POPIA Compliance Policy

Effective Date: 01 May 2025
Last Updated: 01 May 2025

This POPIA Compliance Policy explains how NexHost (“we”, “us”, “our”) collects, processes, stores, and protects personal information in accordance with the Protection of Personal Information Act (POPIA), Act No. 4 of 2013, of South Africa.

1. Purpose

NexHost is committed to protecting your privacy and ensuring that your personal information is used properly, lawfully, and transparently. This policy outlines our commitment to POPIA compliance and your rights as a data subject.

2. Personal Information We Collect

We collect personal information only as necessary for the performance of our services. This may include:

  • Full Name
  • Email Address
  • Phone Number
  • Company/Organization Name
  • Billing and Payment Information
  • IP Address and Browser Information
  • Domain and Hosting Account Details

We do not collect sensitive personal information unless legally required to do so.

3. Purpose for Collection

Your personal information is collected and processed for the following purposes:

  • To provide and manage hosting and domain services
  • To create and manage user accounts
  • To process billing and payment transactions
  • To send service-related communications
  • To comply with legal obligations
  • To improve our services and user experience

4. Data Subject Rights

Under POPIA, you have the right to:

  • Access your personal information
  • Request correction or deletion of personal information
  • Object to the processing of personal information
  • Lodge a complaint with the Information Regulator

To exercise these rights, contact us at: support@nexhost.co.za

5. Information Security

We implement reasonable and appropriate security measures to protect your personal information from unauthorized access, loss, or misuse. This includes:

  • SSL encryption on our website
  • Secure data storage and backup systems
  • Role-based access controls
  • Regular software and infrastructure updates

6. Sharing of Personal Information

We do not sell your personal information. We only share it with:

  • Domain registries for domain registrations
  • Payment processors for billing purposes
  • Legal authorities when required by law

All third parties are bound by confidentiality and data protection obligations.

7. Retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected or as required by law (e.g., tax or accounting regulations).

8. Cross-Border Transfers

Where necessary, your personal information may be transferred outside South Africa. In such cases, we ensure that appropriate data protection standards are in place.

9. Updates to This Policy

We may update this policy from time to time to reflect changes in legal or business requirements. Updates will be posted on our website with the effective date.

10. Contact Details

Information Officer:
NexHost
Email: support@nexhost.co.za

Information Regulator (South Africa):
Website: https://www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za