Privacy policy

I. Personal data collected

Depending on the services used, Lordhosting collects the following categories of data:

• Identification data: first name, last name, postal address, email, phone number
• Connection data: IP address, browser type, operating system, access logs
• Payment data: transaction history, payment method (full banking data is never stored by Lordhosting, it is processed directly by our payment providers)
• Technical data: your server configuration, Pterodactyl client account IDs, support tickets
• Communication data: exchanges with customer service, communication preferences, newsletter subscription

II. How Lordhosting uses your personal data

• Create your customer account on the site
• Manage product and/or service orders
• Publish and manage reviews left on ordered products and/or services
• Send you our newsletter following your subscription
• Respond to your contact request made from our site
• Ensure the security of our services and infrastructure

Most of the processing listed above is necessary for the performance of the contract entered into with Lordhosting when you use our services. The processing of your data to send you our newsletter is based solely on your consent, which you can withdraw at any time.

III. How Lordhosting shares your personal data

Within Lordhosting SASU, your personal data is collected, processed and stored by authorized personnel, only within the scope of their respective responsibilities (customer service, marketing, IT).

We do not share your personal data with third parties, except in the following circumstances:

• With your prior consent: after obtaining your agreement, Lordhosting will share the authorized information with the third parties specified at the time of consent collection.
• To comply with a legal obligation: Lordhosting may share your information in accordance with applicable laws and regulations, to resolve disputes or respond to requests from judicial/administrative authorities.

Lordhosting ensures the legality of any sharing through data processing clauses with the companies concerned, requiring them to comply with this policy and take appropriate security measures.

Sub-processors

To provide our services, Lordhosting uses the following sub-processors, all contractually committed to comply with GDPR:

• Payment providers: PayPal, Stripe, CoinGate, Paysafecard — secure payment processing (credit card, transfer, cryptocurrencies, prepaid cards)
• Hosting and infrastructure: partner datacenters in France for colocation of our infrastructure (notably Marseille MRS2)
• Client management and billing: client account management panel, client area and invoice issuance
• Server panel: technical management of game servers, self-hosted on our infrastructure
• Complementary technical services: backups, DNS management and related cloud services

The detailed list of sub-processors and their GDPR safeguards is provided on request at contact@lordhosting.fr.

IV. How Lordhosting protects your personal data

Lordhosting places great importance on the security of your personal data and applies industry-standard practices to prevent unauthorized access, disclosure, use, modification, damage or loss of this information.

Organizational measures implemented:

• Minimization of data collected (only what is necessary for the processing purpose)
• Strict access control mechanisms: only authorized personnel access your data
• Encryption of communications (HTTPS, TLS)
• Regular database backups

In the event of a personal data breach, Lordhosting will comply with the legal and regulatory requirements applicable to notifying breaches to the competent supervisory authorities and/or the persons concerned.

V. Where Lordhosting hosts and transfers your data

Your personal data is hosted on Lordhosting SASU's infrastructure, located exclusively in France (notably at the Digital Realty MRS2 datacenter in Marseille). No transfer of your personal data is carried out outside the European Union without your prior consent.

VI. How to exercise your rights over your personal data

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights over your personal data:

• Right of access: know if we process data concerning you and obtain a copy.
• Right to rectification: correct your inaccurate data or complete data that is incomplete.
• Right to erasure ("right to be forgotten"): request the deletion of your data in the cases provided for by the GDPR.
• Right to restriction: request temporary restriction of the processing of your data.
• Right to object: object to the processing of your data on legitimate grounds related to your particular situation.
• Right to portability: receive your data in a structured, commonly used and machine-readable format.
• Right to define guidelines: give instructions concerning the fate of your data after your death.
• Right to withdraw consent: when processing is based on your consent, you can withdraw it at any time.

To exercise these rights, contact us by email at contact@lordhosting.fr specifying the right you wish to exercise. A response will be provided within a maximum of 30 days.

If you are not satisfied with our response, you can lodge a complaint with the CNIL: www.cnil.fr — CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris CEDEX 07.

VII. Cookies and trackers

Lordhosting uses the following categories of cookies:

• Essential cookies: essential for the site's operation (authentication, cart, language preferences). Do not require consent.
• Analytics cookies: allow us to understand site usage and improve it (anonymized statistics).
• Session cookies: linked to your login to your client area, deleted on logout.

You can at any time refuse, accept or customize your cookie preferences via the consent banner displayed on your first visit, or by modifying your browser settings.

VIII. Data retention period

Your personal data is kept as long as necessary for the purpose of processing and to comply with our legal and tax obligations. Inactive customer accounts are deleted after a period of 36 months without login.

IX. Updates to this policy

Lordhosting reserves the right to modify or update this privacy policy at any time, due to regulatory changes or modifications to our processing. Any substantial modification will be notified to you by email.

X. How to contact us