Privacy Policy

1. Introduction

This Privacy Policy explains how Spantrix Limited collects, uses, stores, shares, protects, and retains personal information in connection with its website, client area, support channels, billing, hosting, domain registration, email hosting, VPS/cloud hosting, reseller hosting, SSL, backup, security, migration, and related digital services.

Spantrix Limited does not control the content that customers choose to host. Customers are responsible for ensuring that their own websites, applications, databases, mailing lists, forms, cookies, analytics, privacy notices, consent mechanisms, and hosted personal data comply with applicable privacy laws.

2. Scope of This Policy

This policy applies to personal information processed by Spantrix Limited as a service provider, hosting provider, domain reseller or intermediary, billing provider, support provider, and website operator.

This policy does not replace a customer’s own privacy policy for its website, application, users, employees, subscribers, or end customers.

Where Spantrix Limited processes hosted personal data only on behalf of a customer, the customer is normally the controller or equivalent decision-maker, and Spantrix Limited is normally a processor, service provider, or infrastructure provider, subject to applicable law and any data processing agreement in place.

3. Identity and Contact Details

The service provider is Spantrix Limited, with registered address at 82B Forthright Gardens, Forthright Road, Magboro, Ogun State.. Privacy enquiries may be sent to support@spantrix.com or to [privacy@spantrix.com if created]. Spantrix Limited should insert its company registration number, appointed data protection contact, and any regulatory registration details before publication.

4. Personal Information Collected

Spantrix Limited may collect account information such as name, company name, username, password hash, email address, phone number, address, billing contact, authorized contacts, tax information, account settings, service history, and client-area activity.

Billing and payment information may include invoices, receipts, payment status, transaction references, card or bank-payment metadata, currency, fraud-screening results, chargeback information, and payment processor tokens. Spantrix Limited should not store full payment card numbers unless a compliant payment processor or lawful arrangement allows it.

Identity, verification, and fraud-prevention information may include government-issued identification where requested, business registration details, IP address, device information, risk scores, order patterns, login history, and verification correspondence.

Domain registration information may include registrant, administrative, technical, and billing contact information, WHOIS/RDAP records, domain verification records, transfer authorizations, auth/EPP code handling, registry notices, and registrar communications.

Support communications may include tickets, chat transcripts, email messages, call notes, attachments, screenshots, logs, credentials temporarily provided for troubleshooting, and support staff notes.

Technical information may include server logs, IP addresses, device and browser information, cookies, analytics identifiers, security logs, DNS queries, mail logs, authentication events, control panel events, error logs, abuse reports, and performance data.

Information processed through customer use of hosting services may include Customer Content, databases, emails, files, backups, logs, application data, and personal information of the customer’s users or visitors. Spantrix Limited generally processes this information to provide, secure, troubleshoot, and support the services.

5. How Personal Information Is Used

• To create, verify, administer, secure, and manage accounts and services.
• To deliver hosting, email, VPS/cloud, reseller, domain, SSL, backup, security, migration, and support services.
• To issue invoices, process payments, collect debts, manage refunds, prevent chargebacks, and handle tax or accounting records.
• To prevent fraud, detect abuse, investigate security incidents, enforce the Terms of Service, and protect IP reputation and infrastructure.
• To provide customer support, diagnose technical issues, restore services where possible, communicate maintenance, and respond to service requests.
• To register, renew, transfer, verify, manage, or suspend domain names under registry, registrar, ICANN, NiRA, ccTLD, and other domain-authority rules.
• To comply with law, court orders, law-enforcement requests, regulatory obligations, registrar or registry requirements, payment-processor obligations, and upstream-provider obligations.
• To send service notices, renewal reminders, security notices, billing notices, abuse notices, policy updates, and, where applicable, marketing communications that may be opted out of where required.

6. Legal Bases for Processing

Where a legal basis is required, Spantrix Limited may process personal information to perform a contract, take steps before entering a contract, comply with legal obligations, pursue legitimate interests, protect vital interests, obtain or rely on consent, or perform a task recognized by applicable law.

Legitimate interests may include service delivery, account security, fraud prevention, abuse detection, network protection, customer support, debt collection, business administration, legal defence, and improving services, provided those interests are balanced against applicable privacy rights.

7. Sharing of Personal Information

Spantrix Limited may share personal information with domain registrars and registries, payment processors, banks, data centers, cloud providers, email providers, SMS or communication providers, support tools, fraud-prevention providers, analytics providers, security vendors, backup vendors, control panel vendors, professional advisers, auditors, insurers, law-enforcement authorities, regulators, courts, dispute-resolution providers, and upstream providers.

