APNCloud respects the privacy of its customers, website visitors, account holders, resellers, business contacts, support users, and other individuals whose personal information we process. This Privacy Policy explains what information APNCloud collects, why we collect it, how we use and share it, how long we keep it, the choices and rights available to individuals, and the safeguards we use to protect personal information.
For purposes of this Privacy Policy, “APNCloud,” “we,” “us,” and “our” refer to APN CLOUD LTD, a company registered in the United Kingdom under Company No. 17284647, with a registered office at 82A James Carter Road, Mildenhall, England, IP28 7DE, United Kingdom. APNCloud may also operate through or receive operational support from its Bangladesh office and affiliated service operations. Where APNCloud determines the purposes and means of processing personal data, APNCloud acts as the data controller. In some hosting situations, particularly where a customer stores personal data belonging to its own users on APNCloud infrastructure, APNCloud may instead act as a data processor or service provider on the customer’s instructions.
This Privacy Policy applies to information collected through apncloud.com, account.apncloud.com, APNCloud order forms, the Client Area, support channels, billing systems, service portals, email communications, and other APNCloud-controlled interfaces that link to or reference this Policy. It also applies to information we receive from authorized payment processors, domain registrars, fraud-prevention providers, infrastructure providers, and other service partners when necessary to provide our services.
This Policy should be read together with our Terms of Service, Acceptable Use Policy, Refund Policy, Billing and Renewal Policy, Service Level Agreement, Domain Registration Policy, Cookie Policy, and any other service-specific terms that apply to a product or transaction.
1. Information We Collect
We collect information that is reasonably necessary to operate a hosting and cloud-services business, create and manage customer accounts, process orders, provide technical support, secure our systems, meet legal obligations, and improve our services. The information collected depends on how you interact with APNCloud and which services you use.
1.1 Account and Identity Information
When you create an APNCloud account, place an order, contact sales, or request certain services, we may collect information such as your full name, username, email address, telephone number, billing address, country, company name, job title, company registration information, tax information where applicable, and other details you choose to provide.
For business customers, resellers, higher-risk orders, unusual payment activity, domain-related transactions, or circumstances involving fraud or abuse concerns, we may request additional verification information where reasonably necessary. Depending on the situation, this may include evidence of business ownership, proof of payment authorization, proof of domain ownership, or identification information. We do not seek sensitive verification data without a legitimate reason, and we aim to request only the information reasonably required for the relevant purpose.
1.2 Order, Service, and Billing Information
We collect information about the products and services you purchase or use, including service type, plan, domain name, server location, billing cycle, currency, invoice history, transaction status, renewal status, service start and end dates, discounts, credits, refunds, account balance, and support history related to the service.
When you make a payment, APNCloud may receive limited payment-related information such as the payment method type, payment provider, transaction identifier, payment status, card brand, masked card details, billing country, payer name, or risk result. We generally do not need to store complete payment-card numbers or card security codes when payments are processed by third-party payment providers.
1.3 Payment Provider Information
APNCloud may make one or more third-party payment methods available depending on country, currency, customer eligibility, transaction type, provider availability, and risk requirements. These providers may include card processors and payment services such as Stripe, PayPal, Skrill, Wise, Paddle, bank-transfer providers, or other authorized processors.
When you choose a third-party payment method, that provider may collect and process information directly under its own privacy notice and terms. APNCloud may receive confirmation of the transaction, payer information, fraud or verification results, dispute information, refund status, subscription identifiers, and other data necessary to reconcile your payment and provide the purchased service.
Where Paddle is used as Merchant of Record for an eligible transaction, Paddle may handle aspects of the payment, tax, invoicing, refund, and transaction relationship in accordance with Paddle’s own legal terms and privacy practices. The availability of Paddle or any other named provider is not guaranteed and may change over time.
1.4 Domain Registration Information
If you register, transfer, renew, or manage a domain through APNCloud, we may collect information required by the relevant registrar, registry, ICANN-related process, or country-code registry rules. This may include registrant name, organization, postal address, telephone number, email address, technical contact details, administrative contact information, and verification records.
Some domain information may be transmitted to registrars, registries, escrow providers, verification services, or other entities that are necessary to register and administer the domain. Depending on the domain extension and applicable rules, certain registration information may be published or disclosed through domain-registration data services unless privacy or proxy protection applies.
