Aira Hosting Privacy Policy

Effective Date: July 7, 2026

---

1. Introduction

Aira Hosting (“Aira Hosting,” “we,” “our,” or “us“) is committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us by our customers, website visitors, business partners, affiliates, and other individuals who interact with our services.

As a global provider of cloud infrastructure and web hosting solutions, we recognize that privacy is fundamental to maintaining the trust of our customers. Our services are used by individuals, businesses, agencies, developers, educational institutions, non-profit organizations, enterprises, and government organizations across multiple jurisdictions, including the United States, Canada, the European Economic Area (EEA), the United Kingdom, Australia, New Zealand, Singapore, and other international markets.

This Privacy Policy explains how Aira Hosting collects, uses, stores, protects, discloses, transfers, and otherwise processes personal information when you:

• Visit our websites.
• Create or manage an account.
• Purchase or renew services.
• Register or manage domain names.
• Use our hosting or cloud infrastructure services.
• Contact our support team.
• Participate in our affiliate program.
• Subscribe to marketing communications.
• Interact with our customer portal, billing portal, APIs, or other online platforms.

We are committed to processing personal information in accordance with applicable privacy and data protection laws, including, where applicable:

• The EU General Data Protection Regulation (GDPR)
• The UK General Data Protection Regulation (UK GDPR)
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
• The European ePrivacy framework
• Other applicable international privacy and data protection laws

Privacy protection is integrated into our operational processes through appropriate technical, administrative, and organizational safeguards designed to protect personal information while delivering secure, reliable hosting and infrastructure services.

---

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information processed by Aira Hosting in connection with:

• Our public websites.
• Customer portals.
• Billing platforms.
• Hosting platforms.
• VPS and cloud services.
• Dedicated server services.
• Domain registration services.
• SSL certificate services.
• DNS management services.
• Website security services.
• Email hosting services.
• Backup services.
• Managed hosting services.
• Infrastructure services.
• Developer APIs.
• Mobile applications, if offered.
• Marketing activities.
• Customer support.
• Affiliate program.
• Events, webinars, surveys, and promotional campaigns.

This Privacy Policy applies regardless of whether you access our services from a desktop computer, mobile device, tablet, API integration, or other supported platform.

This Privacy Policy also applies to prospective customers, existing customers, former customers, business representatives, authorized account users, website visitors, and individuals communicating with Aira Hosting.

Unless specifically stated otherwise, this Privacy Policy does not apply to:

• Information processed solely on behalf of customers within customer-hosted websites, applications, databases, or servers.
• Third-party websites or services not controlled by Aira Hosting.
• Products or services governed by separate privacy notices.

Where Aira Hosting acts solely as a hosting or infrastructure provider, customers generally determine the purposes and means of processing personal information contained within their own hosted environments. In such cases, customers remain responsible for ensuring that their own processing activities comply with applicable privacy laws.

---

3. Definitions

For purposes of this Privacy Policy, the following definitions apply.

“Account”

A registered customer relationship created for accessing one or more Aira Hosting services.

“Affiliate”

An individual or organization participating in the Aira Hosting affiliate or referral program.

“Customer”

Any individual, business, organization, governmental entity, agency, reseller, or developer purchasing or using our services.

“Customer Content”

Any files, databases, emails, applications, websites, source code, backups, configurations, logs, documents, media, or other information stored, transmitted, or processed using our services.

“Personal Information”

Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable individual.

Depending upon applicable law, this may include:

• Name
• Postal address
• Email address
• Telephone number
• Billing details
• IP address
• Device identifiers
• Customer account information
• Usage information
• Government-issued identifiers where legally required
• Other information protected by applicable privacy legislation

“Processing”

Any operation performed on personal information including collection, storage, recording, organization, consultation, use, disclosure, transfer, deletion, destruction, or other handling.

“Services”

Any products or services offered by Aira Hosting including hosting, cloud computing, infrastructure, security, domain registration, APIs, customer portals, billing systems, and related offerings.

“Website”

Any website, application, portal, or online platform operated by Aira Hosting.

---

4. Information We Collect

The categories of personal information we collect depend upon the products you use, how you interact with us, applicable legal requirements, and your preferences.

We may collect information directly from you, automatically through your use of our services, from trusted third-party partners, or from publicly available sources where permitted by law.

Categories of information may include:

4.1 Identity Information

Examples include:

• Full name
• Company name
• Business title
• Username
• Customer identification numbers
• Government-issued identification where legally required
• Date of birth where required for fraud prevention or legal compliance

4.2 Contact Information

Including:

• Email addresses
• Telephone numbers
• Billing addresses
• Mailing addresses
• Emergency contact information where applicable

4.3 Account Information

Including:

• Login credentials
• Authentication settings
• Multi-factor authentication preferences
• Password reset history
• Account security settings
• Customer portal preferences

Passwords are stored using secure one-way cryptographic hashing methods and are not maintained in readable form.

4.4 Financial Information

We may collect information necessary to facilitate billing and payment processing, including:

• Billing contact information
• Tax information
• Transaction history
• Invoice records
• Payment status
• Currency preferences

Payment card information is generally processed directly by authorized third-party payment processors and is not stored by Aira Hosting except where necessary for operational or legal purposes.

4.5 Technical Information

Including:

• IP addresses
• Browser type
• Operating system
• Device identifiers
• Connection metadata
• Time zone
• Language preferences
• Session identifiers
• Network diagnostics

4.6 Service Usage Information

Including:

• Hosting service usage
• Customer portal activity
• API usage
• DNS management activity
• Domain management activity
• SSL certificate lifecycle events
• Backup activity
• Infrastructure resource utilization
• Security events

4.7 Communication Information

Including communications with:

• Customer support
• Billing department
• Sales representatives
• Technical engineers
• Live chat
• Email correspondence
• Telephone calls where recording is disclosed and permitted

4.8 Marketing Information

Including:

• Newsletter subscriptions
• Communication preferences
• Marketing consent status
• Campaign interactions
• Event registrations
• Survey responses

4.9 Information from Third Parties

Where legally permitted, we may receive information from:

• Payment providers
• Domain registrars
• Fraud prevention partners
• Identity verification providers
• Business partners
• Public registries
• Government authorities
• Marketing partners

We use such information only for legitimate business purposes consistent with this Privacy Policy and applicable law.

---

5. Information Collected Automatically

When you visit our websites or use our services, certain information is collected automatically using technologies designed to improve security, performance, functionality, and user experience.

Automatically collected information may include:

• IP address
• Device identifiers
• Browser characteristics
• Operating system
• Referring website
• Pages visited
• Navigation patterns
• Session duration
• Clickstream information
• Error reports
• Performance metrics
• Language preferences
• Time zone
• Geographic region inferred from IP address
• Network diagnostics

Certain operational data is generated automatically by the infrastructure necessary to provide hosting and cloud services. Such information helps us:

• Maintain platform stability.
• Detect abuse.
• Prevent fraud.
• Improve service reliability.
• Diagnose technical issues.
• Respond to security incidents.
• Monitor infrastructure health.
• Comply with legal obligations.

Automatically collected technical information generally does not include the substantive content of customer-hosted files, databases, or email messages unless access becomes reasonably necessary for support, troubleshooting, abuse investigations, security incidents, or compliance with applicable law.

---

6. Information Provided by Customers

Customers may voluntarily provide personal information when interacting with Aira Hosting or using our services.

Examples include:

• Creating an account.
• Purchasing hosting services.
• Registering domain names.
• Requesting technical support.
• Participating in surveys.
• Registering for webinars.
• Applying to become an affiliate.
• Contacting our sales department.
• Uploading verification documents where legally required.
• Configuring managed services.

Customers are solely responsible for ensuring that personal information they provide is accurate, current, complete, and lawfully obtained.

Where customers upload or process personal information belonging to third parties using our hosting or cloud infrastructure, customers are responsible for obtaining all required notices, consents, permissions, and legal authorizations necessary under applicable law.

Except where required to provide services, investigate abuse, resolve technical issues, protect security, or comply with legal obligations, Aira Hosting does not routinely access, inspect, review, or monitor customer-hosted websites, files, databases, applications, or email content.

---

7. Account Information

Creating an Aira Hosting account requires certain information necessary to establish, maintain, secure, and administer the customer relationship.

Depending upon the services used, account information may include:

• Customer name
• Company information
• Email address
• Telephone number
• Billing address
• Tax information where applicable
• Account username
• Authentication credentials
• Service preferences
• Security settings
• Notification preferences
• Account recovery information

Account information is used to:

• Authenticate authorized users.
• Deliver purchased services.
• Provide technical support.
• Process billing.
• Communicate important service notices.
• Detect unauthorized access.
• Prevent fraud.
• Maintain service security.
• Comply with applicable legal obligations.

Customers are responsible for maintaining the confidentiality of their account credentials, using strong passwords, enabling multi-factor authentication where available, and promptly notifying Aira Hosting of any suspected unauthorized account activity.

---

8. Billing Information

To provide paid services, Aira Hosting collects and processes information necessary for billing, invoicing, taxation, subscription management, and financial recordkeeping.

Billing information may include:

• Customer name
• Business name
• Billing address
• Tax identification numbers where applicable
• VAT, GST, or similar tax information
• Invoice history
• Subscription records
• Payment status
• Transaction identifiers
• Currency preferences
• Credit balances
• Refund records where applicable

Payment card information and certain electronic payment credentials are generally processed by independent, PCI-compliant payment service providers acting on our behalf. Aira Hosting does not intentionally store complete payment card details unless required for lawful operational purposes or supported through secure tokenization mechanisms provided by authorized payment processors.

Billing records may be retained for periods required by applicable accounting, taxation, auditing, fraud prevention, contractual, and legal obligations.

We implement appropriate administrative, technical, and organizational measures designed to safeguard billing information against unauthorized access, disclosure, alteration, or destruction.

9. Payment Processing

Aira Hosting processes payments for subscriptions, renewals, domain registrations, infrastructure services, managed services, and other products through reputable third-party payment service providers that maintain appropriate security and regulatory standards.

To facilitate payment transactions, we may collect or receive information including:

• Customer name
• Billing address
• Email address
• Invoice information
• Transaction identifiers
• Payment status
• Payment method type
• Currency
• Tax information
• Fraud prevention indicators

Payment card information is generally transmitted directly to the applicable payment processor using encrypted connections and is handled in accordance with the payment provider’s own privacy and security practices. Where supported, payment credentials may be represented through secure tokenization technologies rather than storing complete payment card details.

We may receive confirmation from payment providers regarding:

• Successful or unsuccessful payments
• Chargebacks
• Refunds
• Payment disputes
• Fraud alerts
• Subscription renewal status
• Payment authorization status

Payment information is processed for purposes including:

• Completing transactions
• Managing recurring subscriptions
• Preventing fraud
• Complying with accounting and tax obligations
• Maintaining financial records
• Providing customer support
• Detecting unauthorized payment activity

Our payment processors act as independent data controllers or processors, depending on the applicable service and legal framework. Customers should review the privacy policies of their selected payment providers for additional information regarding the processing of payment-related personal information.

---

10. Hosting Services Data

As a provider of hosting and cloud infrastructure services, Aira Hosting processes certain information necessary to provision, maintain, secure, and operate customer environments.

Hosting-related information may include:

• Hosting account identifiers
• Service plans
• Server allocations
• Virtual machine configurations
• Resource utilization metrics
• Operating system selections
• Backup configurations
• Network configurations
• Firewall settings
• DNS configurations
• SSL certificate status
• Service deployment history
• Infrastructure monitoring data

The operation of hosting services necessarily generates technical metadata and operational records required to:

• Provision services
• Maintain availability
• Diagnose technical issues
• Monitor infrastructure health
• Detect malicious activity
• Prevent abuse
• Perform maintenance
• Improve service reliability
• Investigate incidents
• Comply with legal obligations

Unless required for legitimate operational purposes, Aira Hosting does not routinely inspect or analyze the substantive content stored within customer hosting environments.

