Privacy Policy

Last updated: January 2026 · Pueblo Hosting LLC · vertigohost.com

At Pueblo Hosting LLC ("VertigoHost", "we", "us"), headquartered in the United States, we are committed to protecting your privacy. This Privacy Policy describes what personal information we collect, how we use and disclose it, and what rights you have regarding it. This policy applies to all visitors, customers, and users of vertigohost.com and associated Services.

By using our website or purchasing our Services, you accept the practices described in this Privacy Policy. If you do not agree, please do not use our Services.

1. Information we collect

We collect information you provide directly to us, information collected automatically, and in certain cases, information from third parties.

Account data: full name, email address, encrypted password, billing address, and, if applicable, contact phone number.
Payment data: payments are processed entirely through our third-party provider (Stripe, Inc.). We do not store credit or debit card numbers in our systems. We may retain the last four digits of the card and expiration date for identification purposes.
Usage and technical data: IP address, browser type and version, operating system, pages visited, referring URL, access date and time, and service performance data.
Domain data: WHOIS registration information associated with domains managed through our Services.
Communications: the content of messages you send us via the ticket system, live chat, or support email.
Cookies and similar technologies: see our Cookie Policy for full details.

2. How we use your information

We use the information collected for the following purposes:

To create and manage your customer account.
To provide, maintain, and improve the contracted Services.
To process payments and manage billing, including automatic renewals.
To send you service notifications, technical alerts, invoices, and renewal notices.
To respond to your inquiries and technical support requests.
To detect, investigate, and prevent fraudulent, abusive, or illegal activities.
To comply with legal, regulatory, or judicial obligations.
To improve the security and performance of our network and infrastructure.
To send you marketing communications about our own products and services, where you have given consent or where permitted by applicable law.

We do not use your data for automated profiling that produces significant legal effects on you.

3. Legal basis for processing

As a US-based company, data processing is primarily governed by applicable US federal and state law, including the California Consumer Privacy Act (CCPA/CPRA) and other applicable state privacy laws. For users located in the European Economic Area (EEA) or the United Kingdom, we recognize the following legal bases under GDPR/UK GDPR:

Performance of a contract: processing is necessary to provide you with the requested Services.
Legal obligation: when we must comply with an applicable legal requirement.
Legitimate interests: for fraud prevention, network security, and service improvement, where these do not override your fundamental rights and interests.
Consent: for marketing communications or non-essential cookies, where required by law.

4. Data sharing and disclosure

We do not sell, rent, or trade your personal information to third parties. We may share data in the following circumstances:

Service providers: companies that help us operate our business (payment processors such as Stripe, server infrastructure providers, technical support systems), all based in or operating under US data processing agreements and subject to confidentiality obligations.
Domain registries and ICANN: domain registration information (name, address, email, phone) may be transmitted to the relevant top-level domain registry and published in the WHOIS database in accordance with ICANN policies.
Legal compliance: we may disclose information when required by subpoena, court order, governmental authority request, or when necessary to protect our legal rights or the safety of our users.
Business transfers: in the event of a merger, acquisition, reorganization, or asset sale, your information may be transferred to the successor entity, with prior notice to affected users.

5. Data storage and international transfers

Pueblo Hosting LLC is a company registered and headquartered in the State of New Mexico, United States. All our servers and data storage systems are located within the United States of America.

If you access our Services from outside the US (including from the European Union, the United Kingdom, or other countries), your information will be transferred to, stored, and processed in the United States. US privacy laws may differ from those of your country of residence. By using our Services, you consent to this transfer.

For users in the EEA or the United Kingdom, we are committed to implementing appropriate safeguards for such transfers, which may include Standard Contractual Clauses approved by the European Commission or other valid transfer mechanisms under GDPR.

6. Data retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, or reporting obligations. The criteria used to determine retention periods include:

The duration of your contractual relationship with us.
Applicable legal retention obligations (e.g., tax and accounting records, which under US law may require retention for up to 7 years).
The need to retain records to resolve disputes or enforce our agreements.

Upon cancellation or termination of your account, hosting data (files, databases, emails) is permanently deleted from our production systems. Billing and account records may be retained for the legally required period. You may request early deletion of your data by writing to privacy@vertigohost.com.

7. Your privacy rights

General rights (all users):

Access to the personal information we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal information, subject to legal retention obligations.
Object to the processing of your data for direct marketing purposes.
Withdraw your consent at any time, without affecting the lawfulness of prior processing.

Additional rights for California residents (CCPA/CPRA):

Right to know what categories of personal information we have collected about you and for what purposes.
Right to know whether we have sold or disclosed your personal information and to whom (we do not sell personal information).
Right to request deletion of your personal information.
Right to non-discrimination for exercising your privacy rights.
Right to correct inaccurate personal information.
Right to limit the use of sensitive personal information.

California residents may exercise these rights by submitting a verifiable request to privacy@vertigohost.com. We will respond within 45 days, extendable by an additional 45 days if necessary.

Additional rights for EEA and UK residents (GDPR/UK GDPR):

Right to data portability in a structured, commonly used format.
Right to restriction of processing in certain circumstances.
Right not to be subject to automated decision-making with significant legal effects.
Right to lodge a complaint with the data protection supervisory authority in your country.

To exercise any of these rights, contact us at privacy@vertigohost.com. We may request identity verification before processing your request.

8. Children's privacy

Our Services are intended exclusively for individuals 18 years of age or older. We do not knowingly collect personal information from children under 13 in accordance with the Children's Online Privacy Protection Act (COPPA). If you become aware that a child has provided personal information without parental consent, please contact us at privacy@vertigohost.com so we can delete it promptly.

9. Security

We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or disclosure, including:

TLS/SSL encryption for all communications between your browser and our servers.
Password storage using salted hashing — never in plain text.
Restricted access to personal data based on the principle of least privilege.
Data centers located in the US with ISO 27001 certification and PCI DSS compliance.
Regular security reviews and incident response procedures.

No security system is infallible. In the event of a security breach affecting your data, we will notify you in accordance with the timeframes established by applicable law.

10. Cookies and tracking technologies

We use cookies and similar technologies (tracking pixels, local storage) to improve site functionality, analyze traffic, and personalize your experience. Please see our Cookie Policy for detailed information on the types of cookies we use, their purpose, and how to manage or disable them.

11. Marketing communications

With your consent, or where permitted by applicable law for existing customers, we may send you communications about new products, special offers, or information we believe may interest you. You may unsubscribe from these communications at any time by clicking the "unsubscribe" link included in each email, or by writing to privacy@vertigohost.com. Essential service communications (invoices, security alerts, account notifications) cannot be disabled while you remain a customer.

12. Governing law and jurisdiction

This Privacy Policy is governed by the laws of the State of New Mexico and the federal laws of the United States of America. Any dispute relating to this policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Albuquerque, New Mexico, USA.

For users in the EEA, we acknowledge the applicability of the General Data Protection Regulation (GDPR) and commit to complying with its requirements to the extent applicable to our operations.

13. Changes to this policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by posting the new version on this page with a revised effective date, and we will send a notice to the email address registered to your account at least 14 days before the changes take effect. Your continued use of the Services after the changes become effective constitutes your acceptance of the updated policy.

14. Contact and data controller

The data controller is:

Pueblo Hosting LLC

Privacy email: privacy@vertigohost.com
General legal: legal@vertigohost.com

We are committed to responding to all privacy inquiries within 30 days.