1.5 Technical and Device Information
When you visit or use APNCloud websites and systems, we may automatically collect technical information such as your IP address, browser type, operating system, device type, language, referring URL, pages viewed, timestamps, session information, login records, user-agent data, approximate location derived from IP address, and similar diagnostic information.
We may also collect security and network information such as failed login attempts, authentication events, API access logs, firewall events, abuse signals, server connection details, and other technical records needed to protect APNCloud, our customers, and our infrastructure.
1.6 Hosting, Server, and Service Logs
The operation of hosting, VPS, dedicated server, email, DNS, control-panel, and related services may generate service logs. Depending on the service and configuration, logs may include IP addresses, timestamps, domain names, requested URLs, mail-server events, authentication attempts, error messages, resource usage, network connections, security events, DNS queries, or other operational metadata.
Customers may also create, upload, or store content through their hosting services. In many cases APNCloud processes that content on behalf of the customer and does not determine the content’s purpose. Customers are responsible for ensuring they have a lawful basis for personal data they store or process through their APNCloud services.
1.7 Support and Communications
When you contact APNCloud by support ticket, email, contact form, chat, sales inquiry, abuse report, or other communication channel, we collect the information you provide. This may include your contact details, message content, attachments, screenshots, diagnostic information, service details, and records of our response.
We may retain support communications to resolve issues, maintain an account history, train staff, prevent abuse, improve service quality, and establish a record of instructions or decisions relating to an account.
1.8 Marketing and Preference Information
Where permitted by law, we may collect your communication preferences, newsletter subscription status, promotion preferences, and records of whether marketing messages were sent, delivered, opened, or interacted with. You can opt out of marketing communications at any time using the unsubscribe method provided or by contacting us. Service, security, billing, and legal notices are not marketing and may still be sent when necessary.
1.9 Cookies and Similar Technologies
APNCloud uses cookies and similar technologies to keep users signed in, remember preferences, maintain shopping carts, provide account functionality, protect against fraud, measure website performance, understand how visitors use our website, and improve user experience.
Some cookies are strictly necessary for the website or Client Area to operate. Others may be used for analytics, preferences, or marketing depending on the configuration and applicable law. More information, including available choices, is provided in our Cookie Policy and any cookie-consent interface displayed on our website.
2. How We Obtain Personal Information
We obtain personal information directly from you when you register, purchase a service, contact us, submit a ticket, complete a form, register a domain, request a refund, or otherwise communicate with APNCloud.
We also obtain information automatically when you use our websites, Client Area, network, hosting systems, or security systems. This information is generated through normal technical operations, including web-server logs, access logs, cookies, monitoring tools, authentication systems, and billing systems.
In addition, we may receive information from third parties where necessary, including payment processors, fraud-prevention providers, domain registrars and registries, data-center providers, software vendors, support providers, identity-verification providers, resellers, referral partners, or public sources. We only use third-party information for legitimate business, security, legal, or service-delivery purposes.
3. How We Use Personal Information
We use personal information for the following purposes.
3.1 Providing and Managing Services
We use information to create accounts, process orders, activate services, manage renewals, configure hosting, register domains, issue invoices, manage subscriptions, provide control-panel access, deliver purchased products, process migrations, and maintain customer records.
3.2 Billing, Payments, and Refunds
We use account, transaction, and billing information to issue invoices, collect payments, reconcile transactions, apply account credits, process refunds, manage recurring billing, verify payment ownership, and respond to payment disputes or chargebacks.
Approved refunds are generally returned to the original payment method where technically and legally possible. We may keep records relating to refunds, chargebacks, and payment disputes to comply with accounting requirements, protect against fraud, and establish the history of a transaction.
3.3 Customer Support
We use your information to answer questions, troubleshoot technical problems, respond to service requests, recover account access, investigate outages, assist with migrations, address billing questions, and resolve complaints.
Where necessary to solve a technical problem, authorized personnel may access service configurations, logs, files, databases, or account settings. Access is limited to what is reasonably required for the support or security purpose.
3.4 Security, Fraud Prevention, and Abuse Management
We process information to protect APNCloud systems, customers, payment providers, and third parties from fraud, abuse, malware, phishing, spam, unauthorized access, credential theft, attacks, and other harmful activity.
This may involve analyzing IP addresses, login history, order patterns, payment-risk signals, account behavior, network logs, complaint records, and other indicators. We may temporarily restrict, suspend, or review an account where reasonably necessary to investigate a security event or protect systems while a concern is resolved.
