Privacy policy

Nodaris is the operator described in this policy and is the controller for account, sales and support information described here.

This policy explains how Nodaris uses personal information when you browse nodaris.net, create an account, purchase VPS services or contact us. Privacy requests: [email protected].

Information we process

We process account and contact details, billing information, order history, support messages and technical information needed to operate and protect the service, such as IP addresses and security logs. Only provide information needed for your request.

Why we use information

We use information to create and secure accounts, process orders, supply services, respond to support requests, prevent abuse and meet applicable accounting and legal obligations. Where required, optional activities rely on your consent. Providing service-related details may be necessary to perform your contract.

Legal bases where applicable

Account creation and service delivery rely on performance of the contract; invoicing and mandatory recordkeeping rely on legal obligations. Security, fraud prevention and responding to general enquiries may rely on legitimate interests, subject to your rights and the necessary balancing assessment. Optional marketing or non-essential tracking requires the appropriate legal basis, including consent where required. We do not use this theme to make solely automated decisions with legal or similarly significant effects.

Payments and service providers

Orders are handled through WooCommerce. The payment provider selected at checkout processes payment information under its own privacy notice and may use additional fraud-prevention or authentication services. Card information is collected through the provider's secure interface; this theme and core plugin do not collect or store full card numbers or security codes. We receive payment status, transaction references and limited payment-method information needed to administer the order. Hosting, payment, email and support providers may process information necessary to perform their roles. We may disclose information when legally required or necessary to protect the service and its users.

Retention and security

Information is kept for as long as needed for the relevant service, dispute handling or applicable legal retention obligations. Account deletion may not remove records that must be retained by law. Access to information should be limited to authorised purposes; no internet service can guarantee absolute security.

Data protection

Where applicable data protection law applies, your rights are governed by that law. You may contact a competent supervisory authority where the law permits. You may contact us first, but you do not have to do so before approaching the regulator.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. You may withdraw consent where processing relies on consent and raise concerns with a competent supervisory authority. Contact [email protected]; we may need to verify your identity before handling a request.

Operational privacy details

Data hosted on your VPS

You determine the purposes for data that you upload to your server. Where we process personal information on your behalf, an appropriate data processing agreement is required. Contact us to agree processing instructions, subprocessors, locations, security arrangements and deletion or return procedures before storing such data. Account and billing data are handled separately under this policy.

International processing and updates

If information is processed outside your country, the safeguards required by applicable law must apply. Material changes to this policy will be published on this page. See our Cookie policy for browser storage information.