Privacy & Data Protection Policy

1. Introduction

At RealHostBD Limited ("RealHostBD"), we respect your fundamental right to digital privacy. This policy details how we gather, utilize, store, and shield personal information collected through our website, client billing portal, mobile interfaces, and hosting services.

2. Information We Collect

When ordering services, communicating with customer support, or browsing our website, we may collect the following categories of data:

• Identity & Contact Information: Full name, company trade license name, physical billing address, email address, and verified phone number.
• Domain WHOIS Data: Registrant contact details as required by ICANN accreditation rules and BTCL (.bd) registry directives.
• Financial & Payment Records: Billing history, payment transaction IDs (bKash/Nagad TrxID), bank transfer references. (Note: We do not store raw credit card numbers; card transactions are tokenized via SSLCOMMERZ).
• Technical & Server Logs: IP address, browser user-agent, operating system, and access timestamps recorded for security auditing and DDoS mitigation.

3. How We Use Your Data

Your personal data is used strictly for operational and service delivery purposes, including:

• Provisioning hosting servers, cPanel credentials, and DNS records.
• Registering global and local domain names with accredited registries.
• Sending crucial transactional notices, automated renewal reminders, and server maintenance bulletins.
• Preventing malicious activities, brute force authentication attempts, and fraudulent payments.

4. Third-Party Disclosures

RealHostBD will never sell, rent, or trade your personal information to third-party advertisers or telemarketers. We share necessary data only with trusted infrastructure partners essential for service execution:

• Domain Registries: Enom, ResellerClub, and BTCL for legal domain assignment.
• Payment Processors: bKash, SSLCOMMERZ, and partnering commercial banks for processing transactions.
• SSL Certificate Authorities: Sectigo and DigiCert for identity validation in OV/EV certificates.
• Legal Compliance: Government authorities or law enforcement upon receipt of a valid Bangladeshi court order or subpoena.

5. Data Security & Storage

Our billing portal and server clusters employ industry-standard 256-bit TLS encryption. Servers are housed in biometric-secured, Tier-3 data center facilities equipped with 24/7 CCTV surveillance, dual redundant UPS backups, and fire suppression systems.

6. Your Rights & Data Export

You retain the right to review, update, or request the deletion of your personal account data at any time through the Client Portal. To request a complete export of your personal information, submit a ticket to our Data Privacy Desk.