3.5 Legal and Regulatory Compliance
We may process and retain information where necessary to meet tax, accounting, corporate, consumer-protection, law-enforcement, sanctions, anti-fraud, domain-registration, data-protection, or other legal obligations.
We may also process information to establish, exercise, or defend legal claims, enforce our Terms of Service, respond to lawful requests, investigate prohibited activity, protect rights and property, or document consent and contractual agreements.
3.6 Service Improvement and Analytics
We use aggregated or individual usage information to understand how our websites and services perform, identify technical problems, improve page design, develop features, plan infrastructure capacity, evaluate product demand, and improve customer support.
Where feasible, we use aggregated, de-identified, or limited data for analytics rather than information that directly identifies a person.
3.7 Communications
We use customer contact information to send service activation notices, password or security notices, invoices, renewal reminders, suspension warnings, maintenance notices, abuse notifications, domain notices, support responses, policy updates, and other transactional communications.
Where permitted, we may also send newsletters, product updates, special offers, or promotional information. You can opt out of promotional messages without affecting essential service communications.
4. Legal Bases for Processing
Where the UK General Data Protection Regulation (“UK GDPR”) or a similar legal framework applies, APNCloud relies on one or more lawful bases depending on the processing activity.
We process information when it is necessary to perform a contract with you or take steps at your request before entering into a contract. Examples include creating an account, processing an order, providing hosting, registering a domain, delivering support, and handling billing.
We process certain information to comply with legal obligations, including accounting, tax, corporate-record, lawful-request, and regulatory requirements.
We may rely on legitimate interests where processing is reasonably necessary for purposes such as network security, fraud prevention, abuse handling, service improvement, account administration, business continuity, debt recovery, and defending legal claims, provided those interests are not overridden by your rights and freedoms.
Where required, we rely on consent for optional marketing, non-essential cookies, or other activities for which consent is the appropriate lawful basis. You may withdraw consent at any time, although withdrawal does not affect processing that was lawful before withdrawal.
5. When We Share Personal Information
APNCloud does not sell personal information to advertisers. We share personal information only where reasonably necessary for service delivery, business operations, legal compliance, security, or another legitimate purpose described in this Policy.
5.1 Payment Processors
We may share transaction, billing, identity, device, risk, or order information with payment processors such as Stripe, PayPal, Skrill, Wise, Paddle, banks, card networks, acquiring institutions, or other payment partners when needed to process a payment, verify a payer, prevent fraud, manage subscriptions, issue refunds, or resolve disputes.
Payment providers may independently determine how they process personal information for their own compliance, risk, tax, or legal obligations. Their privacy notices apply to that independent processing.
5.2 Domain Registrars and Registries
Where you purchase a domain-related service, we share required registration data with the registrar, registry, escrow agent, verification provider, privacy/proxy service, or other domain-service provider necessary to complete and maintain the registration.
5.3 Infrastructure and Technology Providers
We may use data centers, network providers, cloud providers, backup providers, email-delivery providers, control-panel vendors, software licensors, monitoring services, customer-support systems, analytics tools, security providers, and other technology suppliers. These providers may process limited personal information to perform services for APNCloud.
We seek to use reputable providers and, where required, put appropriate contractual, confidentiality, security, or data-protection arrangements in place.
5.4 Professional Advisers
We may disclose information to lawyers, accountants, auditors, insurers, consultants, debt-recovery providers, or other professional advisers where reasonably necessary for legitimate business, legal, tax, or compliance purposes.
5.5 Legal Requests and Protection of Rights
We may disclose information when required by law, court order, valid legal process, regulatory requirement, or a lawful request from an authorized public authority.
We may also disclose information where reasonably necessary to investigate fraud, prevent imminent harm, protect APNCloud systems, protect customers or third parties, enforce our agreements, or defend legal rights. We review requests where reasonably possible and seek to disclose only information relevant to the request.
5.6 Business Transfers
If APNCloud is involved in a merger, acquisition, financing, restructuring, sale of assets, or transfer of part or all of the business, personal information may be disclosed to relevant parties subject to appropriate confidentiality and legal safeguards. If responsibility for your personal information changes materially, we will provide notice where required by law.
6. International Data Transfers
APNCloud may serve customers and use service providers in more than one country. As a result, personal information may be processed in the United Kingdom, Bangladesh, the country in which a service or server is located, the country of a payment provider, or another jurisdiction in which an authorized provider operates.
Data-protection laws differ between countries. Where the UK GDPR applies and personal data is transferred to a country that is not covered by an applicable adequacy regulation, APNCloud will use a lawful transfer mechanism where required, such as appropriate contractual safeguards, an approved transfer addendum, or another mechanism permitted by applicable law.