Domain registration information may be published, escrowed, validated, transferred, or disclosed through WHOIS/RDAP, registry systems, registrar systems, dispute-resolution processes, or domain-authority requirements, subject to applicable privacy and domain rules.

Spantrix Limited may share information during a business transaction such as merger, acquisition, financing, reorganization, sale of assets, insolvency process, or transfer of services, subject to reasonable confidentiality and legal safeguards.

8. International Data Transfers

Services may involve processing, support, storage, routing, backup, security scanning, payment processing, domain registration, or vendor access outside Nigeria, including countries that may have different data-protection laws.

Where required, Spantrix Limited will use appropriate safeguards for international transfers, such as contractual commitments, vendor due diligence, standard contractual clauses, adequacy mechanisms, consent, necessity for contract performance, or other lawful transfer mechanisms.

9. Data Retention

Spantrix Limited retains personal information for as long as reasonably necessary for service delivery, account administration, billing, tax, accounting, legal compliance, dispute resolution, fraud prevention, abuse investigation, security, backup cycles, and enforcement of rights.

Customer Content and backups may be deleted after cancellation, suspension, non-payment, termination, migration, service expiry, or backup rotation. Backup retention is not guaranteed and should not be treated as a substitute for customer-controlled backups.

Spantrix Limited should insert operational retention periods before publication, including ticket retention, invoice retention, log retention, backup retention, domain record retention, fraud record retention, and legal hold processes.

10. Security Measures

Spantrix Limited uses reasonable administrative, technical, and organizational safeguards designed to protect personal information, such as access controls, authentication, logging, monitoring, encryption where appropriate, backup systems, network security controls, staff procedures, and vendor controls.

No hosting, internet, email, payment, backup, or security system is completely secure. Spantrix Limited does not promise absolute security, uninterrupted operation, guaranteed restoration, or protection against every vulnerability, intrusion, human error, misconfiguration, or third-party incident.

11. Customer Responsibility for Hosted Personal Data

Customers decide what personal information they collect, upload, transmit, store, publish, or process through their websites, databases, email accounts, forms, applications, and servers. Customers must provide their own privacy notices, obtain required consents, configure cookies, secure applications, honour data-subject rights, and comply with data-protection, consumer, employment, sectoral, and cross-border transfer laws applicable to their activities.

Customers must not upload regulated, sensitive, or high-risk personal data unless the purchased service, security controls, legal basis, and contractual arrangements are appropriate for that data.

12. Customer Rights

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to processing, port data, withdraw consent, complain to a regulator, or receive information about processing.

Requests relating to Spantrix account data may be sent to Spantrix Limited. Requests relating to personal information controlled by a Spantrix customer’s website, application, database, or email account should normally be sent to that customer first.

Spantrix Limited may need to verify identity, preserve records, decline requests that are unlawful or disproportionate, retain information required for legal or security reasons, or refer requests to the relevant customer where Spantrix Limited acts as processor.

13. Children's Privacy

Spantrix Limited’s services are intended for business and adult account holders. Spantrix Limited does not knowingly invite children to create hosting accounts. Customers operating websites or services directed to children are responsible for complying with child privacy, safety, consent, and content laws.

14. Cookies, Analytics, and Third-Party Websites

Spantrix Limited may use cookies and similar technologies for login sessions, preferences, fraud prevention, security, analytics, support, affiliate tracking, and service improvement.

Customers can control cookies through browser settings, but disabling cookies may affect login, checkout, support, or security features.

Spantrix websites, control panels, support tools, invoices, or hosted customer sites may link to third-party websites. Spantrix Limited is not responsible for the privacy practices of third parties or customer-controlled websites.

15. Data Breaches and Security Incidents

If Spantrix Limited becomes aware of a security incident involving personal information for which it is responsible, it will take reasonable steps to investigate, contain, mitigate, preserve evidence, notify affected customers or authorities where required, and comply with applicable law.

Customers must promptly notify Spantrix Limited of suspected compromise involving hosted systems and must cooperate with containment, password changes, patching, malware removal, logging, or forensic steps where necessary.

16. Changes to This Privacy Policy

Spantrix Limited may update this Privacy Policy to reflect changes in law, services, vendors, systems, business practices, or operational needs. Updated versions take effect when posted or on the stated effective date.

17. Contact

For questions about this policy, contact support@spantrix.com or open a support ticket from the client area.