Privacy Policy

Last updated: October 8, 2026

On this page

Introduction

At HostLelo, we understand the importance of protecting your privacy and securing your data. As a provider of web hosting and IT solutions, we are committed to maintaining the trust and confidence of our clients.

This Privacy Policy explains how we collect, use, and protect your personal and business information when you use our services, including web hosting, domain registration, SSL certificates, and related IT solutions.

Information we collect

Account information

  • Name and contact details (email, phone, address)
  • Business information (company name, registration number)
  • Login credentials and account preferences
  • Payment and billing information
  • Service selections and configurations

Technical data

  • Server logs and performance metrics
  • IP addresses and access timestamps
  • Bandwidth and resource usage statistics
  • Security logs and audit trails
  • Website analytics and visitor data
  • Backup and storage information

Service-specific data

  • Domain registration information
  • SSL certificate details
  • Server configurations and settings
  • Support ticket information
  • Custom service requests

How we use your information

Service provision

  • Hosting service setup and maintenance
  • Domain registration and management
  • SSL certificate provisioning and renewal
  • Technical support and troubleshooting
  • Performance monitoring and optimization
  • Security monitoring and threat prevention
  • Backup and recovery services

Business operations

  • Account management and billing
  • Service usage analysis and improvement
  • Customer support and communication
  • Product development and enhancement
  • Marketing and promotional activities (with consent)
  • Legal compliance and auditing

Plan finder, FAQ search and contact router

When you describe your project in the plan finder (the "What are you building?" box on the home page, or the finder above a product's prices), or tell the contact page what you need, the text you type is sent from our server to TypeSafe AI, which classifies it (for example, which kind of project it is, how many websites, whether you need email, how busy it will be and where your users are, or which support team fits). When you use "What do you want to know?" above a list of frequently asked questions, your question and that page's questions are sent the same way, and TypeSafe only picks which of our written answers to open; it never writes an answer. It never sets a price: prices always come from our billing system. If TypeSafe is unavailable, fixed rules read the same text on our server or in your browser instead. Before it is sent, we remove email and UPI addresses, phone numbers, web addresses, domain names, IP addresses, passwords written as "password: ..." or "password is ...", API keys and tokens, and long numbers such as order or card numbers. Software and file names that look like web addresses, such as Node.js, ASP.NET or index.php, are kept. A number followed by a word such as visitors, orders or GB is reduced to a rough size, so "148,000 visitors a month" is sent as "~150k visitors a month". We do not store what you type; we log only the outcome (for example, the plan shown) without your text. TypeSafe processes the request under its own terms.

Optional Google Analytics

With your permission, Google Analytics uses cookies to measure visits to this website. We send the hostname, page path, page title, referring website origin and validated campaign labels. We exclude other URL query parameters, fragments, search terms and form contents. Google Signals and advertising personalization are disabled for this measurement. We do not send a user ID. You can reject analytics or withdraw permission using Analytics preferences in the footer. Withdrawal stops further analytics collection and removes this stream's analytics cookies; it does not erase data already collected. This preference applies to Google Analytics on this browser and website, not the other services described in this policy.

Optional OpenAI Ads measurement

When OpenAI Ads measurement is enabled on this site, it is off until you allow it in OpenAI Ads preferences in the footer. This choice is separate from Google Analytics. With your permission, OpenAI receives page and hosting product views and successful newsletter signups to measure our advertising. After a successful signup, we send a SHA-256 hash of your email, normalized by trimming whitespace and converting it to lowercase, for conversion matching. We do not include raw email or other form text in our event calls. The Pixel SDK also processes browser and attribution context under OpenAI's measurement settings; any automatic advanced matching is controlled in our OpenAI Ads account.

OpenAI's Pixel uses the first-party cookies __oppref for advertising attribution (30 days after it is written) and __obref for a browser reference (365 days after it is created). Browser restrictions may shorten these lifetimes. Our event calls set an opt-out of future user-level personalization. You can reject or withdraw permission in the footer, which stops further measurement and clears these cookies on this site. Withdrawal does not erase data already collected. We also keep measurement off when your browser sends Global Privacy Control or Do Not Track.

Security measures

Infrastructure security

  • Advanced firewall protection and DDoS mitigation
  • Network monitoring and intrusion detection
  • Regular security audits and vulnerability assessments
  • Data encryption in transit and at rest
  • Secure data centers with physical security controls
  • Regular system updates and patch management

Data protection

  • Automated backup systems with secure storage
  • Role-based access control and authentication
  • Employee security training and compliance
  • Incident response and disaster recovery plans
  • Data retention and secure disposal procedures

Your rights

You have the following rights regarding your personal data:

  • Access your personal information
  • Request corrections to inaccurate data
  • Request deletion of your data (where applicable)
  • Object to data processing
  • Data portability
  • Withdraw consent
  • Lodge a complaint with supervisory authorities

International data transfers

Our services may involve transferring your data to servers located in different countries. We ensure appropriate safeguards are in place through:

  • Standard contractual clauses
  • Data processing agreements
  • Regional data center options

Contact us

Have questions? Our global team is here to help.

Data protection officer

For privacy-related inquiries and concerns

support@hostlelo.com

Updates to this policy

We regularly review and update this Privacy Policy to reflect changes in our practices and services. We will notify you of any material changes through:

  • Email notifications
  • Website announcements
  • Account dashboard notices

Continued use of our services after changes to this policy constitutes acceptance of the updated terms.