The location of hosting content may depend on the server location selected by the customer. Customers that use APNCloud to process personal information belonging to their own users are responsible for assessing whether their chosen service location and transfer arrangements meet their own legal obligations.
7. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business and accounting records, resolving disputes, enforcing agreements, responding to security incidents, and meeting legal requirements.
Retention periods vary by category. Active account information is generally retained while the account or service remains active. Billing, invoice, payment, tax, and accounting records may be retained for the period required by applicable financial and legal rules. Support tickets and service history may be retained for a reasonable period to maintain continuity, resolve recurring problems, and establish a record of customer instructions.
Security logs, access logs, fraud records, and network logs may be retained for shorter or longer periods depending on operational needs, threat investigations, legal requirements, and storage capacity. Backups may contain copies of information for a limited retention period even after information has been deleted from active systems.
When personal information is no longer required, we aim to delete it, anonymize it, or securely dispose of it. Information may be retained for longer where necessary for litigation, fraud prevention, unresolved disputes, legal holds, abuse investigations, chargebacks, or lawful requests.
8. Hosting Content and APNCloud as a Processor
Customers may use APNCloud hosting, reseller, VPS, dedicated server, email, database, or other services to store and process personal information relating to their own employees, clients, website visitors, subscribers, users, or other individuals.
In those circumstances, the customer normally determines why and how the personal information is processed and therefore acts as the controller or business, while APNCloud may act as a processor or service provider.
Customers are responsible for providing required privacy notices, obtaining required consents, establishing a lawful basis, responding to their own users’ rights requests, configuring their applications securely, and complying with applicable privacy laws.
APNCloud will process customer-hosted personal information as necessary to provide, secure, maintain, support, or troubleshoot the service, and in accordance with applicable contractual terms and lawful instructions. Where legally required for a customer’s processing activities, the parties may enter into a separate Data Processing Agreement.
9. Security of Personal Information
APNCloud uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction. Measures may include account authentication, access controls, transport encryption, network protections, logging, backups, staff access restrictions, server hardening, monitoring, and security procedures appropriate to the systems involved.
No internet service, transmission method, or storage system can be guaranteed to be completely secure. Customers also have an important role in protecting information. Customers should use strong unique passwords, enable available security features, secure their email accounts, protect API credentials, keep applications updated, use properly licensed software, and restrict administrative access.
If you believe your APNCloud account or information has been compromised, contact APNCloud promptly at [email protected].
10. Data Breach Response
If APNCloud becomes aware of a personal-data breach affecting information for which APNCloud is responsible, we will assess the nature and likely consequences of the incident and take reasonable steps to contain, investigate, and remediate it.
Where required by applicable law, we will notify the relevant supervisory authority and affected individuals within the required timeframe. Where APNCloud acts as a processor for a customer, we will notify the customer as required by the applicable agreement and law so the customer can assess its own notification obligations.
11. Your Privacy Rights
Depending on your location and the law that applies, you may have rights concerning your personal information. These may include the right to request access to personal information, correct inaccurate information, request deletion, request restriction of processing, object to certain processing, receive certain information in a portable format, withdraw consent, and complain to a data-protection authority.
These rights are not absolute. For example, we may need to keep certain information to comply with law, establish or defend legal claims, prevent fraud, complete a transaction, maintain security, or continue a service you requested.
To make a privacy request, contact [email protected] and clearly state that your request concerns privacy or personal data. We may need to verify your identity before completing a request. We will not ask for more verification information than reasonably necessary.
If APNCloud is processing personal information solely on behalf of one of our hosting customers, we may direct you to that customer because the customer controls the relevant information and is responsible for responding to the request.
12. UK and EEA Privacy Information
Where the UK GDPR applies, individuals may have the rights described above and may also lodge a complaint with the UK Information Commissioner’s Office or another competent supervisory authority.
If you are located in the European Economic Area and APNCloud processing is subject to EU data-protection law, you may have equivalent rights under the EU General Data Protection Regulation and may contact the supervisory authority in your country.
We encourage individuals to contact APNCloud first where practical so we have an opportunity to understand and address the concern.
13. United States State Privacy Rights
Certain U.S. state privacy laws may provide eligible residents with rights such as access, correction, deletion, portability, and the right to opt out of certain forms of sale, sharing, targeted advertising, or profiling. These rights apply only where the relevant law covers APNCloud and the individual or processing activity meets the law’s requirements.