Access to customer environments is limited to circumstances where reasonably necessary, including:

• Responding to customer-authorized support requests
• Troubleshooting service failures
• Investigating abuse reports
• Addressing cybersecurity incidents
• Protecting infrastructure integrity
• Complying with valid legal obligations
• Preventing fraud or unauthorized use

Whenever practical and appropriate, access is limited to the minimum information reasonably necessary to perform the required task.

---

11. Customer Website Data

Customers retain ownership of all websites, applications, files, databases, source code, digital assets, and other content hosted through Aira Hosting services.

Customer website data may include:

• Website files
• Images
• Documents
• Application code
• Databases
• Configuration files
• User-generated content
• Content management system data
• API endpoints
• Website analytics implemented by customers
• Customer business information

Aira Hosting provides the infrastructure used to host this information but generally does not determine the purposes or means of processing personal information contained within customer websites.

Accordingly, customers are generally responsible for ensuring that:

• Their websites comply with applicable privacy laws.
• Appropriate privacy notices are provided.
• Required user consents are obtained.
• Cookies are deployed lawfully.
• Third-party integrations are appropriately disclosed.
• Personal information is processed in accordance with applicable legal requirements.

Aira Hosting does not routinely monitor, review, analyze, or access customer website content.

Access may occur only where reasonably necessary to:

• Provide requested technical support
• Resolve operational issues
• Investigate abuse complaints
• Detect malware or security threats
• Respond to infrastructure incidents
• Enforce applicable service policies
• Comply with legal requirements

Any such access is performed by authorized personnel subject to confidentiality obligations and internal access controls.

---

12. Customer Email Data

Customers using Aira Hosting email hosting services may store and transmit electronic communications through our infrastructure.

Customer email data may include:

• Mailbox content
• Attachments
• Sender and recipient addresses
• Message metadata
• Delivery logs
• Spam filtering information
• Email routing records
• Authentication records
• Mail server configuration data

The confidentiality of customer email communications is important to Aira Hosting.

We do not routinely read, review, or monitor the content of customer email communications.

However, limited access may become necessary where reasonably required to:

• Resolve customer support requests
• Restore mailbox functionality
• Investigate delivery failures
• Detect spam campaigns
• Investigate malware
• Address account compromise
• Protect platform security
• Respond to valid legal requests
• Comply with applicable law

Automated filtering technologies may analyze technical characteristics of email traffic to identify spam, malware, phishing attempts, denial-of-service attacks, and other malicious activity. These security processes are intended to protect both customers and the integrity of our infrastructure.

Customers remain responsible for ensuring that their own use of email hosting services complies with applicable laws governing marketing communications, anti-spam regulations, data protection, and electronic communications.

---

13. Domain Registration Information

Aira Hosting offers domain name registration, renewal, transfer, and management services through accredited registrars and registry operators.

Registering a domain name typically requires the collection and disclosure of certain registration information as required by applicable policies, contractual obligations, and domain registry rules.

Depending upon the domain extension and applicable regulations, registration information may include:

• Registrant name
• Organization name
• Administrative contact information
• Technical contact information
• Billing contact information
• Email address
• Telephone number
• Postal address
• Domain registration dates
• Name server information
• DNS configuration
• Domain status information

Certain registration information may be shared with:

• Accredited registrars
• Registry operators
• ICANN or equivalent governing organizations
• Escrow providers
• Domain dispute resolution providers
• Law enforcement authorities where legally required

Availability of domain privacy or proxy registration services varies depending upon the applicable top-level domain (TLD), registry policies, and governing regulations. Where such services are available and selected, certain personal information may be masked from publicly accessible registration records to the extent permitted by applicable law and registry requirements.

Customers acknowledge that some registration information must be processed and disclosed to complete and maintain domain registrations and that such disclosures are governed by applicable registry, registrar, and industry policies in addition to this Privacy Policy.

Customers are responsible for maintaining accurate and current domain registration information throughout the registration period, as inaccurate registration information may affect the administration, renewal, transfer, or continued registration of a domain name.

14. Server Logs

The operation of hosting, cloud, network, and infrastructure services inherently generates technical logs necessary for the reliable delivery, maintenance, and security of our services.

Server logs are created automatically by operating systems, web servers, application servers, virtualization platforms, storage systems, and network infrastructure. These logs assist Aira Hosting in maintaining service availability, diagnosing technical issues, protecting infrastructure, and responding to security events.

Depending on the service used, server logs may include:

• IP addresses
• Date and time of requests
• HTTP request details
• Requested resources
• Response status codes
• User agent information
• Browser and operating system information
• Session identifiers
• Hostnames
• Server identifiers
• Authentication events
• Resource utilization metrics
• Network performance information
• Error messages
• System event records

Server logs are used for purposes including:

• Operating hosting services
• Maintaining platform stability
• Diagnosing hardware or software failures
• Capacity planning
• Performance optimization
• Network troubleshooting
• Preventing abuse
• Detecting malicious activity
• Investigating service interruptions
• Supporting customer-requested technical assistance
• Complying with legal obligations

Server logs generally contain technical metadata rather than the substantive content of customer websites, databases, or email communications.

Log retention periods vary depending upon:

• Operational necessity
• Security requirements
• Regulatory obligations
• Contractual commitments
• Incident response needs
• Business continuity requirements

Access to server logs is restricted to authorized personnel with a legitimate business need and is governed by internal access control procedures and confidentiality obligations.

---

15. Security Logs

To protect our infrastructure, customers, and broader Internet ecosystem, Aira Hosting generates and maintains security-related logs designed to identify, investigate, and respond to potential cybersecurity threats.

Security logs may include information relating to:

• Authentication attempts
• Successful and unsuccessful login events
• Multi-factor authentication events
• Privileged administrative actions
• Firewall activity
• Intrusion detection alerts
• Intrusion prevention events
• Malware detections
• DDoS mitigation events
• Network anomaly detection
• API authentication attempts
• Account recovery events
• Password reset activity
• Access control modifications
• Security policy enforcement
• Administrative audit records

Security logs support important operational objectives, including:

• Detecting unauthorized access
• Investigating suspected compromise
• Preventing fraud
• Protecting customer accounts
• Maintaining infrastructure integrity
• Supporting incident response
• Monitoring security controls
• Meeting compliance obligations
• Preserving audit trails
• Improving cybersecurity practices

Where appropriate, automated monitoring systems may analyze technical indicators to identify suspicious behavior or security threats. Such analysis is intended to protect customer accounts, hosted services, and Aira Hosting’s infrastructure and is not designed to profile individuals for unrelated commercial purposes.

Security logs are protected using appropriate technical and organizational safeguards, including access restrictions, authentication controls, audit logging, and retention policies appropriate to their sensitivity.

---

16. Support Tickets

Customers may contact Aira Hosting for technical assistance, billing inquiries, sales requests, account administration, abuse reports, or other support services.

Support communications may include:

• Customer names
• Account identifiers
• Contact information
• Ticket history
• Technical descriptions
• Error messages
• Configuration details
• Diagnostic information
• Attachments voluntarily provided by customers
• Screenshots
• Log excerpts
• Correspondence between customers and support personnel

Support information is processed to:

• Resolve technical issues
• Respond to customer inquiries
• Investigate service incidents
• Improve customer experience
• Train support personnel
• Monitor service quality
• Detect abuse
• Prevent fraud
• Maintain operational records

Where customers authorize access for troubleshooting purposes, our support personnel may temporarily access limited portions of customer environments necessary to diagnose or resolve reported issues.

Such access is performed only by authorized personnel and is limited, where reasonably practicable, to the information required to address the customer’s request or protect the security and integrity of our services.

Support tickets may be retained for reasonable periods to facilitate ongoing support, maintain service history, resolve disputes, improve our services, satisfy legal obligations, and protect our legitimate business interests.

Customers should avoid including unnecessary sensitive personal information in support requests unless such information is directly relevant to resolving the issue.

---

17. Live Chat

Aira Hosting may provide live chat functionality through our websites or customer portals to facilitate communication with prospective and existing customers.

When using live chat services, we may collect information including:

• Name
• Email address
• Company name
• Account identifier
• Chat transcripts
• Date and time of conversations
• Browser information
• Device information
• IP address
• Customer service requests
• Voluntarily provided attachments or files

Live chat communications may be used to:

• Answer pre-sales questions
• Provide technical assistance
• Resolve billing inquiries
• Verify customer identity
• Improve customer service
• Monitor service quality
• Train support personnel
• Detect abuse or fraudulent activity
• Maintain communication records

Depending on the live chat platform used, chat providers may process certain technical information necessary to deliver chat functionality on our behalf. Such providers are contractually required, where applicable, to process personal information in accordance with appropriate confidentiality and data protection obligations.

Chat transcripts may be retained for reasonable periods to support ongoing customer relationships, improve service quality, comply with legal obligations, and protect the rights and security of Aira Hosting and its customers.

---

18. Telephone Communications

Customers may communicate with Aira Hosting through telephone calls for technical support, billing inquiries, sales consultations, account verification, service provisioning, and other business-related purposes.

During telephone interactions, we may process information including:

• Caller name
• Telephone number
• Customer account details
• Verification information
• Call date and time
• Call duration
• Customer inquiries
• Technical information discussed
• Notes prepared by our personnel
• Follow-up actions
• Service requests

Where permitted by applicable law, telephone calls may be recorded or monitored for purposes including:

• Quality assurance
• Employee training
• Customer service improvement
• Verification of customer instructions
• Security
• Fraud prevention
• Dispute resolution
• Compliance with legal or regulatory obligations

Where recording is required to be disclosed under applicable law, appropriate notice will be provided before or at the commencement of the recording.

If a customer prefers not to have a call recorded where recording is optional, alternative communication channels, such as support tickets or email, may be available depending on the nature of the request.

Call recordings and related notes are protected through appropriate access controls and retained only for periods reasonably necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law.

Customers are encouraged not to disclose payment card information or other highly sensitive personal information during telephone conversations unless specifically requested through secure verification procedures and only where necessary to complete a requested transaction or verify account ownership.

19. Cookies

Aira Hosting uses cookies and similar technologies to operate our websites and services, enhance functionality, improve user experience, maintain security, measure performance, and support legitimate business operations.

A cookie is a small text file stored on a user’s device by a web browser. Cookies enable websites to recognize returning visitors, remember preferences, maintain authenticated sessions, and collect information regarding website usage.

Depending on the services you use and your privacy preferences, Aira Hosting may use the following categories of cookies:

Essential Cookies

Essential cookies are necessary for the operation of our websites and online services. These cookies enable core functionality such as:

• User authentication
• Session management
• Security verification
• Fraud prevention
• Shopping cart functionality
• Customer portal access
• Billing portal functionality
• Load balancing
• Service availability

Because these cookies are necessary to provide requested services, they generally cannot be disabled through our cookie management tools.

Functional Cookies

Functional cookies allow our websites to remember user preferences and improve usability, including:

• Language preferences
• Time zone settings
• Accessibility preferences
• Dashboard customization
• User interface settings
• Remembered login preferences (where selected)

Performance Cookies

Performance cookies help us understand how visitors interact with our websites by collecting aggregated information regarding:

• Page performance
• Navigation behavior
• Website speed
• Resource loading
• Error frequency
• User experience metrics

Performance data assists us in improving website reliability and overall customer experience.

Analytics Cookies

Analytics cookies enable us to measure website usage and understand visitor interactions.

These cookies may collect information such as:

• Pages viewed
• Session duration
• Referral sources
• Click patterns
• Device characteristics
• Browser information
• Geographic region (derived from IP address)
• General traffic statistics

Analytics information is used to improve our websites, optimize content, enhance customer experience, and evaluate service performance.

Marketing Cookies

Marketing cookies help us understand the effectiveness of our marketing campaigns and communicate relevant information regarding our products and services.

These cookies may support:

• Campaign measurement
• Marketing attribution
• Audience segmentation
• Promotional effectiveness
• Event registration tracking

Advertising Cookies

Advertising cookies may be used by Aira Hosting or authorized advertising partners to display advertisements that are more relevant to users based on previous interactions with our websites or services.

