Privacy policy — WebServ

Summary

We collect the minimum needed to sell you a service, deliver it, bill you and keep the platform secure. We do not sell your data, we do not run advertising trackers on this site, and we do not build a profile of you. Card numbers never reach our servers.

1. Who is responsible for your data

VersaVantage LLC, 1309 Coffeen Avenue, STE 17547, Sheridan, WY 82801, United States is the controller of the personal data described here. Reach us at billing@webserv.online.

2. What we collect, and why

Data	Why we hold it	Basis
Name, email address, company, phone, country	To create the account, deliver the service and contact you about it	Performance of the contract
Domain names and technical details you supply	To configure and support the service you bought	Performance of the contract
Billing records and payment references	To invoice you and to meet accounting and tax obligations	Legal obligation
IP address and browser string at the point of order or contact	To detect fraud and abuse of the order form	Legitimate interest
Server, mail and access logs	To operate the platform, diagnose faults and investigate abuse	Legitimate interest
Messages you send us	To answer you and to keep a record of what was agreed	Performance of the contract

3. Payment data

When you pay by card the transaction is handled by Stripe. You enter your card details on Stripe's own hosted page. We never see, receive or store your card number, expiry date or security code. We receive only a transaction reference, the amount, the result, and the last four digits of the card for reconciliation.

Stripe processes this data as an independent controller under its own privacy policy, which you can read at stripe.com/privacy.

4. Cookies and tracking

This site sets one cookie of its own: a session cookie that keeps your order form and its security token together while you are completing a purchase. It is deleted when you close the browser, it carries no identifying content, and it is required for the checkout to function.

We do not use analytics cookies, advertising cookies, social media pixels or cross-site trackers. There is no measurement script on this site at all.

Fonts are loaded from Google Fonts, which receives your IP address as part of that request. If you would rather that did not happen, a browser extension that blocks third-party font loading will prevent it without breaking the site.

5. Who we share data with

We share personal data only with parties who need it to deliver what you bought:

Stripe — card payment processing.
Our datacentre and network providers — hosting of the hardware your service runs on.
Domain registries and registrars — where you ask us to register or transfer a domain, the registry requires registrant contact details.
Our accountant and, where legally required, tax authorities — billing records only.

We do not sell personal data, and we do not pass it to advertisers, data brokers or marketing companies. We disclose data to a law enforcement or regulatory body only where we are legally required to, and we tell you unless we are prohibited from doing so.

6. Where your data is held

Account and billing data is held on our own infrastructure in Secaucus, New Jersey. Where that involves a transfer outside your country, it is covered by standard contractual clauses or the equivalent safeguard available in your jurisdiction.

7. How long we keep it

Account data — for as long as you hold a service, then thirty days.
Service data and backups — thirty days after the service ends, then permanently deleted.
Billing records — as long as tax law requires, typically five to ten years. These cannot be deleted on request.
Server and access logs — ninety days, unless retained longer for a specific abuse investigation.
Contact form messages — twenty-four months.

8. Your rights

You can ask us to:

Give you a copy of the personal data we hold about you, in a portable format.
Correct anything inaccurate.
Delete your data, where we are not required to keep it for accounting or legal reasons.
Restrict or object to a particular use, including any processing based on legitimate interest.
Withdraw consent, where consent was the basis for a particular use.

Write to billing@webserv.online. We respond within thirty days. We may ask you to confirm your identity first, so that we do not hand your data to someone else. There is no charge for any of this.

If you believe we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the data protection authority in your country.

9. Security

Access to customer data is restricted to staff who need it, protected by key-based authentication and multi-factor authentication. Traffic to this site and to the client portal is encrypted in transit. Backups are encrypted at rest and held in a separate location.

If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority within seventy-two hours of becoming aware of it, and tell you plainly what happened and what to do about it.

10. Children

Our services are sold to adults. We do not knowingly collect data from anyone under eighteen. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes

If we change this policy materially we email account holders at least thirty days before the change takes effect. The date at the top of this page always reflects the current version.