Legal

Privacy Policy

Last updated: June 8, 2026

1. Introduction

This Privacy Policy explains how YallowHost ("YallowHost", "we", "us", or "our") collects, uses, protects, shares, and retains information when you visit our website, create an account, and use our hosting, domain, server, and related services. We are committed to handling your information responsibly and being transparent about our practices.

2. Scope of this policy

This policy applies to information processed in connection with the YallowHost website, your customer account, and the services you order from us. It does not apply to third-party websites, applications, or services that you access through links from our site, or to the content you choose to host on our infrastructure, which remains under your control.

3. Information we collect

We collect information that you provide directly, information generated as you use our services, and information from the providers we rely on to deliver those services. This includes:

  • Account information — your name, username, password (stored only in hashed form), account preferences, and security settings such as two-factor authentication.
  • Contact information — email address, phone number, and any postal or organisation details you supply.
  • Billing and payment-related information — invoices, transactions, billing address, account balance, and payment status. Card and similar payment details are handled by our payment processors; we do not store full payment card numbers (see Section 5).
  • Domain registration information — registrant, administrative, technical, and billing contact details required to register or manage a domain (see Section 6).
  • Hosting and server service information — details you provide so we can set up or support a service, such as hostnames, server IP addresses, operating-system selections, configuration choices, and, where you provide them for a service, access credentials.
  • Support ticket information — the messages, attachments, and context you share when you contact our support team.
  • Technical and log information — IP address, browser and device information, access and event logs, and similar diagnostic data generated when you use the website or our services.
  • Cookies and analytics — information collected through cookies and similar technologies as described in Section 8.

4. How we use information

We use the information we collect to operate our business and provide the services you request, including to:

  • create and administer your account;
  • deliver, configure, maintain, and support your hosting, domain, and server services;
  • process billing, invoices, payments, and renewals;
  • provide customer support and respond to your enquiries;
  • protect our customers, our infrastructure, and the public by detecting and preventing abuse, fraud, and security incidents;
  • register and manage domains and meet registrar, registry, and ICANN-related requirements;
  • send you service and transactional notifications (for example invoices, renewal reminders, and security alerts);
  • comply with our legal and regulatory obligations; and
  • send optional marketing communications where you have chosen to receive them (see Section 14).

5. Payment information

Payments are processed by third-party payment processors and gateways. When you pay, your card or account details are submitted to and handled by those processors under their own security and compliance programmes. YallowHost does not store full payment card numbers. We retain billing records such as invoices, amounts, dates, and payment status so we can manage your account and meet our legal obligations.

6. Domain registration data

Registering or managing a domain requires us to share registrant and contact information with the relevant domain registrars, registries, and associated systems, as required by their policies and by ICANN. Some of this information may be subject to public directory (WHOIS/RDAP) requirements, privacy or proxy services where available, and registry data-escrow obligations. You are responsible for keeping your domain contact information accurate and current.

7. Hosting and server data

The content, applications, databases, and files you store on our infrastructure ("customer content") remain your responsibility, and you are responsible for their legality, backups, and compliance with applicable law. To operate the platform reliably and safely, we process service and log data for purposes such as security and abuse prevention, diagnostics, capacity planning, and service reliability. Where you provide access credentials for a service, they are encrypted at rest, access is restricted to authorised personnel, and credential reveal or deletion by staff is recorded.

8. Cookies and similar technologies

We use cookies and similar technologies that are necessary for the website and account area to function (for example session, security, and preference cookies) and, where applicable, to understand how the site is used so we can improve it. You can control non-essential cookies through your browser settings or any cookie controls we provide. Disabling essential cookies may affect how the site works.

9. Sharing information

We do not sell your personal information. We share information only as needed to provide our services and operate our business, including with:

  • Service providers who support our operations (for example email delivery and communication tools) under appropriate confidentiality obligations;
  • Payment processors to take and reconcile payments;
  • Domain registrars and registries as required to register and manage domains;
  • Hosting and infrastructure providers that supply the underlying compute, network, and data-centre capacity for our services;
  • Authorities and others where we are required to respond to a lawful legal or regulatory request, or to enforce our terms; and
  • Security and abuse investigators where necessary to investigate, prevent, or address fraud, abuse, or threats to the safety of any person or system.

10. Data retention

We keep personal information for as long as your account is active and for any further period required to provide our services, comply with our legal, tax, and regulatory obligations, resolve disputes, and enforce our agreements. Access credentials provided for a service are kept only for as long as needed to perform and support that service, and you may ask us to delete them once the work is complete.

11. Security

We use technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration, and loss — including encryption of sensitive credentials at rest, restricted and logged staff access, and security controls across our platform. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, and you are responsible for keeping your account credentials confidential and enabling available security features.

12. International data transfers

We and our providers may process and store information in countries other than the one in which you reside, including where our infrastructure, registrars, registries, or processors are located. Where information is transferred internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

13. Customer rights and choices

Subject to applicable law, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to request a copy of your information, and to withdraw consent where processing is based on consent. You can manage much of your information directly in your account, or contact us using the details in Section 17. We will respond in accordance with applicable law.

14. Marketing communications

We may send you optional marketing communications about products, features, and offers where you have agreed to receive them or where otherwise permitted by law. You can opt out at any time using the unsubscribe link in those messages or by contacting us. Opting out of marketing does not affect service, billing, and security notifications, which are necessary to provide your services.

15. Children's privacy

Our services are intended for businesses and individuals who can enter into a binding contract and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the date shown on this page and, where appropriate, provide additional notice. Your continued use of our services after an update means you accept the revised policy.

17. Contact YallowHost

If you have questions about this policy or how we handle your information, contact us at info@yallowhost.com, write to us at 30 N. Gould St, Sheridan, WY 82801, United States, or reach our team through our contact page.

Questions about this document?

Our team is happy to clarify anything here — we read every message.

Contact us