Privacy Policy
Last updated: September 12, 2026
This Privacy Policy explains how MHM ("we", "us", "our") collects, uses, and protects the personal information you provide when using our website and services.
1. Who We Are
MHM is a web hosting and technology services provider operating globally. Our registered address is Accra. For privacy-related enquiries, contact us at [email protected].
2. Information We Collect
We collect the following categories of personal data:
- Account data: Name, email address, phone number, company name, billing address
- Payment data: Transaction reference numbers and payment method type (we do not store full card details — these are handled by our payment processors)
- Technical data: IP address, browser type, operating system, pages visited, timestamps
- Support data: The content of support tickets and communications you send us
- Service data: Domain names, hosting configurations, and services you have ordered
3. How We Use Your Information
- To create and manage your account
- To process payments and issue invoices
- To deliver and support the services you have ordered
- To communicate with you about your account, renewals, and service notices
- To send you product updates or promotional emails (you can opt out at any time)
- To comply with legal obligations
- To prevent fraud and ensure platform security
4. Legal Basis for Processing (GDPR)
For customers in the European Economic Area (EEA) and United Kingdom, we process your data under the following legal bases:
- Contract performance: Processing required to deliver the services you have ordered
- Legitimate interests: Security monitoring, fraud prevention, service improvement
- Legal obligation: Compliance with applicable tax, financial, and regulatory requirements
- Consent: Marketing communications (you may withdraw consent at any time)
5. Data Sharing
We do not sell your personal data. We may share it with:
- Payment processors (e.g. Stripe, PayPal) to process transactions
- Domain registrars (e.g. Namecheap, Enom) to register domains on your behalf
- Infrastructure providers who host our servers and services
- Legal authorities when required by applicable law
6. Data Retention
- Account data: Retained while your account is active and for 12 months after closure
- Invoice and payment records: 7 years (required by most international accounting and tax regulations)
- Support tickets: 3 years
- Technical/log data: 90 days
7. Your Rights
Depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Delete your data (subject to legal retention requirements)
- Restrict or object to certain processing activities
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent for marketing communications at any time
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
8. Cookies
We use essential cookies to keep you logged in and remember your session. We do not use third-party advertising cookies. You can disable cookies in your browser settings, although this may affect functionality.
9. Security
We protect your data using SSL/TLS encryption, secure password hashing, access controls, and regular security audits. No method of transmission over the internet is 100% secure, but we take all reasonable measures to protect your information.
10. International Data Transfers
Your data may be processed in countries outside your own. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses for EEA data transfers).
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page shows when it was last updated.
12. Contact
For any privacy questions or to exercise your rights, contact: [email protected]