How we handle your personal data.
This notice explains what personal data we collect, why, and the rights you have under India’s Digital Personal Data Protection Act, 2023 and its Rules. For account and billing data, 1uphost is the Data Fiduciary.
1. What we collect
Account data: name, email, mobile, backup contacts, password (stored as a hash) and 2FA settings. Verification data: PAN, GSTIN and documents you upload. Billing data: invoices and payment references — card numbers are handled by our payment gateway, never stored by us. Usage data: sign-in history, IP addresses and support conversations.
2. Why we use it
To create and secure your account, verify your identity as required by law, provide and bill for the services you order, send service and security notices, and answer support requests. We do not sell personal data or use it for third-party advertising.
3. Consent and notice
Where we rely on your consent — for example, marketing emails — we ask clearly and separately, and you can withdraw it at any time from your dashboard, as easily as you gave it. Withdrawing consent does not affect processing needed to provide a service you have ordered.
4. Data you host with us
For websites, databases, email and backups you store on 1uphost, you are the Data Fiduciary and we process that data only on your instructions, as your Data Processor. We do not access it except to provide the service, keep it secure, or when you ask us to.
5. Your rights
You can ask to access a summary of your personal data, correct or update it, erase it when it is no longer needed, and nominate someone to exercise your rights in case of death or incapacity. Most of this is available directly in your dashboard; anything else, write to our grievance officer.
Make a request through the grievance page (1uphost.com/grievance/) or from your dashboard. We acknowledge it within 24 hours and aim to respond within 15 days. If you are unhappy with our response, you can complain to the Data Protection Board of India.
6. Children
Our services are for adults. We do not knowingly process personal data of anyone under 18 without verifiable consent from a parent or guardian.
7. Security and breaches
Data is encrypted in transit and at rest, access is restricted to staff who need it and logged, and every staff account uses two-factor authentication. If a personal data breach affects you, we will tell you and the Data Protection Board without delay, with what happened and what we are doing about it.
8. Retention
We keep account data while your account is active and for up to 8 years after closure where tax and accounting law requires it. Verification documents are deleted 180 days after account closure. Hosted data is deleted 30 days after a service ends.
9. Where data is stored
Account and hosted data is stored in data centres in India. Some service providers — such as email delivery — may process limited data outside India, only in countries not restricted by the Government of India and under contractual safeguards.
10. Grievance officer
Raise a grievance online at 1uphost.com/grievance/ (you get a reference straight away), write to our grievance officer at grievance@1uphost.com, or call 9870.417.418. We acknowledge every grievance within 24 hours and aim to resolve it within 15 days.