These cookies may support:

• Remarketing
• Conversion measurement
• Advertising personalization
• Campaign optimization
• Frequency management

Where required by applicable law, advertising cookies are used only after obtaining appropriate consent.

Session Cookies

Session cookies exist only during an active browser session and are generally removed when the browser is closed.

Session cookies are commonly used for:

• Secure authentication
• Shopping cart functionality
• Temporary user preferences
• Navigation continuity
• Security verification

Persistent Cookies

Persistent cookies remain stored on a user’s device until they expire or are deleted.

Persistent cookies may be used to remember:

• Login preferences
• Language settings
• Cookie consent choices
• Customer preferences
• Website customization

The duration of persistent cookies varies depending upon their specific purpose and applicable legal requirements.

---

20. Web Beacons

Aira Hosting may use web beacons, clear GIFs, pixel tags, embedded scripts, and similar technologies in our websites, emails, and online services.

These technologies may be used to:

• Measure email engagement
• Determine whether communications have been opened
• Evaluate marketing effectiveness
• Measure website performance
• Monitor user interactions
• Improve website functionality
• Detect technical issues
• Support security monitoring

Web beacons generally work together with cookies and similar technologies. If cookies are disabled, certain web beacon functionality may be limited.

Where legally required, web beacons used for analytics or marketing purposes are activated only after obtaining appropriate user consent.

---

21. Analytics Technologies

Aira Hosting uses analytics technologies to better understand how visitors use our websites, customer portals, and online services.

Analytics technologies assist us in:

• Understanding website traffic
• Improving navigation
• Identifying technical issues
• Measuring content effectiveness
• Optimizing customer experience
• Evaluating marketing campaigns
• Enhancing platform performance
• Supporting product development

Analytics technologies may collect information including:

• Device characteristics
• Browser type
• Operating system
• IP address (subject to applicable configuration)
• Screen resolution
• Pages viewed
• Session duration
• Navigation paths
• Referring websites
• Click events
• Website performance metrics

Where required under applicable privacy laws, analytics technologies are deployed only after obtaining the appropriate level of consent.

Analytics data may be aggregated or de-identified where appropriate to reduce privacy risks while allowing us to improve our services.

---

22. Advertising Technologies

Aira Hosting may use advertising and marketing technologies to measure campaign performance, understand customer interests, and communicate information regarding our products and services.

Advertising technologies may include:

• Cookies
• Pixels
• Conversion tracking technologies
• Advertising identifiers
• Tag management systems
• Similar measurement technologies

These technologies may assist with:

• Measuring advertisement performance
• Understanding customer acquisition channels
• Improving advertising efficiency
• Delivering relevant advertisements
• Managing remarketing campaigns
• Preventing advertising fraud
• Measuring conversions
• Evaluating marketing investments

Where required by applicable law, advertising technologies are activated only after obtaining appropriate consent.

Users may also manage advertising preferences through browser settings, cookie management tools, or the privacy settings provided by applicable advertising platforms.

---

23. Google Analytics Disclosure

Aira Hosting may use Google Analytics to better understand how visitors interact with our websites and online services.

Google Analytics may collect information regarding:

• Website usage
• Page visits
• Session duration
• Device information
• Browser information
• Approximate geographic location
• Referral sources
• User interactions
• Website performance metrics

Google Analytics helps us:

• Improve website usability
• Identify technical issues
• Evaluate content effectiveness
• Measure customer engagement
• Understand visitor behavior
• Enhance customer experience

Where available, we may implement privacy-enhancing features provided by Google, including:

• IP anonymization or similar privacy controls
• Data retention controls
• Consent Mode
• User consent management
• Restricted data processing where appropriate

Where required by law, Google Analytics operates only after obtaining appropriate user consent.

Users may manage Google Analytics preferences through browser settings, cookie management tools, applicable consent interfaces, or Google’s own privacy and advertising controls.

---

24. Google Ads Disclosure

Aira Hosting may use Google Ads and related advertising services to promote our products and measure advertising effectiveness.

Google advertising technologies may support:

• Conversion tracking
• Audience measurement
• Campaign optimization
• Remarketing
• Advertising attribution
• Performance reporting

Information collected through Google advertising technologies may include:

• Advertising interactions
• Website visits
• Conversion events
• Device information
• Browser information
• Cookie identifiers
• Campaign performance metrics

Where applicable, Aira Hosting may use Google Consent Mode to adjust data collection behavior based on users’ consent choices.

Users may manage advertising preferences through Google’s advertising settings, browser controls, cookie preference tools, or other privacy settings made available by Google.

Advertising technologies are used in accordance with applicable privacy laws and consent requirements.

---

25. Microsoft Advertising Disclosure

Aira Hosting may use Microsoft Advertising technologies to understand the effectiveness of advertising campaigns and improve customer acquisition efforts.

Microsoft Advertising technologies may include:

• Conversion tracking
• Audience measurement
• Remarketing
• Campaign analytics
• Advertising attribution

These technologies may collect:

• Browser information
• Device identifiers
• Cookie identifiers
• IP address
• Website interactions
• Conversion information
• Campaign performance data

Users may control Microsoft advertising preferences through Microsoft’s privacy settings, browser controls, or applicable cookie management interfaces.

Where required by applicable law, Microsoft Advertising technologies are used only after obtaining the necessary consent.

---

26. Meta Pixel Disclosure

Aira Hosting may use Meta Pixel and related Meta Business technologies to measure advertising performance and understand customer interactions with our websites.

Meta Pixel may help us:

• Measure conversions
• Understand website usage
• Optimize advertising campaigns
• Create audience segments
• Evaluate marketing effectiveness
• Improve customer acquisition

Information processed may include:

• Browser information
• Device information
• IP address
• Website activity
• Conversion events
• Cookie identifiers
• Referring websites

Where legally required, Meta Pixel is activated only after obtaining appropriate user consent.

Users may manage certain advertising preferences through Meta’s privacy and advertising settings, browser controls, or applicable cookie consent tools.

---

27. LinkedIn Insight Tag Disclosure

Aira Hosting may use the LinkedIn Insight Tag to better understand how business users interact with our websites and marketing campaigns.

The LinkedIn Insight Tag may support:

• Campaign measurement
• Conversion tracking
• Website analytics
• Audience insights
• Business marketing optimization
• Professional audience engagement

Information processed through the LinkedIn Insight Tag may include:

• Device information
• Browser information
• IP address
• Website interactions
• Referring pages
• Conversion events
• Cookie identifiers

Where required under applicable law, the LinkedIn Insight Tag is deployed only after obtaining appropriate user consent.

Users may manage their advertising and privacy preferences through LinkedIn’s account settings, browser controls, cookie management interfaces, or other privacy tools made available by LinkedIn.

Aira Hosting periodically reviews the use of advertising and analytics technologies to help ensure that they remain appropriate for our business purposes, consistent with evolving privacy regulations, and aligned with our commitment to transparency and responsible data processing.

28. Third-Party Integrations

Aira Hosting may integrate with trusted third-party products, platforms, applications, and services to provide, enhance, secure, or support our hosting, cloud, infrastructure, billing, and customer management services.

These integrations are intended to improve functionality, automate operational processes, enhance security, facilitate payments, enable domain registration, provide customer support, measure website performance, and deliver other features requested by customers.

Depending on the services used, third-party integrations may include:

• Payment processors
• Domain registrars
• Domain registry operators
• SSL certificate authorities
• DNS service providers
• Email delivery providers
• Cloud infrastructure providers
• Content delivery network (CDN) providers
• Backup and disaster recovery providers
• Customer relationship management (CRM) platforms
• Help desk and support platforms
• Live chat providers
• Identity verification providers
• Fraud prevention providers
• Security monitoring providers
• DDoS mitigation providers
• Analytics platforms
• Marketing automation platforms
• Advertising partners
• Accounting and invoicing platforms
• API service providers
• Business communication platforms

Where a customer chooses to enable or connect an optional third-party integration, Aira Hosting may share information reasonably necessary to establish and maintain the requested integration.

The categories of information shared depend upon the specific integration and may include:

• Account identifiers
• Contact information
• Service configuration details
• Domain information
• Subscription information
• Authentication tokens
• Technical metadata
• Billing identifiers
• API credentials generated for the integration
• Other information necessary to perform the requested functionality

Third-party providers are responsible for their own privacy practices with respect to information processed independently of Aira Hosting. We encourage customers to review the applicable privacy policies of any third-party services they choose to use.

Aira Hosting does not sell or license customer personal information to third parties for their own independent commercial purposes unless expressly disclosed and permitted by applicable law.

---

29. How Information Is Used

Aira Hosting processes personal information only for legitimate, specified, and lawful purposes consistent with this Privacy Policy and applicable data protection laws.

Depending on the circumstances, we may use personal information to:

29.1 Provide Services

To establish, deliver, maintain, administer, and support our hosting, cloud, infrastructure, domain registration, security, and related services.

29.2 Create and Manage Customer Accounts

To create customer accounts, authenticate users, manage account settings, maintain subscriptions, administer permissions, and facilitate secure access to our platforms.

29.3 Process Payments

To process transactions, issue invoices, manage renewals, administer subscriptions, detect payment fraud, maintain financial records, and comply with accounting and tax obligations.

29.4 Deliver Customer Support

To respond to technical support requests, investigate reported issues, provide troubleshooting assistance, communicate regarding service matters, and improve customer service.

29.5 Operate and Improve Our Services

To maintain platform stability, improve service reliability, optimize infrastructure performance, develop new features, and enhance customer experience.

29.6 Protect Security

To protect customers, employees, infrastructure, and services by:

• Detecting unauthorized access
• Preventing fraud
• Investigating abuse
• Responding to cybersecurity incidents
• Monitoring service integrity
• Maintaining audit records

29.7 Comply with Legal Obligations

To comply with applicable laws, regulations, court orders, lawful governmental requests, tax requirements, accounting obligations, sanctions screening, and other legal responsibilities.

29.8 Communicate with Customers

To send:

• Service notifications
• Security alerts
• Account notices
• Renewal reminders
• Billing communications
• Technical announcements
• Product updates
• Customer support responses

Certain communications are necessary for the operation of customer accounts and cannot be opted out of while services remain active.

29.9 Marketing

Subject to applicable law and customer preferences, we may send information regarding:

• New services
• Product updates
• Promotional offers
• Educational resources
• Industry news
• Events
• Webinars
• Customer surveys

Customers may opt out of marketing communications as described in this Privacy Policy.

29.10 Research and Analytics

We may analyze aggregated, statistical, or de-identified information to:

• Improve products
• Evaluate infrastructure performance
• Understand customer needs
• Measure website usage
• Enhance platform reliability
• Support strategic planning

Where reasonably possible, such information is processed in a manner that does not directly identify individual customers.

29.11 Business Operations

To support routine business operations, including:

• Internal administration
• Recordkeeping
• Auditing
• Financial reporting
• Corporate governance
• Risk management
• Insurance
• Business continuity planning

Personal information is processed only to the extent reasonably necessary for the applicable purpose and in accordance with the principles of data minimization, purpose limitation, and storage limitation where required by applicable law.

---

30. Legal Basis for Processing under GDPR

For individuals located in the European Economic Area, the United Kingdom, or other jurisdictions requiring a lawful basis for processing personal information, Aira Hosting processes personal information only where an appropriate legal basis applies.

Depending on the circumstances, our legal bases may include the following.

30.1 Performance of a Contract

We process personal information where necessary to perform a contract with a customer or to take steps requested prior to entering into a contract.

Examples include:

• Creating customer accounts
• Providing hosting services
• Registering domain names
• Processing payments
• Delivering technical support
• Managing subscriptions
• Providing customer portals
• Maintaining infrastructure services

30.2 Compliance with Legal Obligations

We process personal information where necessary to comply with applicable legal or regulatory obligations.