APNCloud does not sell personal information for money. If APNCloud uses advertising or analytics technologies that qualify as “sharing,” “targeted advertising,” or a similar regulated activity under an applicable law, we will provide required notices and choices through our Cookie Policy, consent interface, or other appropriate mechanism.
14. Marketing Communications
APNCloud may send marketing communications where permitted by law. These may include product announcements, hosting offers, domain promotions, service updates, newsletters, and related APNCloud information.
You can unsubscribe from promotional emails by using the unsubscribe link where provided or by contacting us. We will process opt-out requests within a reasonable period.
Even after opting out of marketing, you may continue to receive non-promotional communications necessary to operate your account, including invoices, renewal notices, password resets, security notices, support replies, abuse notifications, maintenance notices, and legal or policy updates.
15. Cookies, Analytics, and Online Choices
Cookies are small data files stored on or associated with your device. APNCloud may use session cookies to maintain authentication and shopping-cart functionality, persistent cookies to remember preferences, security cookies to help prevent abuse, and analytics cookies to understand website usage.
Where required by law, non-essential cookies will be used only after appropriate consent. You may be able to manage cookie preferences through our cookie banner or browser settings. Blocking certain necessary cookies may prevent the Client Area, checkout, login, or other website features from functioning correctly.
Third-party tools used for analytics, fraud prevention, security, embedded content, or payment processing may set their own cookies or similar technologies under their own policies.
16. Automated Processing and Fraud Screening
APNCloud may use automated tools or rules to help identify suspicious orders, payment risk, unusual login activity, abuse patterns, or other security concerns. These tools may consider information such as IP address, device indicators, order value, payment results, geographic inconsistencies, account history, and other risk signals.
An automated risk indicator may result in an order being held for manual review, additional verification being requested, or a transaction being declined by a payment provider.
Where applicable law gives you rights regarding a decision based solely on automated processing that produces legal or similarly significant effects, APNCloud will respect those rights. APNCloud does not intentionally use sensitive personal information to make discriminatory decisions.
17. Children’s Privacy
APNCloud services are designed for individuals and organizations that are legally able to enter into contracts for hosting and related services. APNCloud does not knowingly market hosting accounts or payment services to young children, and we do not knowingly collect personal information from children where parental or legal authorization is required.
If you believe a child has provided personal information to APNCloud in circumstances where it should not have been collected, contact [email protected]. We will review the matter and take appropriate action consistent with applicable law.
Customers that use APNCloud services to operate websites or applications directed to children are responsible for complying with applicable child-privacy laws and obtaining any required parental consent.
18. Third-Party Websites and Services
APNCloud websites may contain links to third-party websites, registrars, payment providers, software vendors, social networks, documentation, or other external services. APNCloud does not control the privacy practices of independent third parties.
When you leave an APNCloud-controlled website or choose to use a third-party service, you should review that provider’s privacy notice. This Privacy Policy does not apply to personal information processed independently by third parties.
19. Reseller Customers and End Users
Reseller Hosting customers may create hosting accounts for their own end users. In most cases, the reseller is independently responsible for its relationship with those end users, including customer notices, lawful processing, support, billing, and privacy compliance.
APNCloud may process limited information about a reseller’s end users where technically necessary to host, secure, support, or investigate the service. APNCloud does not use reseller end-user content for unrelated marketing.
Resellers must not instruct APNCloud to process personal information in a manner that violates applicable law or APNCloud policies.
20. Domain Registration Privacy
Domain registration is subject to unique disclosure and retention requirements. Even where a privacy or proxy service is available, registrars and registries may still receive underlying registrant information and may be required to disclose it in response to valid legal or policy-based requests.
APNCloud cannot guarantee that domain-registration information will remain private in every situation. Customers should review the privacy features and rules applicable to their chosen domain extension and registrar.
21. Changes to This Privacy Policy
APNCloud may update this Privacy Policy from time to time to reflect changes in law, technology, products, service providers, payment methods, business operations, or privacy practices.
When we make changes, we will update the “Last Updated” date. If a change is material, we may provide additional notice through the website, Client Area, email, or another appropriate channel where required.
Your continued use of APNCloud services after an updated Policy becomes effective is subject to applicable law and does not remove any rights that cannot legally be waived.
