Legal

Privacy Policy

How we collect, use, store, and protect your personal information.

Last updated: April 27, 2026

1. Introduction

This Privacy Policy explains how ViberHosting (“we,” “us,” or “our”) collects, uses, shares, retains, and protects your personal information when you visit viberhosting.com, open an account, or use our services. It is written to align with applicable Pakistani data-protection and consumer-protection statutes and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Information We Collect

We collect the following categories of personal information:

  • Account information: full name, email address, phone number, postal address, country, company name, trade licence or tax registration number where applicable, and authentication credentials.
  • Billing information: billing address, invoice history, payment method tokens, last four digits of cards, bank-transfer references, and wallet balance. Full card numbers are processed by our PCI-compliant payment processors and are never stored on our servers.
  • Service data: hosting account details, domain registration records, DNS records, SSL certificates, server resource usage statistics, and diagnostic data needed to operate the services.
  • Technical data: IP addresses, browser type and version, operating system, device identifiers, referring URLs, pages viewed, and access timestamps collected automatically when you visit viberhosting.com or our control panels.
  • Server and security logs: access logs, mail logs, authentication logs, abuse reports, and firewall events used for service delivery, fraud prevention, and security investigations.
  • Communications: support tickets, live-chat transcripts, email correspondence, call recordings (where lawful and disclosed), and feedback you send us.

3. How We Use Your Information

We use personal information to:

  • Provision, configure, maintain, and support your services
  • Process payments, issue invoices, and maintain accounting records
  • Verify identity and prevent fraud, account takeover, and chargebacks
  • Send transactional notifications (order confirmations, renewal reminders, maintenance windows, security alerts)
  • Provide customer support and respond to your enquiries
  • Investigate abuse, enforce our Acceptable Use Policy, and protect our network and other customers
  • Improve our services, security, and customer experience
  • Send marketing communications about our services where you have opted in or where permitted by law — you can unsubscribe at any time
  • Comply with legal, regulatory, tax, and law-enforcement obligations under the law of the Islamic Republic of Pakistan.

We do not sell your personal information to third parties and we do not use your hosted data for advertising or training of any model.

4. Legal Bases for Processing

We process personal information on the following legal bases: performance of our contract with you; compliance with our legal obligations under the law of the Islamic Republic of Pakistan; our legitimate interests in operating, securing, and improving our services; and your consent where required (for example for non-essential cookies or marketing emails). You may withdraw consent at any time without affecting prior processing.

5. How We Share Information

We share personal information only as necessary to deliver the services and comply with the law:

  • Domain registrars and registries: ICANN-accredited registrars,PKNIC for .pk family domains, and other ccTLD / gTLD registries receive the registrant data required to register and maintain a domain.
  • SSL certificate authorities: domain validation and contact information is shared with the issuing authority for SSL certificate issuance.
  • Payment processors: payment data is processed by PCI-DSS compliant gateways operating their own privacy policies.
  • Datacenter and infrastructure providers: the providers operating the physical facilities and network where the services run.
  • Professional advisors: auditors, accountants, and lawyers, bound by confidentiality.
  • Authorities: the Pakistan Telecommunication Authority (PTA), law-enforcement, courts, or other regulators when we are legally compelled to disclose information.
  • Successors: a buyer or successor entity in the event of a merger, acquisition, or sale of assets, subject to equivalent protections.

6. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

  • Essential cookies: required for sign-in, session management, fraud prevention, and security. These cannot be disabled.
  • Preference cookies: remember settings such as theme, language, and currency.
  • Analytics cookies: help us understand how visitors use viberhosting.com. Where required by law we ask for consent before setting these cookies.

You can manage cookies in your browser. Disabling essential cookies will prevent the client portal from functioning correctly.

7. Data Retention

We keep personal information only for as long as we need it for the purposes described in this Policy. Indicative retention periods:

  • Active account and service data: for as long as your account is active
  • Account and service data after termination: deleted within 30 days, except where retention is required by law
  • Billing, invoice, and tax records: retained for at least 6 years from the financial year-end as required by accounting and tax regulations of the Islamic Republic of Pakistan
  • Server access logs and mail logs: 30–90 days
  • Backups: rolling cycle, typically purged within 30–90 days of removal from the live system
  • Support tickets: 2 years
  • Abuse and security investigation records: up to 2 years

8. Where Your Data Is Stored

Our infrastructure is hosted in datacenters located in the Islamic Republic of Pakistan and the European Union (EU), depending on the service and the region you select. Customer support, billing, and platform management may be performed from any of our operating locations. Where data leaves the Islamic Republic of Pakistan or the EU, we apply appropriate safeguards, including standard contractual clauses or equivalent measures permitted under applicable Pakistani data-protection and consumer-protection statutes and GDPR.

9. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, encrypted authentication, role-based access control, network firewalls and intrusion detection, regular patching, and audit logging. However, no system is completely secure; you are responsible for keeping your account credentials confidential and for notifying us of any suspected unauthorised access.

10. Your Rights

Subject to applicable Pakistani data-protection and consumer-protection statutes and other applicable laws, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete personal information, subject to legal retention requirements
  • Portability — receive your data in a structured, machine-readable format
  • Object to processing carried out on the basis of legitimate interests
  • Restrict processing in certain circumstances
  • Withdraw consent for processing based on consent, including marketing
  • Lodge a complaint with the National Commission for Personal Data Protection (where established)

To exercise these rights, contact privacy@viberhosting.com. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

11. Marketing Communications

We may send you marketing emails about our services where you have opted in or where permitted under PECA s.25 and applicable PTA spam regulations. Every marketing email includes a one-click unsubscribe link; transactional emails (renewals, maintenance, security, billing) cannot be unsubscribed from while your account is active.

12. International Transfers

Where personal information is transferred outside the Islamic Republic of Pakistan, we rely on the safeguards permitted by applicable Pakistani data-protection and consumer-protection statutes, including adequacy decisions, contractual clauses, and binding corporate rules. Hosting data in the EU is performed under GDPR protections.

13. Children

Our services are not directed to and we do not knowingly collect personal information from individuals under 18 years of age. If you believe we have collected information from a minor, contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or by a notice on viberhosting.com at least 30 days before they take effect. The “Last updated” date at the top of this page shows when it was last changed.

15. Contact

For privacy questions, requests, or complaints, contact:

ViberHosting
Email: privacy@viberhosting.com or support@viberhosting.com

ViberHosting — Fast. Reliable. Yours.