Examples include:

• Tax compliance
• Accounting requirements
• Fraud prevention obligations
• Sanctions screening
• Law enforcement requests
• Court orders
• Regulatory reporting
• Record retention obligations

30.3 Legitimate Interests

We process certain personal information where necessary for our legitimate business interests, provided that such interests are not overridden by the rights and freedoms of affected individuals.

Our legitimate interests are described in Section 31 of this Privacy Policy.

30.4 Consent

Where required by law, we process personal information based upon an individual’s freely given, specific, informed, and unambiguous consent.

Examples may include:

• Marketing communications
• Certain analytics technologies
• Advertising cookies
• Optional customer surveys
• Certain optional integrations

Individuals may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

30.5 Protection of Vital Interests

In limited circumstances, processing may be necessary to protect the vital interests of an individual or another natural person where permitted by applicable law.

30.6 Public Interest

Where applicable, Aira Hosting may process personal information where necessary for reasons of public interest or where otherwise authorized under applicable legislation.

We periodically review our processing activities to help ensure that each processing activity continues to have an appropriate lawful basis.

---

31. Legitimate Interests

Where Aira Hosting relies on legitimate interests as a legal basis for processing, we carefully evaluate and balance our business interests against the rights, freedoms, and reasonable expectations of affected individuals.

Our legitimate interests may include:

Service Delivery

Providing secure, reliable, and high-performing hosting and cloud infrastructure services.

Cybersecurity

Protecting customer accounts, infrastructure, networks, systems, and data against unauthorized access, malware, fraud, abuse, distributed denial-of-service attacks, phishing, ransomware, and other cybersecurity threats.

Fraud Prevention

Detecting, investigating, preventing, and responding to fraudulent transactions, account compromise, identity theft, payment abuse, and violations of our service policies.

Infrastructure Management

Monitoring infrastructure performance, maintaining system availability, performing maintenance, improving scalability, optimizing resource allocation, and supporting disaster recovery planning.

Customer Support

Providing timely technical assistance, responding to inquiries, maintaining support history, improving service quality, and resolving operational issues.

Product Improvement

Developing new products, enhancing existing services, improving website usability, evaluating customer feedback, and conducting internal testing and quality assurance.

Compliance and Risk Management

Maintaining appropriate business records, conducting internal audits, managing legal risks, enforcing contractual rights, protecting intellectual property, and complying with applicable legal obligations.

Business Administration

Supporting routine corporate administration, accounting, financial reporting, insurance, governance, mergers, acquisitions, restructuring, or other legitimate organizational activities consistent with applicable law.

Before relying on legitimate interests, Aira Hosting considers factors including:

• The nature of the personal information involved.
• The reasonable expectations of individuals.
• The impact of the processing on affected individuals.
• The safeguards implemented to protect privacy.
• The availability of less intrusive alternatives.
• Applicable legal requirements.

Individuals who object to processing based on legitimate interests may exercise the rights described later in this Privacy Policy. Aira Hosting will evaluate such requests in accordance with applicable law and determine whether compelling legitimate grounds require continued processing.

32. Marketing Communications

Aira Hosting may communicate with customers and prospective customers regarding our products, services, educational resources, events, promotions, and other information that may be relevant to their interests, subject to applicable privacy and electronic communications laws.

Marketing communications may be delivered through channels including:

• Email
• Customer portal notifications
• SMS or text messaging (where available and consented to, if required)
• Telephone (where permitted by applicable law)
• Social media platforms
• Online advertising
• In-product notifications
• Webinars and event invitations

Marketing communications may include information regarding:

• New hosting plans and infrastructure services
• Product launches and feature updates
• Security enhancements
• Educational articles and technical resources
• Maintenance best practices
• Promotional offers and discounts
• Industry news
• Customer surveys
• Training sessions and webinars
• Affiliate program updates

Where required by applicable law, Aira Hosting will obtain your consent before sending marketing communications. In jurisdictions where consent is not required, we may rely on another lawful basis, such as our legitimate interests, where permitted.

Regardless of the legal basis used, recipients may opt out of receiving marketing communications at any time using one or more of the following methods:

• Selecting the “unsubscribe” link included in marketing emails.
• Updating communication preferences within the customer portal.
• Contacting the Aira Hosting Privacy Team or designated privacy contact.
• Following any additional opt-out instructions included in the communication.

Opting out of marketing communications does not affect our ability to send service-related communications that are necessary to administer your account or provide requested services.

Examples of non-marketing communications include:

• Account verification messages
• Security alerts
• Password reset notifications
• Billing and payment notices
• Renewal reminders
• Service maintenance notifications
• Abuse or security incident communications
• Changes to legal agreements or policies
• Technical support correspondence

We maintain records of marketing preferences where appropriate to demonstrate compliance with applicable legal requirements and to honor your communication choices.

---

33. Email Preferences

Aira Hosting provides customers with reasonable controls over the email communications they receive from us.

Depending on your account settings and the services you use, you may be able to manage preferences relating to:

• Marketing newsletters
• Product announcements
• Educational content
• Promotional offers
• Event invitations
• Customer surveys
• Feature updates
• Community announcements

Certain operational and transactional communications are essential to the delivery and security of our services and cannot be disabled while an active customer relationship exists.

These communications may include:

• Service activation notices
• Subscription confirmations
• Invoice and payment notifications
• Domain registration and renewal notices
• SSL certificate lifecycle notifications
• Security advisories
• Account verification requests
• Authentication alerts
• Technical maintenance notifications
• Support ticket responses
• Service outage communications
• Compliance-related notices

Customers are responsible for maintaining accurate and current contact information to ensure the timely delivery of important account-related communications.

If an email address becomes invalid or inactive, Aira Hosting may be unable to deliver important service notifications. Customers should promptly update their contact information through the customer portal or by contacting customer support.

Where supported, customers may manage communication preferences directly within their account settings. Preference changes are generally processed within a reasonable period; however, some communications that have already been initiated may still be delivered.

---

34. Information Sharing

Aira Hosting treats personal information with care and does not sell personal information to third parties for monetary consideration. We disclose personal information only where necessary to operate our business, provide requested services, comply with legal obligations, protect our rights and customers, or as otherwise described in this Privacy Policy.

Depending on the services used and applicable legal requirements, we may share personal information with the following categories of recipients.

34.1 Service Providers

We engage carefully selected third-party service providers to perform functions on our behalf. These providers may process personal information only as necessary to provide contracted services and are expected to protect such information through appropriate confidentiality and security measures.

Examples include providers of:

• Payment processing
• Customer support platforms
• Data storage
• Cloud infrastructure
• Security monitoring
• Fraud prevention
• Email delivery
• Analytics
• Website hosting
• Communications services
• Accounting and auditing
• Professional advisory services

34.2 Payment Providers

Payment information may be shared with authorized payment processors and financial institutions to:

• Process transactions
• Verify payment methods
• Prevent fraud
• Manage refunds
• Resolve payment disputes
• Support recurring billing
• Comply with financial regulations

Payment providers process payment-related information in accordance with their own legal obligations and privacy practices.

34.3 Domain Registrars and Registry Operators

Where customers register, transfer, or manage domain names through Aira Hosting, relevant registration information may be shared with accredited registrars, registry operators, ICANN (where applicable), and other parties involved in administering domain name registrations.

Such disclosures are necessary to establish, maintain, renew, transfer, or administer domain name registrations and to comply with applicable registry and industry requirements.

34.4 Cloud and Infrastructure Partners

To provide reliable hosting and infrastructure services, Aira Hosting may engage trusted infrastructure partners, network providers, data center operators, content delivery networks, backup providers, or other technical service providers.

Only the information reasonably necessary to provide the requested services is shared, and such providers are expected to maintain appropriate confidentiality and security protections.

34.5 Security and Fraud Prevention Providers

We may disclose information to specialized providers that assist us in:

• Detecting fraud
• Preventing account compromise
• Identifying malware
• Mitigating distributed denial-of-service attacks
• Monitoring cybersecurity threats
• Performing identity verification
• Maintaining infrastructure security
• Investigating abuse

These disclosures are made solely to support the security and integrity of our services.

34.6 Professional Advisors

Personal information may be shared, where reasonably necessary, with professional advisors acting on our behalf, including:

• Legal counsel
• Auditors
• Accountants
• Insurance providers
• Corporate consultants

Such recipients are generally subject to contractual, professional, or legal confidentiality obligations.

34.7 Corporate Transactions

If Aira Hosting participates in a merger, acquisition, financing, investment, restructuring, reorganization, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections and applicable legal requirements.

Where required by law, affected individuals will be provided with appropriate notice regarding material changes affecting the processing of their personal information.

34.8 Legal and Regulatory Disclosures

We may disclose personal information where we reasonably believe disclosure is necessary to:

• Comply with applicable laws or regulations.
• Respond to valid court orders, subpoenas, or lawful governmental requests.
• Protect the rights, property, or safety of Aira Hosting, our customers, or others.
• Investigate suspected fraud, abuse, security incidents, or unlawful activity.
• Enforce our agreements and policies.
• Defend legal claims.
• Exercise or protect legal rights.

Each request is reviewed using appropriate internal procedures, and we seek to disclose only the information reasonably necessary to satisfy the applicable legal requirement unless prohibited by law.

34.9 Customer-Directed Disclosures

Where customers instruct Aira Hosting to share information with third parties—such as through integrations, API connections, account delegation, or support authorizations—we will process and disclose information consistent with those instructions and applicable law.

Customers are responsible for ensuring they have the necessary authority to authorize such disclosures.

34.10 Aggregated and De-Identified Information

Aira Hosting may create aggregated, anonymized, or de-identified information that no longer reasonably identifies an individual.

Such information may be used for purposes including:

• Statistical reporting
• Capacity planning
• Product development
• Research
• Performance measurement
• Business analytics
• Industry benchmarking

Where information has been de-identified, Aira Hosting will not intentionally attempt to re-identify individuals except where permitted or required by applicable law.

We strive to ensure that any sharing of personal information is limited to what is relevant, proportionate, and necessary for the stated purpose and is subject to appropriate contractual, organizational, or legal safeguards designed to protect personal information throughout its lifecycle.

35. Service Providers

Aira Hosting engages carefully selected third-party service providers to assist in delivering, maintaining, securing, improving, and supporting our products and services. These providers perform services on our behalf and process personal information only to the extent reasonably necessary to fulfill their contractual responsibilities.

We seek to engage service providers that demonstrate appropriate technical, organizational, and administrative measures designed to protect personal information and maintain confidentiality.

Depending on the services provided, our service providers may assist with:

• Cloud and infrastructure operations
• Payment processing
• Customer support platforms
• Help desk systems
• Email delivery
• Domain registration
• SSL certificate issuance
• Data storage
• Backup and disaster recovery
• Security monitoring
• Fraud prevention
• Identity verification
• Analytics and website performance
• Communications services
• Accounting and financial operations
• Professional consulting services
• Marketing platforms
• Customer relationship management (CRM)
• Technical monitoring
• Business continuity services

Before engaging a service provider where appropriate, Aira Hosting considers factors including:

• Security capabilities
• Privacy practices
• Regulatory compliance
• Operational reliability
• Business continuity measures
• Data protection commitments
• Confidentiality obligations
• Applicable certifications or industry standards where relevant

Where required by applicable law, we enter into contractual arrangements designed to ensure that service providers:

• Process personal information only on documented instructions from Aira Hosting where applicable.
• Implement appropriate security safeguards.
• Maintain confidentiality.
• Assist with applicable data protection obligations where required.
• Notify us of certain security incidents where contractually required.
• Delete or return personal information upon termination of services where appropriate and legally permissible.

Service providers are not authorized to use personal information for their own independent marketing purposes unless customers separately engage with those providers or otherwise authorize such processing.

---

36. Payment Providers

To facilitate secure financial transactions, Aira Hosting works with independent payment service providers and financial institutions.

