Privacy Policy

Last Updated: September 20, 2026

Hosticky ("we", "our", "us"), operated by LiteLink Consultancy LLP, is committed to safeguarding your privacy. This Privacy Policy details how we collect, use, store, process, and protect your personal information when you visit our website (hosticky.com), register an account, purchase hosting services, or interact with our platform.

1. Scope of This Policy

This policy applies to all visitors, registered clients, and users of the Hosticky ecosystem. It covers information collected via our website, support desk, client area, and third-party integrations used to facilitate billing and hosting provisioning.

2. Information We Collect

We collect several types of information from and about our users, including:

A. Personal Identifiable Information (PII)

During account registration, ordering, or support inquiries, you provide us with:

• Full Name and Billing Address.
• Email Address and Telephone Number.
• Company Name and Tax Identification Numbers (where applicable).
• Account passwords (stored in securely hashed formats).

B. Technical and Usage Data

When you browse our website, we automatically log information through server logs and analytics, including:

• IP Addresses and Browser/Device characteristics.
• Operating System details.
• Referral URLs, pages visited, and time spent on our site.

C. Payment Information

All payment processing is handled securely by our integrated payment gateways (such as Cashfree/Stripe). Hosticky does not directly store, process, or have access to your full credit card numbers or banking passwords. We receive transaction status notifications, payment amounts, and masked transaction IDs to log billing records.

3. How We Use Your Information

We process your data strictly to fulfill our contractual and legal obligations. Specific uses include:

• Service Provisioning: Setting up your shared, cloud, or VPS hosting accounts, managing domains, and routing licenses.
• Billing & Account Management: Invoicing, processing payments, tracking renewals, and managing support tickets.
• Security & Fraud Prevention: Checking IP addresses against fraud databases during checkout, preventing network attacks, and securing our infrastructure.
• Communications: Sending critical system alerts, maintenance schedules, renewal notices, and occasional promotional updates (which you can opt out of at any time).

4. Cookies and Tracking Technologies

We use cookies to maintain your active session in our billing portal and to analyze visitor traffic. You can control cookies through your browser settings; however, disabling them may limit your ability to log in to our client area or proceed with checkout.

5. Data Retention and Deletion

We retain your personal data for as long as your account remains active. If you cancel your hosting services, we retain core billing records to comply with accounting, tax, and corporate governance laws. Once the legal retention period expires, your data is permanently deleted. Any files, databases, or content hosted on our servers are permanently destroyed immediately upon account termination.

6. Security Measures

We employ robust technical and organizational security measures to protect your data. All communication between your browser and our servers is encrypted using Let's Encrypt 256-bit SSL technology. We utilize advanced firewalls, network monitoring tools, and strict administrative access controls to limit access to personal data to authorized personnel only.

7. ISO Standards & Operational Compliance

Hosticky operates under the strict guidelines of ISO 9001 (Quality Management) and ISO 27001 (Information Security Management) frameworks. We enforce internal security controls, document operational procedures, and audit our access permissions to align with these international standards. Please note that while we operate in full compliance with these rigorous frameworks to ensure enterprise-grade security for your data, we do not currently hold official third-party ISO certification.

8. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We only share necessary data with trusted partners (Sub-Processors) to perform essential services:

• Domain Registries and registrars to process domain registrations.
• Payment processors to authorize and complete transactions.
• Licensing authorities (like cPanel/WHM) to provision software tools.
• Law enforcement or regulatory agencies in response to valid, legally binding requests.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence (including India and the United States). By using our services, you consent to these transfers. We ensure that our data transfer agreements utilize Standard Contractual Clauses (SCCs) to maintain the safety of your information across international borders.

10. Your Rights & Options (DPDP Act, GDPR & CCPA)

Depending on your jurisdiction—including India under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the European Union under the GDPR, or California under the CCPA—you have statutory rights concerning your personal data:

• Right to Access: Request a summary of your personal data being processed and third parties with whom it has been shared.
• Right to Correction & Updating: Request updates or corrections to inaccurate, misleading, or outdated personal information.
• Right to Erasure (Right to be Forgotten): Request permanent deletion of personal data when no longer required for legal or transactional obligations.
• Right to Withdraw Consent: Withdraw consent for non-essential processing activities at any time via your client portal.
• Right to Nominate (DPDP Act): Designate another person to exercise data rights in the event of death or incapacity.
• Right to Grievance Redressal: Direct access to our designated Grievance Officer for prompt time-bound resolution.

11. Statutory Grievance Redressal & Contact Us

In compliance with Section 8(10) and Section 13 of the Digital Personal Data Protection Act, 2023 (India), any grievance, complaint, or request regarding your digital personal data may be submitted to our designated Grievance Redressal Officer:

Escalation: If a grievance is not resolved to your satisfaction within thirty (30) days, you have the right to file a complaint directly with the Data Protection Board of India (DPBI).