This Policy applies to aiwebhost.com, the customer panel, support requests and the provision of our services. It is prepared taking into account the Law of Ukraine "On Personal Data Protection" and, when it is applied, the EU General Data Protection Regulation (GDPR).
Who processes personal data
The owner of personal data is the individual entrepreneur Borodavka Vitaly Hryhorovych, who provides services under the AiWebHost brand.
Legal address: Ukraine, 51400, Pavlograd, str. Tsentralna, 25, sq. 40. Contact for data inquiries: Write Email or ticket system.
What data we receive
- name, surname, company name and contact information;
- address, country, language and selected currency;
- information about orders, invoices, payments and balance without storing full payment card details;
- domain contact data required by the registrar and registry;
- correspondence, tickets, attachments and records of performed support actions;
- IP address, login date and time, authorization logs and technical events;
- data on the use of resources, domains, DNS, mail services and service settings;
- information that the user voluntarily provides during the application.
We usually receive data directly from the user. Separate information may come from the payment system, domain registrar, partner, authorized representative of the client or be generated automatically during the use of the site and services.
We ask that you do not send passwords, payment details or documents unless requested by support through an agreed secure channel.
Purpose and legal basis of processing
The data is used only for specific and legitimate purposes. If the purpose changes significantly, the user will be notified and, if necessary, new consent will be obtained.
To whom the data may be transferred
To the extent necessary, data may be received by providers that help provide services:
- payment institutions and payment services;
- domain registrars and domain zone administrators;
- providers of server, network and anti-DDoS infrastructure;
- suppliers of licenses, support systems, email and billing;
- accountants, consultants and other professional contractors with a duty of confidentiality;
- competent state authorities — only if there is a legal basis and due process.
Providers receive only the data that is required for the relevant function and must process it in accordance with the contract and applicable law.
Data of domain owners
For domain registration or transfer, contact data is transferred to the registrar and registry of the corresponding domain zone. The composition of the data and the rules for their display are determined by the policy of a specific zone.
The user can hide contact data if the domain zone, registry or registrar supports this possibility. In some areas, data is hidden automatically, and in others, some information may remain public due to registry rules or legal requirements.
International data transfer
Individual providers, data centers, registrars or domain registries may be located outside Ukraine or the user's country. A transfer is made when it is necessary to fulfill an order, based on consent, contract, legal requirement or other permitted mechanism.
When the GDPR applies, transfers to countries without an adequate level of protection must use the safeguards it provides, including standard contractual clauses or another legal mechanism.
Storage periods
How we protect information
We apply access control, connection encryption, logging, administrative rights restrictions, backup and server environment protections. Access is granted to employees and contractors only to the extent necessary for their tasks.
No method of transmission or storage guarantees absolute security. In the event of an incident, we assess the risks, limit the consequences and comply with statutory reporting obligations.
Data of minors
Our services are intended for adults, entrepreneurs and authorized representatives of organizations. We do not knowingly collect children's personal data to enter into a contract without a proper legal basis or the consent of a legal representative, if required.
If you believe that a minor has submitted data to us without the necessary permission, please notify support so we can investigate and take appropriate action.
User rights
Depending on the applicable law, the user may:
- to find out whether his data is being processed and to get access to it;
- request correction of inaccurate or outdated data;
- request deletion or restriction of processing if there is no legal basis for further storage;
- object to processing based on legitimate interest or for direct marketing;
- withdraw consent without affecting the legality of the previous processing;
- receive data in a structured, common and machine-readable format when required by law;
- file a complaint with the Human Rights Commissioner of the Verkhovna Rada of Ukraine or the competent data protection authority in your country.
We do not make decisions based solely on automated processing that create legal or similar material consequences for the user. If such processing occurs, the user will receive the legally required information and the opportunity to request human participation.
How to submit a request or complaint
The request can be sent to Write Email or through ticket system. To protect your data, we may ask you to confirm your identity and account connection.
In the request, it is desirable to indicate the name, contact email, client number or domain and clearly describe the requirement. When GDPR applies, a response is provided without undue delay and usually within one month. In difficult cases, the term can be extended up to two months with a notification of the reason for the extension.
Changes to this Policy
This Policy has revision number 1.0 and is effective on November 6, 2026.
Significant changes that affect the rights of users or the purpose of processing must be communicated in an understandable way through the website, client panel or contact email.