Privacy Policy
Effective Date: January 01, 2026 | Last updated: May 2026
1. Introduction
Cyber Server Sea (SMC-Private) Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our hosting services. We adhere to the Prevention of Electronic Crimes Act (PECA) 2016 and international data protection standards such as GDPR.
2. Information Collection
We collect information that you provide directly to us, as well as information collected automatically through your use of our services:
- Account Information: Legal name, business name, NTN/registration details (for corporate clients), physical address, email, and phone number.
- Payment Data: We process payments through secure gateways. We do not store full credit card numbers on our servers.
- Technical Data: IP addresses, access logs, device identifiers, and browser characteristics collected for security and analytics.
- Support Correspondence: Records of communications between you and our technical support team.
3. How We Use Your Data
Your data is processed based on legitimate business interests and legal obligations:
- Service Provision: To setup and manage your hosting accounts, domains, and SSL certificates.
- Security & Compliance: To monitor for fraudulent activity, DDoS attacks, and violations of our Acceptable Use Policy.
- Communication: To send critical system alerts, maintenance notices, and billing invoices.
- Legal Obligations: To comply with lawful requests from regulatory authorities under the laws of Pakistan.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Even after account termination, we may retain certain data to comply with legal obligations (e.g., tax records), resolve disputes, and enforce our agreements. In accordance with PECA 2016, certain traffic data may be retained for prescribed periods.
5. Data Security Measures
We employ multi-layered security protocols to ensure data integrity:
- Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit.
- Physical Security: Tier III and Tier IV data center facilities with biometric access control.
- Network Security: Hardware firewalls, intrusion detection systems (IDS), and 24/7 proactive monitoring.
6. International Data Transfers
As a global hosting provider, your data may be processed in data centers located in various regions (e.g., USA, Europe, or Asia). We ensure that all international transfers comply with standard contractual clauses to provide a high level of data protection regardless of location.
7. Your Rights & Choices
Depending on your jurisdiction, you have the following rights regarding your data:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct any inaccurate or incomplete information.
- Erasure: Request deletion of your data when it is no longer necessary for the original purpose.
- Portability: Receive your data in a structured, machine-readable format.
8. Policy Updates
We may update this policy from time to time. Significant changes will be notified via email or a prominent notice on our website. Continued use of our services after such changes constitutes acceptance of the updated policy.
9. Contact Privacy Officer
For any privacy-related inquiries or to exercise your rights, please contact our Data Protection Officer:
Email: privacy@cyberserversea.com
Address: Gulberg, Lahore, Pakistan