may verify your identity and reply within 30 days. Deletion may be limited where we must keep records by law or to defend legal claims.
You may complain to a supervisory authority: in Egypt, the Personal Data Protection Center; in the EU, the authority of your country of residence.
9. Cookies
We use cookies and similar technologies as described in the Cookie Policy. Non-essential cookies are used only after you agree in the cookie banner, and you can change your choice at any time from the banner's settings.
10. Children
Our services are not intended for children under 13, and we do not knowingly collect their data. Users aged 13 to 17 may use the services only with the consent of a parent or legal guardian. If we learn that we hold data of a child under 13, or of a minor without that consent, we delete it or close the account. Parents and guardians can contact privacy@snghosting.com.
11. Automated decisions
We use automated checks to detect fraud and abuse, which can delay or block an order or payment. You may ask for a human review by contacting support.
12. Changes
We may update this policy. Material changes are announced by email or on the website before they take effect. The version and date at the top show the current version.
13. Contact
privacy@snghosting.com