Privacy Policy

Last updated: March 16, 2026

This Privacy Policy explains how MHM ("we", "us", "our") collects, uses, and protects the personal information you provide when using our website and services.

1. Who We Are

MHM is a web hosting and technology services provider operating globally. Our registered address is . For privacy-related enquiries, contact us at [email protected].

2. Information We Collect

We collect the following categories of personal data:

Account data: Name, email address, phone number, company name, billing address
Payment data: Transaction reference numbers and payment method type (we do not store full card details — these are handled by our payment processors)
Technical data: IP address, browser type, operating system, pages visited, timestamps
Support data: The content of support tickets and communications you send us
Service data: Domain names, hosting configurations, and services you have ordered

3. How We Use Your Information

To create and manage your account
To process payments and issue invoices
To deliver and support the services you have ordered
To communicate with you about your account, renewals, and service notices
To send you product updates or promotional emails (you can opt out at any time)
To comply with legal obligations
To prevent fraud and ensure platform security

4. Legal Basis for Processing (GDPR)

For customers in the European Economic Area (EEA) and United Kingdom, we process your data under the following legal bases:

Contract performance: Processing required to deliver the services you have ordered
Legitimate interests: Security monitoring, fraud prevention, service improvement
Legal obligation: Compliance with applicable tax, financial, and regulatory requirements
Consent: Marketing communications (you may withdraw consent at any time)

5. Data Sharing

We do not sell your personal data. We may share it with:

Payment processors (e.g. Stripe, PayPal) to process transactions
Domain registrars (e.g. Namecheap, Enom) to register domains on your behalf
Infrastructure providers who host our servers and services
Legal authorities when required by applicable law

6. Data Retention

Account data: Retained while your account is active and for 12 months after closure
Invoice and payment records: 7 years (required by most international accounting and tax regulations)
Support tickets: 3 years
Technical/log data: 90 days

7. Your Rights

Depending on your jurisdiction, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Delete your data (subject to legal retention requirements)
Restrict or object to certain processing activities
Data portability — receive your data in a structured, machine-readable format
Withdraw consent for marketing communications at any time

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Cookies

We use essential cookies to keep you logged in and remember your session. We do not use third-party advertising cookies. You can disable cookies in your browser settings, although this may affect functionality.

9. Security

We protect your data using SSL/TLS encryption, secure password hashing, access controls, and regular security audits. No method of transmission over the internet is 100% secure, but we take all reasonable measures to protect your information.

10. International Data Transfers

Your data may be processed in countries outside your own. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses for EEA data transfers).

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page shows when it was last updated.

12. Contact

For any privacy questions or to exercise your rights, contact: [email protected]