Payment providers may process information necessary to:

• Authorize transactions
• Process payments
• Manage recurring billing
• Prevent fraud
• Conduct payment verification
• Process refunds
• Resolve chargebacks
• Meet financial reporting obligations
• Comply with applicable payment regulations

Depending on the payment method selected, payment providers may process:

• Customer name
• Billing address
• Email address
• Transaction amount
• Currency
• Payment method
• Tax information
• Transaction identifiers
• Payment authorization information
• Fraud detection indicators

Aira Hosting generally does not receive or store complete payment card numbers or payment authentication credentials unless operationally necessary and supported by appropriate security controls.

Payment providers operate under their own privacy policies and regulatory obligations. Customers are encouraged to review the applicable privacy notices of their selected payment providers to understand how payment-related information is processed.

---

37. Registrars

Where customers register, renew, transfer, or manage domain names through Aira Hosting, we work with accredited domain name registrars authorized to administer domain registration services.

Registrars may process registration-related information including:

• Registrant details
• Administrative contact information
• Technical contact information
• Billing contact information
• Domain name information
• Name server configuration
• Registration dates
• Renewal information
• Domain transfer information
• Domain status information

Sharing this information is necessary to:

• Register domain names
• Renew registrations
• Transfer domains
• Maintain accurate registration records
• Verify registrant identity where required
• Comply with registry policies
• Administer domain lifecycle events

Customers acknowledge that domain registration services are subject not only to this Privacy Policy but also to applicable registrar agreements, registry requirements, and industry rules governing domain name administration.

Where domain privacy or proxy registration services are available and selected, certain publicly displayed registration information may be limited or substituted to the extent permitted by applicable registry policies and law.

---

38. Registry Operators

Registry operators maintain the authoritative databases for specific top-level domains (TLDs) and establish operational requirements for domain name registrations.

To complete and maintain domain registrations, Aira Hosting and our accredited registrars may disclose registration information to the applicable registry operator responsible for the requested domain extension.

Registry operators may process information necessary to:

• Establish domain registrations
• Maintain registration records
• Support DNS operations
• Manage renewals
• Facilitate transfers
• Resolve technical issues
• Support registry security
• Comply with applicable legal and regulatory obligations

Depending upon the applicable top-level domain, registry operators may have independent legal obligations regarding the processing, retention, publication, or disclosure of registration information.

Certain registry operators may also require the processing of registration data for purposes including:

• Abuse prevention
• DNS stability
• Technical coordination
• Domain dispute administration
• Regulatory compliance
• Security monitoring

Customers should understand that registration information submitted for domain services may be processed in accordance with applicable registry policies in addition to this Privacy Policy.

---

39. Data Centers

Aira Hosting delivers hosting and cloud infrastructure services through professionally managed data center facilities located in one or more geographic regions.

Data center providers support the secure operation of our infrastructure by providing facilities designed to promote availability, resilience, physical security, and operational continuity.

Depending upon service deployment, customer information may be processed within data centers for purposes including:

• Hosting customer workloads
• Operating virtual infrastructure
• Data storage
• Backup operations
• Disaster recovery
• Network routing
• Infrastructure monitoring
• Security operations
• System maintenance

Data center providers may implement physical and environmental safeguards including measures such as:

• Controlled facility access
• Visitor management procedures
• Environmental monitoring
• Power redundancy
• Network redundancy
• Fire detection and suppression
• Physical surveillance
• Equipment protection

For security reasons, Aira Hosting does not publicly disclose detailed information regarding all infrastructure locations, security procedures, or facility-specific operational controls.

Customer workloads may be deployed across multiple infrastructure locations to improve availability, redundancy, disaster recovery capabilities, operational efficiency, or customer-selected deployment preferences.

---

40. Cloud Infrastructure Providers

To deliver reliable, scalable, and resilient services, Aira Hosting may utilize cloud infrastructure providers, virtualization technologies, network providers, storage platforms, or infrastructure partners.

Cloud infrastructure providers may support services including:

• Virtual machine hosting
• Object storage
• Block storage
• Backup infrastructure
• Network connectivity
• Content delivery
• Compute resources
• Database services
• Disaster recovery
• Infrastructure automation
• Monitoring
• Security services

Information processed through cloud infrastructure providers is limited to what is reasonably necessary to provide the requested services and maintain platform operations.

Where required by applicable law, Aira Hosting seeks to ensure that cloud infrastructure providers processing personal information on our behalf are subject to appropriate contractual obligations addressing:

• Confidentiality
• Information security
• Data protection
• Incident notification
• International data transfers
• Access restrictions
• Applicable legal requirements

The specific infrastructure technologies used by Aira Hosting may evolve over time as part of our ongoing efforts to improve performance, availability, security, and customer experience.

---

41. Fraud Prevention Providers

Protecting customers, payment systems, and hosting infrastructure from fraudulent or malicious activity is an important component of our operations.

Aira Hosting may engage specialized fraud prevention, identity verification, risk assessment, and cybersecurity providers to assist in identifying and responding to suspicious activities.

Depending upon the circumstances, these providers may assist with:

• Payment fraud detection
• Account takeover prevention
• Identity verification
• Transaction risk analysis
• Abuse prevention
• Spam detection
• Automated threat analysis
• Suspicious login detection
• IP reputation analysis
• Device reputation analysis
• Sanctions screening where applicable
• Compliance monitoring

Information processed for fraud prevention purposes may include:

• Customer identifiers
• IP addresses
• Device characteristics
• Network information
• Authentication events
• Transaction information
• Account activity
• Risk indicators
• Historical fraud patterns
• Technical metadata

Fraud prevention activities are intended to:

• Protect customer accounts.
• Prevent unauthorized transactions.
• Reduce payment fraud.
• Detect abuse of hosting services.
• Maintain platform integrity.
• Protect the security of our infrastructure.
• Comply with legal and regulatory obligations.

Where automated tools assist in evaluating fraud risks, significant decisions affecting customers are not based solely on automated processing where prohibited by applicable law. Appropriate human review may be conducted where required, particularly in cases involving account restrictions, payment disputes, or identity verification.

Aira Hosting continuously reviews its fraud prevention practices to balance effective security measures with the privacy rights and reasonable expectations of our customers, while applying the principles of proportionality and data minimization wherever reasonably practicable.

42. Security Vendors

Protecting the confidentiality, integrity, availability, and resilience of our infrastructure is a core component of Aira Hosting’s operations. To support these objectives, we may engage specialized third-party security vendors that assist us in preventing, detecting, investigating, and responding to cybersecurity threats and operational risks.

Security vendors may provide services including:

• Security monitoring
• Security information and event management (SIEM)
• Threat intelligence
• Intrusion detection and prevention
• Distributed Denial-of-Service (DDoS) mitigation
• Vulnerability management
• Malware detection
• Endpoint protection
• Web application security
• Network security monitoring
• Identity and access management
• Security analytics
• Incident response support
• Security auditing
• Penetration testing coordination
• Managed detection and response (MDR)
• Security automation

To provide these services, security vendors may process limited categories of information reasonably necessary to perform their functions, including:

• IP addresses
• Device identifiers
• Authentication events
• Security alerts
• Network telemetry
• Firewall logs
• System event logs
• Infrastructure metadata
• API activity
• Access logs
• Technical configuration information
• Indicators of compromise
• Other operational security data

Aira Hosting seeks to ensure that security vendors are subject to appropriate contractual obligations requiring them to:

• Process information only for authorized security purposes.
• Maintain appropriate confidentiality.
• Implement suitable technical and organizational safeguards.
• Restrict access to authorized personnel.
• Assist with applicable data protection obligations where appropriate.
• Protect personal information throughout the engagement.

The use of security vendors is intended to enhance the protection of customer information, improve infrastructure resilience, and reduce cybersecurity risks across our services.

---

43. Law Enforcement Requests

Aira Hosting may receive requests from law enforcement agencies, regulatory authorities, or other governmental bodies seeking access to customer or account information.

We carefully review such requests before disclosing personal information and seek to ensure that each request is legally valid, appropriately authorized, and consistent with applicable laws.

Where appropriate, we evaluate factors including:

• Legal authority supporting the request
• Jurisdiction
• Scope of the request
• Specificity of the information requested
• Applicable privacy laws
• Contractual obligations
• Customer privacy interests
• International legal considerations

Where legally permitted and appropriate, Aira Hosting may:

• Request clarification regarding overly broad requests.
• Seek modification of requests that exceed applicable legal requirements.
• Challenge requests we reasonably believe are invalid or disproportionate.
• Limit disclosures to information reasonably necessary to satisfy the request.

Unless prohibited by law, court order, or circumstances where notification could interfere with an investigation or create a risk of harm, Aira Hosting may notify affected customers before disclosing their personal information to law enforcement authorities.

Notification may not be provided where:

• Disclosure is legally prohibited.
• A court or governmental authority prohibits notification.
• Emergency circumstances require immediate disclosure.
• Notification would create a substantial risk to individuals or public safety.
• Notification could compromise an ongoing investigation.

Aira Hosting maintains internal procedures governing the review and handling of law enforcement requests to promote consistency, accountability, and compliance with applicable legal obligations.

---

44. Court Orders

In certain circumstances, Aira Hosting may be required to disclose personal information or other records in response to legally binding judicial or administrative processes.

Such processes may include:

• Court orders
• Subpoenas
• Search warrants
• Judicial directives
• Administrative orders
• Other legally enforceable legal instruments

Before responding, we seek to verify, where reasonably practicable:

• The authenticity of the request.
• The issuing authority.
• The legal validity of the request.
• Our legal obligations under applicable law.
• The scope of the information requested.

Where appropriate and legally permissible, Aira Hosting may:

• Object to overly broad requests.
• Request clarification or narrowing of the request.
• Seek protective orders or confidentiality measures.
• Limit disclosures to the minimum information reasonably necessary.

Where disclosure is required, we endeavor to disclose only the categories of information specifically required under the applicable legal process.

Nothing in this Privacy Policy prevents Aira Hosting from complying with legally binding obligations imposed by competent judicial or governmental authorities.

---

45. International Data Transfers

Aira Hosting serves customers throughout the world. As a result, personal information may be collected, stored, accessed, transferred, or otherwise processed in countries other than the country in which the information was originally collected.

These international transfers may occur for purposes including:

• Providing hosting and cloud services.
• Operating customer support.
• Processing payments.
• Registering domain names.
• Maintaining infrastructure.
• Delivering security services.
• Operating backup and disaster recovery systems.
• Supporting business continuity.
• Providing technical assistance.
• Fulfilling contractual obligations.

Depending on the services selected by customers, personal information may be processed by:

• Aira Hosting personnel.
• Authorized affiliates.
• Service providers.
• Cloud infrastructure providers.
• Data center operators.
• Payment providers.
• Domain registrars.
• Registry operators.
• Security vendors.
• Professional advisors.

Some countries to which personal information may be transferred may not provide the same level of statutory data protection as the jurisdiction in which the information originated.

Where applicable law requires additional safeguards for international data transfers, Aira Hosting implements appropriate transfer mechanisms designed to provide an adequate level of protection for transferred personal information.

Such safeguards may include, where appropriate:

• Contractual data protection obligations.
• Standard Contractual Clauses (SCCs).
• UK International Data Transfer Addenda or equivalent mechanisms.
• Adequacy decisions recognized by competent authorities.
• Supplementary technical, contractual, or organizational measures.
• Other lawful transfer mechanisms recognized under applicable data protection laws.

When selecting service providers that may process personal information internationally, Aira Hosting considers factors including:

• Security capabilities.
• Privacy practices.
• Regulatory compliance.
• Contractual protections.
• Operational reliability.
• Business continuity capabilities.

Customers using our services acknowledge that the global nature of cloud hosting and Internet infrastructure may require the cross-border processing of information in order to provide requested services efficiently, securely, and reliably.

Aira Hosting remains committed to protecting personal information during international transfers by implementing appropriate safeguards consistent with applicable legal requirements and the nature of the services being provided.

46. Standard Contractual Clauses

Where required under applicable data protection laws, including the General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and other applicable international privacy frameworks, Aira Hosting may rely on Standard Contractual Clauses (“SCCs”) or other legally recognized transfer mechanisms to facilitate the lawful transfer of personal information across international borders.

