1. Overview
This Privacy Policy describes how RockSolidHost, Inc. collects, uses, and discloses information when you visit our website, create an account, or use our Services. Our role is that of a data controller for the information described here. For personal data you process on the Services on behalf of others, our Data Processing Addendum applies.
2. Information We Collect
- Account information you provide (name, email, organization, billing address).
- Payment information processed by our PCI-compliant payment partner — we do not store full card numbers.
- Service-usage data such as IP addresses, request logs, and resource metrics necessary to operate and secure the Services.
- Support communications you send us, retained for quality and training.
- Limited analytics from our marketing site, described in section 5.
3. How We Use Your Information
We use the information we collect to provide and improve the Services, process payments, communicate with you about your account, prevent abuse, and meet legal obligations. We don't sell your personal information.
4. When We Share Information
We share information with sub-processors that provide infrastructure, payment, communication, and support services on our behalf. The current list is maintained at /legal/subprocessors and is updated at least 30 days before any addition.
We may also share information when required by law, in response to valid legal process, or in connection with a merger or acquisition. Where the law allows, we'll notify you first.
5. Cookies & Similar Technologies
Our marketing site uses essential cookies to keep you signed in and to remember your preferences, plus a small set of privacy-respecting analytics cookies that help us understand which content is useful. You can opt out of analytics from the cookie banner.
6. Data Retention
We retain account data for as long as your account is active. After cancellation, we keep service data for 30 days to allow recovery, then delete it. Billing and tax records are retained for the period required by law (typically 7 years).
7. Your Rights (GDPR, CCPA, & Equivalents)
Depending on where you live, you may have rights to access, correct, delete, port, or restrict our processing of your personal information. To exercise any of these rights, email [email protected]. We respond within 30 days.
8. International Data Transfers
When we transfer personal data out of the EU, UK, or Switzerland, we rely on the Standard Contractual Clauses adopted by the European Commission, supplemented where appropriate. A list of regions and the safeguards that apply is available on request.
9. Children's Privacy
Our Services are not directed to children under 13 (or under 16 in the EU). We don't knowingly collect personal information from children. If you believe we have, contact us and we'll delete it.
10. Changes to This Policy
If we make material changes to this policy, we'll notify account holders by email at least 30 days before the changes take effect. The "Last updated" date at the top is always current.
11. Contact
Privacy questions or rights requests: [email protected]. EU representative and DPO contact details available on request.