This Privacy Policy explains what personal information Baasa Cloud collects, why we collect it, and how we keep it safe. We take your privacy seriously and only ever collect what we need to serve you well.
1. Information we collect
When you sign up or contact us, we collect:
- Name, email address, phone number, and postal address
- Billing details such as payment method and invoice history
- Domain registration details required by ICANN (WHOIS)
- Server, mailbox, and resource usage statistics for the services you use
- Communication you send us via email, WhatsApp, or our contact form
We also collect basic analytics on visits to baasacloud.com, including pages viewed, referrer, country, and device type. This data is aggregated and never linked to individuals.
2. How we use your information
- To provide, maintain, and improve our services
- To process payments and send invoices
- To send you transactional notifications (renewals, downtime, security alerts)
- To respond to support requests
- To comply with legal obligations, including registry and tax requirements
3. WHOIS and domain privacy
Domain registrations require your name and contact details to be submitted to the relevant registry. Where the TLD supports it, we offer free WHOIS privacy that replaces your personal details with a privacy proxy.
4. Sharing
We do not sell your personal information. We share data only with:
- Payment processors, to handle your transactions
- Upstream registrars and registries, where required to register a domain
- Authorities, where compelled by valid legal process
5. Cookies
We use a small number of essential cookies to remember your currency preference and to keep you signed in to the client area. We do not use third-party advertising or tracking cookies on baasacloud.com.
6. Data retention
We keep your account data while your account is active, and for up to 7 years after closure for tax and legal reasons. Backups are deleted on a rolling 30 day schedule.
7. Security
We protect your data with HTTPS everywhere, hashed passwords, two-factor authentication for staff, and least-privilege access controls. We are notified within minutes of any unusual activity on our infrastructure.
8. Your rights
You can request a copy of the personal data we hold on you, ask us to correct or delete it, or withdraw consent for marketing communications at any time. Email privacy@baasacloud.com and we respond within 14 days.
9. Children
Our services are not directed to children under 16. We do not knowingly collect personal information from anyone under that age.
10. Changes
We may update this policy from time to time. Material changes are announced by email and posted at the top of this page with a new "last updated" date.
11. Contact
Questions about your privacy? Email privacy@baasacloud.com or write to us at Baasa Cloud, Kampala, Uganda.