Standard Contractual Clauses are contractual commitments approved or recognized by competent regulatory authorities that are designed to provide appropriate safeguards for personal information transferred to jurisdictions that may not otherwise provide an equivalent level of legal protection.

Where applicable, Aira Hosting may incorporate SCCs into agreements with:

• Cloud infrastructure providers
• Data center operators
• Software vendors
• Security providers
• Payment service providers
• Customer support platforms
• Analytics providers
• Marketing technology providers
• Professional service providers
• Other authorized subprocessors

When relying upon SCCs or comparable transfer mechanisms, Aira Hosting evaluates the nature of the transfer and, where appropriate, considers supplementary safeguards, including:

• Encryption technologies
• Access controls
• Confidentiality obligations
• Data minimization practices
• Organizational security measures
• Risk assessments
• Contractual restrictions on onward transfers
• Technical safeguards appropriate to the processing activity

Where required by applicable law, we periodically review international data transfer arrangements to help ensure they remain appropriate in light of evolving legal requirements, regulatory guidance, and operational changes.

Individuals may contact the Aira Hosting Privacy Team to request additional information regarding the safeguards used for international transfers, subject to applicable confidentiality obligations and legal limitations.

---

47. Data Security Measures

Aira Hosting recognizes that information security is an ongoing process requiring administrative, technical, physical, and organizational safeguards designed to protect personal information against unauthorized or unlawful processing, accidental loss, destruction, alteration, disclosure, or unauthorized access.

Our security program is designed using risk-based principles and is periodically reviewed to reflect evolving cybersecurity threats, technological developments, legal requirements, and operational needs.

Depending on the nature of the service, Aira Hosting may implement safeguards including:

Administrative Measures

• Information security policies
• Privacy governance procedures
• Risk management processes
• Employee security awareness programs
• Incident response procedures
• Vendor risk assessments
• Confidentiality obligations
• Change management processes
• Asset management practices
• Business continuity planning

Technical Measures

• Network segmentation
• Firewalls
• Intrusion detection and prevention technologies
• Distributed Denial-of-Service (DDoS) mitigation
• Endpoint protection
• Malware detection
• Security monitoring
• Audit logging
• Multi-factor authentication where applicable
• Secure authentication mechanisms
• Role-based access controls
• Session management controls
• Security event monitoring
• Backup systems
• Redundancy and resilience measures

Physical Measures

Where applicable, infrastructure supporting Aira Hosting services may be protected through physical safeguards such as:

• Controlled facility access
• Visitor management procedures
• Environmental monitoring
• Surveillance systems
• Equipment protection
• Power redundancy
• Fire detection and suppression systems

For security reasons, Aira Hosting does not publicly disclose detailed operational security procedures that could reasonably increase cybersecurity risks.

While we strive to implement appropriate safeguards, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Accordingly, customers also play an important role in protecting their own accounts and information, including maintaining strong authentication credentials, securing their applications, and implementing appropriate security practices within their own environments.

---

48. Encryption Practices

Aira Hosting uses encryption technologies where appropriate to help protect personal information during transmission, storage, authentication, and other processing activities, taking into account the nature of the services provided, applicable legal requirements, industry standards, and operational considerations.

Our encryption practices may include the following.

Encryption in Transit

Where appropriate, communications between users and Aira Hosting services are protected using industry-standard transport encryption technologies, including Transport Layer Security (TLS) or successor protocols.

Encryption in transit may be used to protect:

• Customer portal sessions
• Billing portal communications
• Authentication requests
• Administrative interfaces
• Application programming interfaces (APIs)
• Support portals
• Payment-related communications
• Website traffic protected by SSL/TLS certificates

Customers are encouraged to access Aira Hosting services only through secure HTTPS connections and to verify browser security indicators when transmitting sensitive information.

Encryption at Rest

Where appropriate and technically feasible, certain categories of information may be protected using encryption while stored within our infrastructure or that of our authorized service providers.

The implementation of encryption at rest may vary depending upon:

• Service architecture
• Storage technology
• Customer-selected configurations
• Managed service options
• Operational requirements
• Applicable legal obligations

Not all customer-managed environments or self-managed hosting services include encryption at rest by default. Customers remain responsible for implementing additional encryption controls within their own applications or hosting environments where required by their security policies or regulatory obligations.

Cryptographic Key Management

Where Aira Hosting manages encryption technologies, cryptographic keys are administered using security controls designed to reduce the risk of unauthorized access, disclosure, or misuse.

Key management practices may include:

• Restricted administrative access
• Access logging
• Separation of duties where appropriate
• Secure storage mechanisms
• Periodic review of access permissions
• Operational monitoring

For security reasons, Aira Hosting does not publicly disclose detailed information regarding cryptographic algorithms, key lengths, key management procedures, or other sensitive implementation details beyond what is reasonably necessary to describe our security practices.

Customer Responsibilities

Customers are responsible for evaluating whether additional encryption measures are necessary for their own hosted environments, applications, databases, backups, or communications based on their legal obligations, industry standards, contractual commitments, and internal security requirements.

Where customer-managed encryption technologies are used, customers remain responsible for:

• Generating and protecting encryption keys.
• Managing certificates where applicable.
• Maintaining secure backup copies of encryption keys.
• Preventing unauthorized disclosure of credentials.
• Configuring encryption appropriately within their hosted environments.

Continuous Improvement

Aira Hosting periodically reviews its encryption practices and security controls to support evolving industry standards, technological developments, and applicable regulatory expectations. As technologies evolve, we may update our encryption methodologies and related safeguards to enhance the protection of personal information while maintaining the availability, integrity, and performance of our services.

49. Access Controls

Aira Hosting implements administrative, technical, and organizational access control measures designed to protect personal information and customer environments from unauthorized access, disclosure, alteration, or misuse.

Access to systems, infrastructure, applications, and personal information is granted only to authorized personnel who require such access to perform their legitimate job responsibilities or to provide requested services.

Our access management program is guided by the principles of:

• Least privilege
• Need-to-know access
• Role-based authorization
• Separation of duties where appropriate
• Accountability
• Periodic access review

Depending on the nature of the system or service, access controls may include:

• Unique user accounts
• Strong authentication requirements
• Multi-factor authentication for administrative access where appropriate
• Role-based access controls (RBAC)
• Privileged access management
• Session management controls
• Administrative approval processes
• Periodic access reviews
• Automated account provisioning and deprovisioning where appropriate
• Password management requirements
• Security logging and monitoring
• Audit trails for privileged activities

Access permissions are reviewed periodically and may be modified or revoked when:

• Employment responsibilities change.
• Access is no longer required.
• A contractual relationship ends.
• A security concern is identified.
• A policy violation is detected.
• Operational requirements change.

Administrative access to customer environments is restricted and permitted only where reasonably necessary for legitimate operational purposes, including:

• Customer-authorized technical support
• Service provisioning
• Infrastructure maintenance
• Security incident response
• Abuse investigations
• Disaster recovery activities
• Compliance with applicable legal obligations

Where reasonably practicable, access is limited to the minimum information and systems necessary to complete the authorized task.

Aira Hosting maintains logging and monitoring mechanisms designed to support accountability for privileged access and to assist in detecting unauthorized or inappropriate administrative activities.

---

50. Employee Confidentiality

Aira Hosting recognizes that protecting customer information requires not only technical safeguards but also a strong organizational commitment to confidentiality and responsible information handling.

Employees, contractors, temporary personnel, consultants, and other authorized individuals who may have access to personal information are expected to comply with internal confidentiality requirements appropriate to their roles.

Our organizational practices may include:

• Confidentiality agreements or contractual confidentiality obligations
• Privacy and security awareness training
• Role-specific security education
• Acceptable use policies
• Information handling procedures
• Internal access control policies
• Incident reporting procedures
• Disciplinary processes for unauthorized access or disclosure
• Ongoing awareness initiatives

Personnel are granted access only to the information reasonably necessary to perform assigned responsibilities.

Access to customer information is generally limited to activities such as:

• Providing requested technical support
• Delivering customer service
• Processing billing inquiries
• Maintaining infrastructure
• Investigating abuse
• Responding to security incidents
• Complying with legal obligations
• Performing authorized operational functions

Employees are expected to:

• Protect confidential information.
• Maintain the privacy of customer data.
• Follow applicable internal security policies.
• Report suspected security incidents promptly.
• Avoid unauthorized disclosure or misuse of information.
• Use company systems responsibly.

Where personnel leave Aira Hosting or no longer require access to systems containing personal information, access rights are revoked or modified through established administrative procedures.

Aira Hosting periodically reviews internal privacy and security practices to reinforce our commitment to confidentiality and responsible data stewardship.

---

51. Customer Responsibilities

Protecting personal information is a shared responsibility. While Aira Hosting implements appropriate safeguards to protect the services we provide, customers are responsible for maintaining the security of their own accounts, applications, websites, servers, and hosted environments.

Customers are expected to implement appropriate administrative, technical, and organizational measures suitable for their own use of our services.

Customer responsibilities include, but are not limited to:

51.1 Account Security

Customers should:

• Maintain strong, unique passwords.
• Protect authentication credentials.
• Enable multi-factor authentication where available.
• Promptly update compromised credentials.
• Restrict account access to authorized users only.
• Review account activity periodically.

Customers are responsible for all activity occurring under their accounts unless otherwise provided by applicable law.

51.2 Application Security

Customers remain responsible for securing applications deployed within their hosting environments.

Recommended practices include:

• Keeping software updated.
• Applying security patches promptly.
• Removing unsupported software.
• Using secure coding practices.
• Monitoring for known vulnerabilities.
• Restricting unnecessary services.

51.3 Website Security

Customers should implement appropriate measures to protect their websites, including:

• Maintaining current content management systems.
• Updating plugins and themes.
• Using reputable extensions.
• Removing unused software.
• Implementing secure authentication.
• Monitoring administrative access.

51.4 Backup Responsibilities

Unless a managed backup service or other backup solution is expressly included within the customer’s purchased service plan or separately agreed in writing, customers remain responsible for maintaining their own backups of:

• Website files
• Databases
• Email content
• Application data
• Configuration files
• Source code
• Digital assets
• Other hosted information

Customers should periodically verify the integrity and recoverability of their backups.

51.5 Data Protection Compliance

Customers who collect, process, store, or otherwise handle personal information using Aira Hosting services remain responsible for complying with applicable privacy and data protection laws governing their own activities.

Depending on applicable law, customers may be responsible for:

• Providing privacy notices.
• Obtaining legally required consents.
• Honoring individual privacy rights.
• Managing cookies appropriately.
• Implementing lawful processing practices.
• Maintaining records of processing activities.
• Responding to regulatory inquiries.

51.6 Lawful Use of Services

Customers are responsible for ensuring that their use of Aira Hosting services complies with:

• Applicable laws
• Regulatory requirements
• Intellectual property rights
• Contractual obligations
• Acceptable use requirements
• Applicable industry regulations

Customers should not use Aira Hosting services in a manner that unlawfully infringes the privacy or rights of others.

51.7 Security Incident Reporting

Customers should promptly notify Aira Hosting if they become aware of:

• Unauthorized account access
• Credential compromise
• Suspected malware infections
• Security vulnerabilities affecting hosted services
• Data breaches involving Aira Hosting services
• Unauthorized administrative activity
• Other incidents that may affect the security or integrity of their services

Prompt reporting assists both customers and Aira Hosting in responding effectively to potential security incidents.

51.8 Shared Responsibility Model

The security of hosting and cloud services is based upon a shared responsibility model.

Generally:

• Aira Hosting is responsible for protecting the infrastructure, networking, and service components that we manage.
• Customers are responsible for protecting the applications, websites, operating systems (where customer-managed), user accounts, data, configurations, credentials, and content they deploy or manage within their hosting environments.

The precise allocation of responsibilities may vary depending upon the specific services purchased, including whether services are unmanaged, managed, or include additional security or backup features.

By implementing appropriate security practices and working collaboratively with Aira Hosting, customers help promote a secure and reliable hosting environment for themselves and the broader Internet community.

