1. Introduction & Overview
This Privacy Policy describes how Arcos Host, operated by Arcos Multimedia ("Arcos Host", "we", "us", or "our"), collects, processes, and protects your personal data when you visit our website, utilize our customer portals, or subscribe to our web hosting, cloud services, and domain registration products.
We adhere to strict data privacy principles in compliance with global standards, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Roles: Data Controller vs. Data Processor
To understand how your information is handled, we distinguish between two primary roles:
Arcos Host as Data Controller
We act as a Data Controller for information related to your client account: your contact details, billing history, payment transactions, support inquiries, and direct portal authentication.
Arcos Host as Data Processor
When you host websites, databases, or client emails on our cloud servers, you are the Data Controller for your end-users' data, and Arcos Host operates strictly as a Data Processor providing secure hosting infrastructure.
3. Information We Collect
- Account & Registration Details: Full name, company name, primary email address, postal address, telephone number, and contact preferences provided during signup.
- Billing & Payment Metadata: Invoice records, transaction identifiers, and encrypted payment tokens. We never store raw credit card numbers or CVV codes on our servers; payments are processed directly via PCI-DSS Level 1 compliant payment gateways.
- Technical Connection Logs: IP addresses, browser types, operating systems, referring URLs, timestamps, and network routing metadata automatically collected when you access our websites or control panels for security and intrusion prevention.
- Domain WHOIS Data: Registrant, administrative, and technical contact information required by ICANN and top-level domain registries for domain registration services. (WHOIS Privacy Protection is available to mask personal details where permitted).
- Customer Support Communications: Support tickets, diagnostic logs, and live chat transcripts submitted through our help desk.
4. How We Use Your Information
We process your information strictly for legitimate business and contractual purposes:
- To provision, configure, scale, and maintain your cloud hosting accounts, domains, and email mailboxes.
- To process recurring subscription payments, invoices, and service renewals via our WHMCS billing system.
- To provide 24/7 technical customer support, service alerts, and critical maintenance notices.
- To safeguard our cloud network against malware, brute-force attacks, DDoS events, and unauthorized access.
- To fulfill statutory, legal, and ICANN regulatory compliance requirements.
5. Infrastructure & Sub-Processors
Arcos Host delivers cloud hosting powered by enterprise infrastructure partners (including 20i) utilizing tier-3/4 data center facilities located in:
- United States: Dallas, Texas
- United Kingdom: London
- Asia-Pacific: Singapore
All data centers maintain ISO 27001 certification, PCI-DSS compliance, 24/7 physical security, biometric access controls, and redundant UPS power.
We do not sell, rent, or trade your personal data to third parties for advertising. We share information solely with trusted third-party service providers (sub-processors) necessary for core operations:
- Payment Gateways: For encrypted, automated credit card and PayPal processing.
- Domain Registrars: (e.g. Enom, OpenSRS, CentralNic) to register and renew domain names.
- SSL Certificate Authorities: (e.g. Let's Encrypt, Sectigo) for automated SSL provisioning.
6. Cookies & Tracking Technologies
Our website and client billing portal use cookies to authenticate logged-in sessions, remember cart selections, and provide secure navigation. We do not use intrusive cross-site behavioral tracking cookies. You may disable cookies in your browser settings, though doing so may prevent you from logging into your client area or completing purchases.
7. Data Retention & Erasure
We retain your account details for as long as your service subscription remains active, plus any additional period mandated by financial, tax, or legal requirements (typically up to seven years for transaction records).
Upon account cancellation and verification, hosted website files, databases, and mailbox contents are removed from active servers and purged from rolling backup cycles in accordance with our disaster recovery schedules.
8. Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction, you possess the following rights regarding your personal information:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer needed for contractual or statutory obligations.
- Right to Data Portability: Request an export of your account data in a structured, machine-readable format.
- Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
To exercise any of these rights, submit a request through your Billing Support Portal or use our Contact Form.
9. Contact Data Protection
If you have questions, feedback, or concerns regarding our privacy practices or data security, please contact our data team at: