1. Controller and contact
The ClearlyHost legal entity identified in the legal notice is controller for the public website, customer account, billing and its own business administration. The configured privacy contact is published with the company details.
2. Data categories and purposes
Processing may include contact and company data, orders, agreements, invoices, payment status, support communications, portal events, security logs and consent/evidence records. Purposes include contract formation, performance, billing, support, security, legal compliance and dispute defence.
3. Customer-hosted content
Content stored by a customer in hosting, email, database or software services is generally processed under customer instructions. A separate DPA is provided where the relationship is controller-to-processor.
4. Recipients and subprocessors
Access is limited to required staff, infrastructure suppliers, payment and communications providers, registrar/registry partners and legally entitled authorities. DPA subprocessors are documented in the DPA annex.
5. International transfers
The hosting and email services offered on this platform operate with ALL-INKL in Germany. Administration and support by ClearlyHost in Morocco may require access from Morocco. Such access and any other recipients actually used are documented separately. Hosting in Germany does not replace required CNDP procedures or assessment of other applicable transfer rules.
6. Retention
Retention depends on purpose, contract status, security requirements and statutory retention duties. Technical logs, support records, contract evidence and invoices may have different retention periods.
7. Data-subject rights and identity checks
Requests are handled under the applicable privacy law. Reasonable identity verification may be required before sensitive information is disclosed.
8. Security incidents
ClearlyHost maintains risk-based technical and organisational measures. Incidents are assessed and notified to customers, authorities or individuals where the applicable law requires it.
9. Invoice verification by link or QR code
An individual code allows the invoice number, date, amount, currency and current status to be viewed. The customer’s name, email address, postal address, service lines and PDF are not published on that page. Anyone who receives the link or QR code can view the displayed information. The check concerns the stored record and its internal integrity check; it does not certify an arbitrary file, government approval or a qualified electronic signature.