52. Hosting Data Ownership

Aira Hosting recognizes that customers retain ownership and control of the content they create, upload, store, transmit, or otherwise process using our hosting and cloud infrastructure services.

Except as expressly provided by applicable law, customer agreements, or documented customer instructions, Aira Hosting does not claim ownership of customer content.

For purposes of this Privacy Policy, customer content may include, without limitation:

• Website files
• Source code
• Databases
• Email messages
• Attachments
• Images
• Videos
• Audio files
• Documents
• Application data
• Configuration files
• Backups
• Virtual machine data
• Customer-generated logs
• DNS zone files
• SSL certificate information
• Other digital assets hosted through our services

Customers retain all applicable intellectual property rights and other legal rights relating to their customer content.

Aira Hosting processes customer content solely for legitimate purposes associated with providing and supporting the requested services, including:

• Provisioning hosting services
• Maintaining infrastructure
• Delivering technical support
• Operating backup services where applicable
• Maintaining security
• Preventing abuse
• Troubleshooting service issues
• Performing disaster recovery operations
• Complying with applicable legal obligations
• Enforcing applicable agreements where necessary

Limited Access to Customer Content

Aira Hosting does not routinely monitor, inspect, review, analyze, or access the substantive content of customer websites, databases, email communications, applications, or server files.

Access to customer content may occur only where reasonably necessary for purposes such as:

• Responding to customer-authorized support requests
• Diagnosing technical issues
• Investigating service failures
• Detecting or mitigating cybersecurity threats
• Responding to abuse reports
• Maintaining infrastructure integrity
• Recovering from operational incidents
• Complying with valid legal obligations
• Protecting the rights, security, or safety of Aira Hosting, our customers, or others

Whenever access is required, Aira Hosting seeks to limit such access to the minimum information reasonably necessary to accomplish the applicable purpose.

Authorized personnel accessing customer content are subject to internal access controls, confidentiality obligations, and security procedures.

Customer Control

Subject to applicable legal requirements and the operational characteristics of the services used, customers generally control:

• The information they upload.
• The applications they deploy.
• The websites they publish.
• Their data retention practices.
• Their user accounts.
• Their application configurations.
• Their encryption strategies.
• Their access permissions.

Customers are responsible for ensuring that they possess all necessary rights, permissions, licenses, and legal authority to upload, host, process, or transmit customer content using Aira Hosting services.

---

53. Data Retention Schedule

Aira Hosting retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

Retention periods may vary depending upon:

• The type of information.
• The services used.
• Customer instructions.
• Applicable legal requirements.
• Regulatory obligations.
• Tax and accounting requirements.
• Security needs.
• Operational requirements.
• Litigation or dispute preservation requirements.

The following categories provide general guidance regarding our retention practices.

Customer Account Information

Customer account information is generally retained while an account remains active and for an appropriate period thereafter to:

• Maintain business records.
• Comply with legal obligations.
• Resolve disputes.
• Prevent fraud.
• Support account restoration where appropriate.

Billing and Financial Records

Billing records, invoices, payment history, tax documentation, and related financial information may be retained for periods required under applicable accounting, taxation, auditing, and financial reporting laws.

Domain Registration Information

Domain registration records may be retained as required by applicable registrar agreements, registry policies, ICANN requirements (where applicable), contractual obligations, and legal requirements.

Support Tickets

Support communications, technical correspondence, and customer service records may be retained for reasonable periods to:

• Maintain service history.
• Improve customer support.
• Resolve disputes.
• Meet legal obligations.
• Protect our legitimate interests.

Server Logs

Operational server logs are generally retained for periods reasonably necessary to:

• Maintain infrastructure.
• Diagnose technical issues.
• Investigate incidents.
• Detect abuse.
• Support security operations.
• Meet applicable compliance obligations.

Retention periods may vary depending on the nature and purpose of the logs.

Security Logs

Security-related logs may be retained for longer periods where reasonably necessary to:

• Investigate security incidents.
• Detect recurring threats.
• Maintain audit trails.
• Support forensic investigations.
• Demonstrate regulatory compliance.
• Protect customers and infrastructure.

Marketing Preferences

Records relating to marketing preferences, consent status, and unsubscribe requests may be retained as reasonably necessary to demonstrate compliance with applicable electronic communications and privacy laws.

Cookies and Similar Technologies

Cookie retention periods depend upon the specific type of cookie and its intended purpose.

Some cookies expire automatically at the end of a browser session, while others remain on a user’s device until expiration or deletion.

Detailed information regarding cookies may be provided through our cookie management tools or cookie notices where applicable.

Backup Data

Backup copies may continue to exist for limited periods after information has been deleted from active systems as part of routine disaster recovery, business continuity, security, and operational processes.

Such backup data remains subject to appropriate security protections and is generally removed or overwritten in accordance with applicable backup lifecycle procedures.

Legal Preservation

Where reasonably necessary, Aira Hosting may retain information beyond ordinary retention periods if required to:

• Comply with legal obligations.
• Preserve evidence.
• Respond to litigation.
• Defend legal claims.
• Investigate fraud.
• Protect the rights or safety of Aira Hosting, our customers, or others.

Retention periods are periodically reviewed and may be updated as legal requirements, business operations, and technology evolve.

---

54. Data Deletion Procedures

Aira Hosting is committed to securely deleting or anonymizing personal information when it is no longer required for the purposes described in this Privacy Policy, unless continued retention is required or permitted by applicable law.

Customers may request deletion of certain personal information, subject to:

• Applicable legal obligations.
• Contractual commitments.
• Regulatory requirements.
• Security considerations.
• Fraud prevention requirements.
• Ongoing investigations.
• Pending disputes.
• Technical limitations.

Customer-Initiated Deletion

Customers may request deletion of eligible account information or hosted data by:

• Using available account management tools.
• Contacting customer support.
• Contacting the Aira Hosting Privacy Team or designated privacy contact.

Identity verification may be required before fulfilling deletion requests to protect customer accounts and prevent unauthorized deletion.

Account Termination

Upon account termination, customer data may remain temporarily available for a limited period where reasonably necessary to:

• Complete pending transactions.
• Facilitate migration or retrieval where applicable.
• Support backup restoration processes.
• Meet legal or regulatory obligations.
• Resolve billing matters.
• Investigate abuse or fraud.

After applicable retention periods expire, information is scheduled for deletion, anonymization, or irreversible destruction in accordance with our internal data lifecycle procedures.

Secure Deletion Practices

Depending upon the nature of the information and storage media involved, Aira Hosting may employ reasonable technical and organizational measures designed to securely dispose of information, including:

• Logical deletion
• Cryptographic erasure where appropriate
• Secure overwriting where applicable
• Controlled destruction of storage media
• Secure disposal procedures
• Access revocation
• Backup lifecycle management

The specific deletion method used may vary depending on the technology involved, the storage environment, legal obligations, operational requirements, and applicable industry practices.

Backup Systems

Information scheduled for deletion may continue to exist within encrypted backup systems for a limited period until such backups are overwritten, expire in accordance with established retention schedules, or are securely destroyed.

Backup copies are not ordinarily restored solely to process routine deletion requests unless required by applicable law or operational necessity.

Exceptions to Deletion

Aira Hosting may decline or delay deletion requests where retention is necessary to:

• Comply with applicable laws or regulations.
• Complete contractual obligations.
• Detect or prevent fraud.
• Protect the security of our services.
• Investigate abuse or security incidents.
• Establish, exercise, or defend legal claims.
• Protect the rights, property, or safety of Aira Hosting, our customers, or others.

Where a deletion request cannot be fully honored, we will process the request in accordance with applicable legal requirements and, where appropriate, inform the requester of the basis for any continued retention.

Aira Hosting periodically reviews its data lifecycle management practices to support the secure, timely, and responsible deletion of personal information while balancing legal, operational, and security requirements.

55. Customer Rights

Aira Hosting respects the privacy rights of individuals and is committed to providing reasonable mechanisms for exercising those rights in accordance with applicable data protection and privacy laws.

The rights available to an individual depend on factors including:

• The individual’s country or state of residence.
• The applicable legal framework.
• The nature of the information processed.
• The purpose of processing.
• The legal basis for processing.
• Applicable contractual and regulatory obligations.

Where applicable law provides such rights, individuals may have the ability to:

• Request access to personal information.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Manage marketing preferences.
• Lodge complaints with competent supervisory authorities.
• Request information regarding the processing of their personal information.

To protect customer privacy and account security, Aira Hosting may require reasonable identity verification before fulfilling privacy-related requests.

Privacy rights requests may be submitted by contacting the Aira Hosting Privacy Team or designated privacy contact using the methods described in the “Contact Information” section of this Privacy Policy.

Certain requests may be limited or denied where permitted or required by applicable law, including where processing is necessary to:

• Comply with legal obligations.
• Prevent fraud.
• Protect security.
• Complete contractual obligations.
• Establish, exercise, or defend legal claims.
• Protect the rights and freedoms of others.

Where legally required, Aira Hosting will respond to qualifying requests within the timeframes prescribed by applicable law.

---

56. GDPR Rights

Individuals located within the European Economic Area (EEA), or whose personal information is otherwise processed subject to the General Data Protection Regulation (GDPR), may have the following rights, subject to applicable legal limitations.

Right of Access

You may request confirmation regarding whether Aira Hosting processes your personal information and, where applicable, obtain access to that information together with information concerning the purposes of processing, categories of information processed, recipients, retention periods, and applicable safeguards.

Right to Rectification

You may request correction of inaccurate personal information and completion of incomplete personal information where appropriate.

Right to Erasure

Under certain circumstances, you may request deletion of your personal information where continued processing is no longer legally justified.

Right to Restriction

You may request that processing be restricted in circumstances permitted under the GDPR.

Right to Data Portability

Where applicable, you may request that certain personal information be provided in a structured, commonly used, and machine-readable format or transmitted to another controller where technically feasible.

Right to Object

You may object to certain processing activities, including processing based on legitimate interests or direct marketing, subject to applicable legal requirements.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before consent was withdrawn.

Right to Lodge a Complaint

Individuals may lodge complaints with the competent supervisory authority in their country of residence, place of work, or the location of the alleged infringement where permitted by applicable law.

---

57. UK GDPR Rights

Individuals whose personal information is processed under the United Kingdom General Data Protection Regulation (UK GDPR) and the UK Data Protection Act may exercise privacy rights substantially similar to those available under the GDPR.

Subject to applicable legal requirements, individuals may request:

• Access to personal information.
• Correction of inaccurate information.
• Deletion of personal information.
• Restriction of processing.
• Data portability where applicable.
• Objection to certain processing activities.
• Withdrawal of consent where consent forms the legal basis for processing.

Aira Hosting will evaluate and respond to qualifying requests in accordance with applicable UK data protection legislation.

Individuals also have the right, where applicable, to submit complaints to the appropriate UK supervisory authority if they believe their personal information has been processed in violation of applicable law.

---

58. California Privacy Rights

Residents of California may have privacy rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), subject to applicable statutory limitations and exemptions.

Depending upon the circumstances, California residents may have the right to:

• Know the categories of personal information collected.
• Know the sources from which personal information is collected.
• Know the business purposes for processing personal information.
• Know the categories of third parties with whom personal information is shared.
• Request access to specific pieces of personal information.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Request information regarding the retention of personal information.
• Request information regarding certain disclosures of personal information.
• Limit the use of certain sensitive personal information where applicable under law.
• Exercise rights without unlawful discrimination.

Sale or Sharing of Personal Information

Aira Hosting does not sell personal information for monetary consideration.

Where applicable law defines certain advertising or analytics activities as “sharing” for cross-context behavioral advertising purposes, such processing will be conducted in accordance with applicable legal requirements and users will be provided with appropriate choices where required.

Authorized Agents

California residents may designate an authorized agent to submit qualifying privacy requests on their behalf where permitted by applicable law. Aira Hosting may require appropriate verification of both the requester and the authorized agent before fulfilling such requests.