22. Contacting APNCloud About Privacy
Questions, requests, or concerns about this Privacy Policy or APNCloud’s handling of personal information may be sent to:
APN CLOUD LTD
Company No. 17284647
82A James Carter Road
Mildenhall, England, IP28 7DE
United Kingdom
Email: [email protected]
Website: https://apncloud.com/
Operational support may also be provided through APNCloud’s Bangladesh office:
Nextway IT Solutions
House #1647/01, Modina Masjid
Jahurul Nagar, Bogura - 5800
Bangladesh
When contacting us about privacy, please include enough information for us to identify the relevant account or issue, but do not send passwords, full payment-card details, or other unnecessary sensitive information by email.
23. Relationship With Other APNCloud Policies
This Privacy Policy explains how APNCloud handles personal information. It does not replace the commercial and service rules contained in the Terms of Service, Acceptable Use Policy, Refund Policy, Billing and Renewal Policy, Service Level Agreement, Domain Registration Policy, Cookie Policy, or other applicable terms.
Where APNCloud processes personal data as a processor on behalf of a business customer, a Data Processing Agreement or other written data-protection terms may supplement this Policy.
If a conflict arises between this Privacy Policy and a mandatory data-protection law, the applicable law will control to the extent of that conflict.
24. Account Closure and Deletion Requests
Closing an APNCloud service or customer account does not always result in immediate deletion of every record associated with that account. We may need to keep limited information after closure for billing, accounting, fraud prevention, chargeback defense, domain-registration obligations, security investigations, legal compliance, dispute resolution, and enforcement of our agreements.
Where a customer requests deletion and no overriding legal or legitimate retention need applies, APNCloud will take reasonable steps to remove or anonymize personal information from active business systems. Deletion from backups may occur according to normal backup rotation schedules rather than immediately, because selectively editing historical backups may be impractical or undermine their security and integrity.
A deletion request does not automatically require APNCloud to delete information that belongs to another person, information that must be retained by a domain registrar or payment provider, information that forms part of a legally required transaction record, or data that APNCloud processes solely on behalf of another customer. In those situations, we will explain the relevant limitation where appropriate.
25. Data Accuracy and Customer Responsibilities
APNCloud relies on customers to provide accurate account, billing, contact, and domain information. Customers should review their Client Area details periodically and update them when they change.
Incorrect information can affect service notices, domain renewals, security alerts, invoices, fraud checks, support verification, and account recovery. APNCloud may request confirmation of important account information when we have reason to believe it is inaccurate, outdated, or inconsistent with transaction records.
Customers should not place unnecessary sensitive information in support tickets, account notes, usernames, domain-contact fields, or other free-text areas. In particular, customers should never send passwords, card security codes, private keys, recovery phrases, or complete payment-card numbers through ordinary support messages unless an authorized secure process specifically requires the information.
26. Confidentiality and Staff Access
APNCloud limits access to personal information to personnel and authorized contractors who reasonably need that access to perform their duties, support customers, maintain systems, secure services, process transactions, or meet legal obligations.
Personnel with access to customer information are expected to follow confidentiality, security, and acceptable-use requirements appropriate to their role. Administrative access to production systems should be limited and monitored where reasonably practical.
Support access to customer-hosted data is not intended to be routine. It may occur when a customer requests assistance, when access is required to diagnose a technical fault, when APNCloud must respond to an abuse or security incident, or when access is otherwise authorized or legally required. We aim to limit such access to the information necessary for the task.
27. Privacy by Design and Service Development
When introducing new products, integrations, payment methods, account features, analytics tools, or operational systems, APNCloud aims to consider privacy and security as part of the design process.
This may include reviewing what information is necessary, limiting collection, reducing unnecessary retention, selecting appropriate service providers, applying access controls, and considering whether a privacy notice, consent mechanism, contractual term, or data-processing arrangement is required.
Where a proposed activity is likely to create a high risk to individuals under applicable data-protection law, APNCloud may conduct an appropriate privacy or risk assessment before implementation.
28. Supervisory Authorities and Complaints
Individuals whose personal information is subject to the UK GDPR may have the right to complain to the UK Information Commissioner’s Office. Individuals in other jurisdictions may have the right to complain to the data-protection or consumer-protection authority responsible for their location.
We encourage you to contact APNCloud before making a formal complaint where practical. Many privacy concerns can be resolved quickly if we understand the relevant account, transaction, or service.
Making a privacy complaint will not affect your right to receive services, except where the underlying issue means APNCloud cannot lawfully continue processing information that is necessary to provide the requested service.
— End of Privacy Policy —