The short version
We collect only what we need to sell you hosting, bill you and support you. We do not sell your data or share it for advertising. Your account is hosted in Malaysia unless you choose Singapore when ordering, in which case your data is stored outside Malaysia. You can ask to see it, correct it, take it elsewhere or have it deleted.
1. Who is responsible for your data
TechXMobile Solutions 202403158880 (JM1008107-K), trading as PaduHost, is the data user responsible for the personal data described here.
- AddressSelangor, Malaysia
- Privacy contactprivacy@paduhost.com
If your hosting account was created for you by one of our resellers, the reseller is responsible for your personal data and you should read their privacy notice. We store and process the data in that account only on the reseller's behalf, to provide the service.
2. What we collect
| Category | Examples | Why we hold it |
|---|---|---|
| Account data | Name, business name, email, telephone, postal address | To open and operate your account, and to contact you about your service |
| Billing data | Invoices, payment records, billing address, last four digits of a card | To take payment, issue receipts and meet tax record-keeping obligations |
| Technical data | IP addresses, server and access logs, control panel activity | To run the service, investigate faults and detect abuse |
| Support data | Tickets, emails and any information you send us while getting help | To resolve your issue and keep a record of what was done |
| Website data | Cookies and basic analytics on this website | To keep the site working and understand which pages are useful |
We do not deliberately collect sensitive personal data as defined by the Act. Please do not send us health, political, religious or similar information in a support ticket.
3. Payment card details
We do not store full payment card numbers. Card payments are processed by our payment provider, who is responsible for that data under its own privacy notice. We receive only a token and the last four digits so you can identify the card you used.
4. Why we may process your data
We rely on one or more of the following, depending on the activity:
- Performance of a contract - to provide the hosting you ordered and take payment.
- Legal obligation - to keep accounting records and respond to lawful requests.
- Legitimate interest - to secure our network, prevent fraud and abuse, and improve our service.
- Consent - for optional marketing email and for non-essential cookies. You may withdraw consent at any time.
5. Marketing
We send service messages, invoices, renewal reminders and security notices to all clients. These are part of the contract and cannot be opted out of while you hold an account. Marketing email about new plans or offers is sent only with your consent, and every such message contains an unsubscribe link.
6. Who we share data with
We disclose personal data only to the following, and only as far as necessary:
| Recipient | Purpose |
|---|---|
| Data centre and infrastructure providers (Malaysia, and Singapore where selected) | Hosting the servers your account runs on |
| Billing platform provider | Operating our client area, invoicing and support ticketing |
| Payment provider | Processing card payments |
| Analytics provider (Google Analytics) | Measuring how visitors use this website, only with your consent |
| Domain registrar and registry | Registering and renewing domain names you order |
| SSL certificate authority | Issuing certificates for your domains |
| Professional advisers and authorities | Where required by law, or to establish or defend legal claims |
We do not sell personal data, and we do not share it with advertising networks or data brokers.
7. Transfers outside Malaysia
Accounts are hosted in Malaysia by default. If you choose our Singapore location when ordering, your account data, your website data and the data of your own site visitors are stored and processed in Singapore. Some of our suppliers, such as our billing platform and certificate authority, may also process data in other countries.
We make these transfers on the basis that the receiving jurisdiction provides protection substantially similar to the Act, or under contractual terms which oblige the recipient to protect the data to an equivalent standard. By placing an order you acknowledge that, where your account is hosted in Singapore or a supplier processes your data abroad, your data is transferred and stored outside Malaysia on this basis. If you require your website data to remain in Malaysia, keep the default Malaysia location when ordering.
8. How long we keep it
| Data | Retention |
|---|---|
| Account and billing records | Seven years after the account closes, to meet tax and accounting requirements |
| Website and account content | Deleted when the account is terminated, unless we are required to retain it |
| Backups | Overwritten on the backup cycle for the plan (30 days, or 7 days on budget hosting) and not restored once an account is terminated |
| Server and access logs | Up to 12 months |
| Support tickets | Three years after closure |
9. Security
We use encryption in transit for the client area and control panel, restrict administrative access to those who need it, apply operating system and application patches, and monitor for intrusion and abuse. No system is perfectly secure, and we cannot guarantee that a determined attack will never succeed.
10. Data breaches
If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable and in any event within 72 hours of the breach. Where the breach is likely to cause significant harm, we will also notify affected individuals without unnecessary delay and in any event within seven days of notifying the Commissioner.
11. Your rights
Under the Act you may:
- Access the personal data we hold about you;
- Correct data that is inaccurate, incomplete or out of date;
- Withdraw consent where processing is based on consent;
- Limit processing for direct marketing purposes;
- Request portability of your data to another provider, where technically feasible and the formats are compatible;
- Request deletion, subject to records we must keep by law.
To exercise any of these, email privacy@paduhost.com from the address on your account. We will respond within 21 days. We may ask you to verify your identity first. There is no charge, unless a request is manifestly excessive or repetitive.
12. Complaints
If you are unhappy with how we have handled your data, please tell us first at privacy@paduhost.com so we can put it right. You also have the right to complain to the Personal Data Protection Commissioner, Department of Personal Data Protection Malaysia (JPDP).
13. Children
Our services are not directed at children. We do not knowingly open accounts for anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
14. Cookies
This website uses cookies. What each one does and how to control them is set out in our Cookie Policy.
15. Changes to this notice
We may update this notice. The date at the top shows when it last changed. Where a change materially affects how we use your data, we will email you before it takes effect.
Questions about this document
Write to admin@paduhost.com or by post to TechXMobile Solutions, Selangor, Malaysia. We aim to respond to all written enquiries within five working days.