Non-Discrimination

Aira Hosting will not unlawfully discriminate against individuals for exercising privacy rights provided under applicable California privacy laws.

---

59. Canadian Privacy Rights

For individuals whose personal information is subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) or substantially similar provincial privacy legislation, Aira Hosting is committed to processing personal information in accordance with recognized principles of fairness, transparency, accountability, and security.

Subject to applicable legal requirements, individuals may request:

• Access to personal information.
• Correction of inaccurate information.
• Information regarding our privacy practices.
• Information regarding the purposes for which personal information is processed.
• Withdrawal of consent where appropriate and legally permissible.

Where applicable, individuals may also submit complaints regarding the handling of their personal information to the appropriate Canadian privacy authority.

Aira Hosting will review and respond to qualifying requests within applicable legal timeframes.

---

60. Right to Object

Where applicable law provides such a right, individuals may object to certain processing activities carried out by Aira Hosting.

This may include objections to processing based upon:

• Legitimate interests.
• Direct marketing.
• Profiling related to direct marketing.
• Other circumstances recognized under applicable law.

Upon receiving an objection request, Aira Hosting will evaluate:

• The legal basis relied upon.
• The nature of the processing.
• The individual’s interests and rights.
• Applicable legal obligations.
• Any compelling legitimate grounds supporting continued processing.

Where required by applicable law, Aira Hosting will cease or restrict the challenged processing unless compelling legitimate grounds justify continued processing or another lawful basis applies.

Individuals may object to direct marketing communications at any time, and such requests will generally be honored without undue delay.

---

61. Right to Restrict Processing

Where applicable law permits, individuals may request that Aira Hosting restrict the processing of their personal information in circumstances such as:

• A dispute regarding the accuracy of personal information.
• Processing that is alleged to be unlawful.
• Situations where deletion has been requested but temporary retention is preferred.
• Circumstances where processing is no longer necessary for our purposes but information is required for legal claims.
• Pending evaluation of an objection to processing.

Where processing is restricted, Aira Hosting may continue to retain the relevant information but will limit further processing except where:

• The individual provides consent.
• Processing is necessary for legal claims.
• Processing protects the rights of another person.
• Processing is required for important public interest reasons recognized by applicable law.

---

62. Right to Erasure

Where applicable law provides such a right, individuals may request the deletion of their personal information.

Deletion requests may be honored where:

• The information is no longer necessary.
• Consent has been withdrawn and no alternative legal basis exists.
• Processing is unlawful.
• Applicable law requires deletion.
• An objection has been upheld.

Deletion may not be possible where continued retention is required to:

• Comply with legal obligations.
• Detect or prevent fraud.
• Protect security.
• Complete contractual obligations.
• Defend legal claims.
• Preserve evidence.
• Protect the rights of others.

Where complete deletion cannot be immediately achieved because of backup systems, disaster recovery procedures, or legal preservation requirements, information will remain protected until deletion becomes operationally feasible or legally permissible.

---

63. Right to Data Portability

Where applicable law provides such a right and technical feasibility exists, individuals may request a copy of certain personal information they have provided to Aira Hosting.

Where applicable, the information may be provided:

• In a structured format.
• In a commonly used format.
• In a machine-readable format.

Where technically feasible and legally permissible, individuals may also request transmission of such information directly to another data controller.

The right to data portability applies only in circumstances recognized by applicable law and does not necessarily extend to all categories of information processed by Aira Hosting.

---

64. Right to Withdraw Consent

Where Aira Hosting relies upon an individual’s consent as the legal basis for processing personal information, that consent may generally be withdrawn at any time.

Withdrawal of consent may relate to activities such as:

• Marketing communications.
• Optional cookies.
• Analytics technologies.
• Advertising technologies.
• Optional surveys.
• Certain optional third-party integrations.

Consent may typically be withdrawn by:

• Updating cookie preferences.
• Adjusting communication preferences.
• Using unsubscribe mechanisms.
• Contacting the Aira Hosting Privacy Team.
• Exercising available privacy controls within customer account settings.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn, nor does it affect processing conducted under another lawful basis.

Where consent is withdrawn, Aira Hosting will cease the applicable processing within a reasonable period where required by applicable law, unless another lawful basis permits or requires continued processing.

Aira Hosting is committed to honoring applicable privacy rights in a transparent, fair, and timely manner while balancing legal obligations, operational requirements, security considerations, and the rights of other individuals.

65. Automated Decision Making

Aira Hosting may use automated systems to support the operation, security, and administration of our services. These systems are designed to improve efficiency, enhance cybersecurity, reduce fraud, maintain service reliability, and assist in providing our products and services.

Examples of automated processing may include:

• Spam and abuse detection
• Fraud prevention and risk scoring
• Login anomaly detection
• Malware identification
• Distributed Denial-of-Service (DDoS) mitigation
• Intrusion detection
• Rate limiting
• Authentication monitoring
• Infrastructure health monitoring
• Service provisioning workflows
• Billing automation
• Account verification workflows
• Security alert generation

These automated systems generally assist human decision-making rather than replace it.

Where applicable law provides individuals with rights relating to automated decision-making or profiling, Aira Hosting will process personal information in accordance with those legal requirements.

Where legally required, decisions producing legal or similarly significant effects on individuals will not be based solely on automated processing unless:

• The processing is authorized by applicable law;
• The processing is necessary for entering into or performing a contract;
• The individual has provided valid consent; or
• Another lawful basis recognized under applicable law applies.

Where required, individuals may request:

• Information regarding applicable automated processing;
• Human review of qualifying decisions;
• An opportunity to express their point of view; or
• Review in accordance with applicable legal requirements.

Security-related automated processing may continue where reasonably necessary to protect customers, infrastructure, networks, and services from malicious activity.

---

66. Children’s Privacy

Aira Hosting’s services are intended for individuals who have the legal capacity to enter into binding agreements and for businesses, organizations, developers, educational institutions, governmental entities, and other professional users.

Our services are not directed toward children, and we do not knowingly collect personal information directly from children where prohibited by applicable law.

If we become aware that personal information has been collected from a child in violation of applicable legal requirements, we will take reasonable steps to:

• Investigate the matter;
• Delete or anonymize the information where appropriate;
• Restrict further processing where required;
• Comply with applicable legal obligations.

Parents or legal guardians who believe that a child has provided personal information to Aira Hosting may contact the Aira Hosting Privacy Team to request review or deletion, subject to appropriate identity verification.

Customers who operate websites, applications, or online services using Aira Hosting infrastructure remain responsible for ensuring that their own services comply with all applicable laws relating to children’s privacy, including obtaining any required parental consents and providing appropriate privacy notices.

---

67. Third-Party Websites

Our websites, customer portals, documentation, knowledge base, blog articles, marketing materials, and other services may contain links to third-party websites, services, applications, software, plugins, social media platforms, or other online resources.

These third-party services operate independently from Aira Hosting and are governed by their own privacy policies, terms of service, and data processing practices.

Aira Hosting does not control and is not responsible for:

• The privacy practices of third-party websites;
• The content available on third-party websites;
• Information collected directly by third parties;
• Third-party security practices;
• Third-party cookies or tracking technologies;
• Products or services offered by third parties.

The inclusion of a link, integration, or reference to a third-party service does not constitute an endorsement or guarantee of that third party or its privacy practices.

Customers and visitors are encouraged to review the applicable privacy policies and terms of any third-party services before providing personal information or using those services.

---

68. Policy Updates

Technology, privacy laws, regulatory guidance, and our business operations may evolve over time. Accordingly, Aira Hosting may update or modify this Privacy Policy periodically to reflect:

• Changes in applicable laws or regulations;
• New products or services;
• Operational improvements;
• Security enhancements;
• Changes in data processing practices;
• Customer feedback;
• Regulatory guidance;
• Business developments.

When material changes are made to this Privacy Policy, Aira Hosting may provide notice through one or more appropriate methods, which may include:

• Posting the updated Privacy Policy on our website;
• Displaying notices within the customer portal;
• Sending email notifications where appropriate;
• Providing other communications as required by applicable law.

The “Effective Date” at the beginning or end of this Privacy Policy indicates when the current version became effective.

Continued use of Aira Hosting services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.

Where applicable law requires consent for material changes affecting previously collected personal information, Aira Hosting will obtain such consent before implementing those changes.

---

69. Contact Information

Questions, requests, or concerns regarding this Privacy Policy or Aira Hosting’s privacy practices may be directed to the Aira Hosting Privacy Team.

Privacy-related inquiries may include:

• Requests to exercise privacy rights;
• Questions regarding personal information processing;
• Requests relating to international data transfers;
• Security and privacy concerns;
• Data access requests;
• Correction requests;
• Deletion requests;
• Consent withdrawal requests;
• Complaints regarding our privacy practices.

Requests should include sufficient information to enable Aira Hosting to:

• Verify the identity of the requester where appropriate;
• Locate the relevant account or records;
• Understand the nature of the request; and
• Respond efficiently and securely.

To protect customer privacy and account security, additional identity verification may be required before responding to certain requests.

Aira Hosting will make reasonable efforts to respond to qualifying privacy requests within the timeframes required by applicable law.

---

70. Privacy Complaints

Aira Hosting takes privacy concerns seriously and is committed to investigating complaints fairly, promptly, and in accordance with applicable legal requirements.

Individuals who believe that Aira Hosting has processed personal information in a manner inconsistent with this Privacy Policy or applicable privacy laws are encouraged to contact the Aira Hosting Privacy Team before escalating the matter to a supervisory authority, where appropriate.

Upon receiving a complaint, Aira Hosting may:

• Acknowledge receipt of the complaint;
• Verify the identity of the complainant where appropriate;
• Investigate the circumstances;
• Request additional information if necessary;
• Evaluate applicable legal and contractual obligations;
• Respond with our findings or proposed resolution;
• Implement corrective measures where appropriate.

Nothing in this Privacy Policy limits any rights individuals may have under applicable law to submit complaints to competent privacy regulators or supervisory authorities.

---

71. Supervisory Authorities

Individuals located in jurisdictions that provide regulatory oversight of privacy rights may have the right to lodge complaints with the competent supervisory authority responsible for data protection in their country, state, province, or other applicable jurisdiction.

Depending upon the individual’s location, this may include authorities responsible for enforcing:

• The General Data Protection Regulation (GDPR);
• The UK General Data Protection Regulation (UK GDPR);
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA);
• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA); or
• Other applicable privacy legislation.

We encourage individuals to provide Aira Hosting with an opportunity to address concerns directly before contacting a supervisory authority, although doing so is not a prerequisite for exercising any legal rights.

Where required by applicable law, Aira Hosting will cooperate with competent supervisory authorities regarding inquiries relating to our processing of personal information.

---

72. Effective Date

This Privacy Policy is effective as of the date stated at the beginning of this document and supersedes all previous versions of the Aira Hosting Privacy Policy.

This Privacy Policy applies to the processing of personal information by Aira Hosting in connection with its websites, customer portals, billing platforms, hosting services, cloud infrastructure services, domain registration services, security products, APIs, affiliate program, and other products and services unless a separate privacy notice expressly applies.

Aira Hosting is committed to maintaining responsible privacy practices, implementing appropriate technical and organizational safeguards, and continually reviewing its privacy program to reflect changes in technology, applicable laws, regulatory guidance, and customer expectations.

By using Aira Hosting’s websites or services, individuals acknowledge that they have had the opportunity to review this Privacy Policy and understand how Aira Hosting collects, uses, discloses, stores, protects, transfers, and otherwise processes personal information in accordance with applicable law.

---

Conclusion

Privacy and information security are fundamental to Aira Hosting’s commitment to delivering trusted hosting, cloud infrastructure, and digital services worldwide. We strive to process personal information lawfully, fairly, transparently, and securely while respecting the rights of our customers and complying with applicable privacy legislation across the jurisdictions in which we operate.

As our services and the legal landscape continue to evolve, we remain committed to improving our privacy practices, strengthening our security measures, and maintaining the confidence that customers place in Aira Hosting every day.