1. Information We Collect
To provide high-performance hosting services, we collect the following types of information:
-
Account Information: Name, email address, physical address, and phone number provided during signup.
-
Billing Information: Payment details and transaction history. Note that full credit card numbers are processed by our secure third-party payment gateways (e.g., Stripe, PayPal) and are not stored on our local servers.
-
Technical Data: IP addresses, browser types, and access logs. This is used solely for security monitoring, fraud prevention, and maintaining service uptime.
-
Service Content: Data, files, and emails stored on our servers by the Client.
2. How We Use Your Information
We use the collected data for the following "reasonable purposes" as defined by PIPA:
-
Service Delivery: Setting up your hosting environment and WHMCS client area.
-
Performance Maintenance: Monitoring server loads and security to ensure 99.9% uptime.
-
Communication: Sending technical alerts, invoice reminders, and critical service updates.
-
Compliance: Meeting legal, tax, and regulatory requirements.
3. Consent
By using Kasa Hosting, you provide meaningful consent to the collection and use of your data as described. You may withdraw consent at any time by closing your account; however, certain data (like invoices) must be retained for 7 years to comply with the Income Tax Act.
4. Data Disclosure & Third Parties
We do not sell or rent your data. We only share information with trusted third-party service providers necessary to run our business, such as:
-
Payment Processors: To handle billing.
-
Domain Registries: When you register a domain through us.
-
Legal Authorities: If required by law or a court order within the jurisdiction of Alberta.
5. Data Security & Residency
-
Safeguards: We use industry-standard encryption (SSL/TLS), firewalls, and strict access controls to prevent unauthorized access or data breaches.
-
Residency: While we strive to maintain data within Canadian borders, some service providers (like global domain registries) may process data internationally. We ensure these partners maintain equivalent privacy standards.
6. Mandatory Breach Notification
In the event of a security breach that poses a "real risk of significant harm" to our clients, Kasa Hosting will:
- Notify the Office of the Information and Privacy Commissioner in the region.
7. Your Rights
Under PIPA, you have the right to:
-
Access the personal information we hold about you.
-
Request corrections to inaccurate data.
-
Inquire about how your data is being used.
