Privacy Policy

This Privacy Policy explains how NorteX (the "Provider", "we") processes personal data when you visit hosting.nortexdev.com, create an account and use Light Hosting.

Effective 29 October 2026.

1. Controller

The Provider is the controller of the personal data described in this policy. Contact us about your data at contact@nortexdev.com or through the contact form.

2.1 Account data. Your name, email address, and the billing details you enter, such as company name, address, country, phone number and tax ID.
2.2 Billing data. Orders, invoices, payments, credits and refunds. Card and bank details are entered with and stored by the payment processor. We receive only a reference to the payment method, such as its type, last four digits and expiry date.
2.3 Support data. The contents of tickets, contact form messages and emails you send us.
2.4 Security and log data. IP addresses, login times, and a log of actions taken on your account, such as orders, password changes and cancellations.
2.5 Service data. The domain, server details and control panel activity of your Services.
2.6 Emails. Copies of the emails we send you, such as invoices, notices and ticket replies.

3. Purposes and Legal Bases

3.1 Providing the Services, managing your account, billing and support, on the basis of our contract with you (Article 6(1)(b) GDPR).
3.2 Issuing invoices and keeping accounting records, on the basis of our legal obligations (Article 6(1)(c) GDPR).
3.3 Protecting the Services, preventing fraud and free trial abuse, handling abuse reports, and establishing or defending legal claims, on the basis of our legitimate interests (Article 6(1)(f) GDPR).
3.4 We do not use your data for advertising or profiling, and we do not sell it.

4. Cookies and Analytics

4.1 The client area uses only cookies needed for it to work: a session cookie that keeps you logged in, a security token that protects forms, and cookies that remember your language, currency and cart.
4.2 We do not use Google Analytics or any other analytics, tracking or advertising cookies, and no third-party trackers are loaded on the site. Because only essential cookies are used, no cookie consent is needed.

5. Data on Your Store

5.1 You are the controller of the personal data your store processes about your own users and customers. We process it only as your processor, to host your Service, and never for our own purposes.
5.2 We access your Service's data only when needed to provide support you request, keep the infrastructure running, or comply with the law or the Abuse Policy.
5.3 The data is deleted when your Service is terminated, as described in the Terms of Service.

6. Recipients

We share personal data only with service providers that help us run Light Hosting, under agreements that require them to protect it:

payment processors, to take payments,
server and network providers, to host the client area and the Services,
email delivery providers, to send account and billing emails.

We may also disclose data to authorities when legally required.

7. Transfers Outside the EEA

Where a service provider processes data outside the European Economic Area, the transfer is protected by an adequacy decision or the European Commission's Standard Contractual Clauses.

8. Retention

8.1 Account, support and service data is kept while your account is active, and deleted or anonymized when you close it.
8.2 Invoices and accounting records are kept for 5 years from the end of the calendar year they relate to, as required by Polish law.
8.3 Security logs are kept for up to 12 months.
8.4 Data needed for an ongoing dispute or legal claim is kept until it is resolved.

9. Your Rights

Subject to applicable law, you have the right to access, rectify and erase your data, to restrict or object to its processing, and to receive it in a portable format. Most account details can be changed in the client area. For anything else, contact us using the details in Section 1. You can also lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO).

10. Security

Data is transmitted over HTTPS, passwords are stored hashed, and access to customer data is limited to what is needed to run the Services.

11. Changes

We may update this Privacy Policy. Material changes are announced by email before they apply.