Privacy Policy

1. About this Policy

This Privacy Policy describes how Technologia FZE ("Technologia", "we", "us", "our"), operating the Whostpress brand and the website whostpress.com (the "Service"), collects, uses, discloses, and protects your personal data. It applies to visitors of our website, registered account holders, and any individuals whose personal data we process while providing our services.

We are committed to handling personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and, where applicable, the EU General Data Protection Regulation 2016/679 ("GDPR") and the UK Data Protection Act 2018.

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Technologia FZE (operating as Whostpress)
Sharjah Research, Technology and Innovation Park (SRTIP)
Sharjah, United Arab Emirates
Privacy enquiries: privacy@whostpress.com
General contact: info@mytechnologia.com

3. Personal Data We Collect

3.1 Account and identity data

When you register, we collect your full name, email address, telephone number, postal/billing address, country of residence, password (stored as a one-way hash), and, where applicable, your company name and tax/VAT identification number.

3.2 Payment data

Payments are processed by our payment service providers (see Section 6). We do not store full credit or debit card numbers, CVV codes, or bank account details on our servers. We retain a tokenised reference, the last four digits of the card, the card brand, and the expiry month/year solely to display your saved payment method and to process recurring billing you have authorised.

3.3 Service and customer data

In the course of providing hosting, domain registration, SSL, and related services we process: domain registration details (including WHOIS data submitted to registries), hosting account usernames, IP addresses assigned to your services, server access logs, files you upload to our infrastructure, and database backups. Customer content and end-user data hosted on our infrastructure remain your property and are processed by us as a processor on your behalf.

3.4 Communications

When you contact our support team via tickets, email, or live chat we retain the content of those communications, along with any attachments, for service-quality and audit purposes.

3.5 Technical, device, and usage data

When you visit whostpress.com or use our client area, we automatically collect your IP address, user-agent string, referrer, language preferences, the pages you view, timestamps, and device/browser characteristics. We also use cookies and similar technologies, described in Section 9.

4. How We Use Your Data and Lawful Bases

We process personal data for the following purposes and under the following lawful bases:

• To provide our services to you (performance of a contract / UAE PDPL Art. 4(1)(a)) — creating and managing your account, provisioning hosting, registering domains, taking payment, and providing technical support.
• To comply with legal obligations (legal obligation / UAE PDPL Art. 4(1)(c)) — maintaining accounting records, responding to lawful requests by competent authorities, complying with ICANN and registry rules for domain WHOIS, and anti-fraud and anti-money-laundering checks.
• To run, secure, and improve our service (legitimate interests / UAE PDPL Art. 4(1)(e)) — detecting abuse and fraud, defending against attacks, debugging, capacity planning, and internal reporting. We balance these interests against your rights and freedoms.
• To send service notices (performance of a contract) — billing notices, renewal reminders, security advisories, and scheduled-maintenance announcements.
• To send marketing communications (consent) — only where you have opted in. You can withdraw your consent at any time using the unsubscribe link in each email or by contacting us.

5. Who We Share Your Data With

We do not sell your personal data. We disclose personal data only to: our authorised employees and contractors on a need-to-know basis; the subprocessors listed in Section 6; domain registries and registrars to the extent required to register and operate your domains; competent authorities where required by law or to protect our or our customers' rights; and a successor entity in the event of merger, acquisition, or sale of all or part of our business (with prior notice to you).

6. Subprocessors

We engage the following subprocessors to deliver our service. Each is bound by a written data-processing agreement that imposes confidentiality, security, and (for international transfers) appropriate safeguards:

• Stripe Payments Europe Ltd. (Ireland) — credit and debit card processing. Privacy notice.
• PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) — PayPal and alternative payment processing. Privacy notice.
• Cloudflare, Inc. (United States) — content-delivery network, DDoS mitigation, and TLS termination for whostpress.com. Privacy notice.
• Twilio Inc. (SendGrid) (United States) — transactional email delivery for account, billing, and support emails. Privacy notice.
• Hetzner Online GmbH (Germany) — physical infrastructure and data centres on which our services are hosted. Privacy notice.

We update this list when we add or remove subprocessors. Material changes will be notified by posting an update to this page.

7. International Data Transfers

Some of our subprocessors are located outside the UAE and the EU/EEA. When we transfer personal data internationally, we rely on appropriate safeguards including: the European Commission's Standard Contractual Clauses (SCCs); the UK International Data Transfer Agreement (IDTA) or UK Addendum; and, where applicable, the subprocessor's certification under recognised cross-border data-transfer frameworks. A copy of the safeguards relied on for any specific transfer is available on request to privacy@whostpress.com.

8. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Account records: for the lifetime of your account plus seven (7) years after closure, to comply with UAE commercial record-keeping obligations.
• Hosting and service data: for the duration of the service plus thirty (30) days after termination (extendable on request for up to ninety (90) days to allow data export), after which all data is permanently deleted.
• Backups: rolling retention of up to thirty (30) days.
• Support tickets and communications: three (3) years from closure of the ticket.
• Access and security logs: ninety (90) days, except where retained longer to investigate or pursue a specific security incident.
• Marketing consent and unsubscribe records: for as long as required to demonstrate compliance.

9. Cookies and Similar Technologies

We use cookies for three purposes:

• Strictly necessary cookies — required to operate the website and client area (login sessions, CSRF protection, language preference, shopping cart). These cannot be disabled.
• Analytics cookies — to measure traffic and improve the site. These are set only with your consent.
• Marketing cookies — to measure the effectiveness of our advertising. Set only with consent.

You can manage cookies through your browser settings. Blocking strictly-necessary cookies may prevent parts of the site from functioning.

10. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — to request deletion of your personal data where there is no overriding legal basis to retain it.
• Right to restriction of processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to processing based on legitimate interests, and to direct marketing at any time.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — with the UAE Data Office (under the UAE PDPL) or, for EU/UK residents, with your local data-protection supervisory authority.

To exercise any of these rights, please contact privacy@whostpress.com. We will respond within thirty (30) days. We may need to verify your identity before processing your request.

11. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS 1.2+), encrypted storage of credentials, network segregation, access controls based on the principle of least privilege, regular security patching, intrusion detection, and staff training. No system is perfectly secure; we cannot guarantee absolute security but we work continuously to maintain a level of security appropriate to the risk.

12. Data-Breach Notification

In the event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and affected individuals without undue delay and in accordance with applicable law (within 72 hours where required by GDPR).

13. Children

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe we have collected personal data from a minor without verifiable parental consent, please contact us and we will delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date and, for material changes, notify you by email or via a prominent notice in the client area before the changes take effect.

15. Contact Us

For any privacy questions, requests, or complaints:

Technologia FZE (Whostpress)
SRTIP, Sharjah, United Arab Emirates
Privacy enquiries: privacy@whostpress.com
General contact: info@mytechnologia.com
Support: whostpress.com/supporttickets.php