Privacy Policy
RIMGURU Services Private Limited is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA). We respect your privacy rights and are committed to keeping your information secure, accurate, and confidential.
Last Updated: January 1, 2024
Data Protection Officer
Email: dpo@host4india.com
Address: C-24, Platina Heights, 7th Floor, C-Block, Sector 62, Noida, Uttar Pradesh 201307, India
For any questions about this policy or to exercise your privacy rights, contact our Data Protection Officer using the details above.
What Personal Data We Collect
We collect only the personal data necessary to provide our services. Personal data means any information that identifies you or can be used to identify you.
Account Information
- Full name
- Email address
- Phone number
- Company name (if applicable)
- Billing address
- GST number (if applicable)
Payment Information
- Payment method details (processed by payment processors)
- Billing history
- Transaction records
- Invoice details
We do not store complete credit card numbers. Payment processing is handled by PCI-DSS compliant third-party processors.
Technical Information
- IP address
- Browser type and version
- Device information
- Operating system
- Server access logs
- Service usage data
- Performance metrics
Communication Data
- Support ticket messages
- Email correspondence
- Chat transcripts
- Phone call records (when applicable)
Service Data
- Domain names registered
- Server configurations
- Backup data
- File uploads to your hosting account
- Database content
Legal Basis for Processing Your Data
- Contract Performance: we process data necessary to provide services you have purchased from us.
- Legal Obligation: we process data to comply with Indian tax laws, accounting requirements, and court orders.
- Legitimate Interest: we process data to prevent fraud, improve our services, and maintain security.
- Consent: we process data for marketing communications only with your explicit consent, which you can withdraw anytime.
How We Use Your Personal Data
Service Delivery
- Creating and managing your account
- Provisioning hosting services
- Processing payments and invoices
- Providing technical support
Communication
- Sending service notifications
- Responding to inquiries
- Providing updates about your services
- Sending security alerts
Security & Compliance
- Detecting and preventing fraud
- Monitoring for security threats
- Complying with legal obligations
- Enforcing our terms of service
Improvement & Marketing
- Analyzing service performance
- Improving our products
- Sending promotional offers (with consent)
- Conducting customer surveys
Third Parties Who Receive Your Data
We share your data with trusted third-party service providers who help us deliver our services. All third parties are contractually bound to protect your data.
- Payment Processors (Razorpay, PayU, Stripe, PayPal) — processing payments securely
- Analytics (Google Analytics) — understanding website usage and improving user experience
- Support Tools (Zoho Desk) — managing customer support tickets and communications
We do not sell, rent, or trade your personal data to third parties for their marketing purposes.
International Data Transfers
Some of our service providers (such as payment processors and analytics tools) may store or process your data outside India. When we transfer data internationally, we ensure:
- The recipient country provides adequate data protection
- We use Standard Contractual Clauses approved for data transfers
- Service providers implement appropriate security safeguards
- Transfers comply with DPDPA requirements
You have the right to obtain information about safeguards we use for international transfers. Contact our Data Protection Officer for details.
How Long We Keep Your Data
| Active customer accounts | Duration of service + 3 years |
| Inactive accounts (no active services) | 1 year, then deleted |
| Payment and invoice records | 7 years (tax law requirement) |
| Support tickets and communications | 2 years |
| Server logs and technical data | 90 days |
| Marketing consent records | Until consent is withdrawn |
| Backup data (if services availed) | As per retention policy, then overwritten |
After retention periods expire, we securely delete or anonymize your data. Some data may be retained longer if required by law or for legitimate legal purposes (such as dispute resolution).
Your Privacy Rights
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access — request a copy of the personal data we hold about you.
- Right to Correction — request correction of inaccurate or incomplete personal data.
- Right to Erasure — request deletion of your personal data when no longer necessary, subject to legal retention obligations.
- Right to Data Portability — request your data in a structured, machine-readable format.
- Right to Withdraw Consent — withdraw consent for consent-based processing at any time.
- Right to Grievance Redressal — file a complaint with our DPO, escalating to the Data Protection Board of India if unsatisfied.
How to Exercise Your Rights
Contact our Data Protection Officer at dpo@host4india.com with your full name and account email, the specific right you wish to exercise, details of your request, and proof of identity.
We will respond within 30 days. The first request per year is free; for excessive or repetitive requests, we may charge a reasonable administrative fee.
Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience, analyze usage, and deliver personalized content.
- Essential Cookies — required for the website to function (session cookies, authentication tokens, security cookies). These cannot be disabled.
- Analytics Cookies — help us understand how visitors use our website (Google Analytics, performance monitoring).
- Marketing Cookies — track activity to show relevant advertisements (retargeting pixels, conversion tracking). These require your consent.
You can control cookies through your browser settings; disabling cookies may affect website functionality. To opt out of Google Analytics, use the Google Analytics Opt-out Browser Add-on.
Data Security
Technical Measures
- SSL/TLS encryption for data transmission
- Encrypted data storage
- Firewall protection
- Regular security audits
- Intrusion detection systems
- Secure backup procedures
Organizational Measures
- Access controls and authentication
- Employee training on data protection
- Confidentiality agreements with staff
- Regular security reviews
- Incident response procedures
- Vendor security assessments
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify affected users within 72 hours via your registered email address
- Report the breach to the Data Protection Board of India as required by law
- Describe the nature of the breach and data affected
- Explain the likely consequences and measures taken
- Provide recommendations to protect yourself from potential harm
Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent as required by DPDPA. If you believe your child has provided us with personal data without your consent, contact dpo@host4india.com and, upon verification, we will delete such information within 30 days.
Marketing Communications
We send marketing communications only with your explicit consent. You can opt out at any time by clicking "unsubscribe" in any marketing email, updating preferences in your account, contacting support@host4india.com, or replying "UNSUBSCRIBE". Opting out of marketing does not affect transactional emails (invoices, service notifications, security alerts).
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or services. For material changes we will update the "Last Updated" date, notify you via email, and post a notice on our website for 30 days. For significant changes, we may request your renewed consent. Continued use of our services after changes constitutes acceptance of the updated policy.
Complaints and Grievances
Step 1: Contact our Data Protection Officer at dpo@host4india.com. We will acknowledge within 3 business days and provide a resolution within 30 days.
Step 2: If you are not satisfied with our response, you can file a complaint with the Data Protection Board of India as established under DPDPA 2023.
Contact Information
Company: RIMGURU Services Private Limited
Email: dpo@host4india.com
Support Email: support@host4india.com
Registered Office: C-24, Platina Heights, 7th Floor, C-Block, Sector 62, Noida, Uttar Pradesh 201307, India
Effective Date: January 1, 2024
This Privacy Policy is governed by the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.