Privacy Policy
Xyliex Hosting
Effective Date: May 12, 2026
Last Updated: May 12, 2026
Website: www.xyliex.com
Privacy Contact: privacy@xyliex.com
Xyliex Hosting ("Xyliex," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what personal data we collect when you visit our website or use our services, how we use and share that data, how long we retain it, and the rights you have over your information. We encourage you to read this document carefully. By accessing or using Xyliex Hosting's services, you acknowledge that you have read and understood this Privacy Policy.
Table of Contents
Who We Are
Information We Collect
How We Use Your Information
Legal Basis for Processing (GDPR)
Cookies & Tracking Technologies
How We Share Your Information
International Data Transfers
Data Retention
Your Privacy Rights
Children's Privacy
Security
Third-Party Links
Changes to This Policy
Contact & Complaints
Section 1 – Who We Are
Xyliex Hosting is the data controller responsible for the collection and processing of personal data obtained through its website located at www.xyliex.com and through the hosting services it provides to its customers. As data controller, Xyliex Hosting determines the purposes and means by which personal data is processed, in accordance with applicable data protection laws.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact us using the details below:
Website: www.xyliex.com
Privacy Inquiries: privacy@xyliex.com
Legal / DPO Contact: legal@xyliex.com
Mailing Address: Xyliex Hosting, [Address on File]
Section 2 – Information We Collect
We collect personal data in several ways depending on how you interact with our website and services. The categories of information we collect are described below.
2.1 – Information You Provide Directly
When you register for an account, purchase services, or contact our support team, you may provide us with the following information:
Full name
Email address
Billing address and mailing address
Phone number
Payment information (credit or debit card details, processed via secure third-party payment processors — we do not store full card numbers)
Account credentials (username and password)
Communications submitted via support tickets, live chat, or email
2.2 – Information Collected Automatically
When you visit our website or use our services, we automatically collect certain technical and usage data, including:
IP address and approximate geographic location derived from it
Browser type and version
Device identifiers and hardware model
Operating system and platform
Pages visited, links clicked, and navigation paths within our website
Referral URLs (the website or source that directed you to ours)
Session duration and timestamps
This data is collected through cookies, server log files, pixel tags, and analytics tools. Please refer to Section 5 for further details on cookies and tracking technologies.
2.3 – Information from Third Parties
We may receive limited personal data about you from trusted third-party sources, including:
Payment processors (e.g., Stripe) — to confirm transactions and prevent fraud
Fraud prevention and identity verification services — to protect against unauthorized account activity
Publicly available sources — such as business directories, where relevant to our services
Any data received from third parties is handled in accordance with this Privacy Policy and applicable law.
Section 3 – How We Use Your Information
Xyliex Hosting uses the personal data we collect for the following purposes:
Providing, operating, and improving our services — to set up and maintain your hosting account and deliver the services you have purchased
Processing payments and managing billing — to handle invoices, subscriptions, refunds, and payment disputes
Sending transactional communications — including invoices, payment receipts, service alerts, renewal reminders, and downtime notifications
Sending marketing communications — promotional emails, product updates, and special offers, sent only with your consent; you may opt out at any time via the unsubscribe link in any marketing email or by contacting privacy@xyliex.com
Fraud detection and prevention — to identify and prevent fraudulent activity, unauthorized access, and abuse of our platform
Security monitoring and abuse prevention — to protect the integrity of our infrastructure and the data of all our customers
Complying with legal obligations — to meet applicable regulatory, tax, and law enforcement requirements
Responding to support requests — to diagnose technical issues and provide timely customer assistance
Analyzing usage to improve product experience — to understand how our services are used and to inform product development decisions
We will not use your personal data for any purpose incompatible with the purposes described in this section without first notifying you and, where required, obtaining your consent.
Section 4 – Legal Basis for Processing GDPR
If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is governed by the General Data Protection Regulation (GDPR) and applicable national data protection laws. We are required to identify a valid legal basis for each processing activity. The legal bases we rely on are as follows:
Legal Basis How We Apply It
Performance of a Contract
(Art. 6(1)(b) GDPR) Processing necessary to deliver your hosting account and services — including account creation, billing, and customer support — when you enter into a service agreement with us.
Legitimate Interests
(Art. 6(1)(f) GDPR) Processing for our or a third party's legitimate interests, including security monitoring, fraud prevention, network abuse prevention, and product improvement, where those interests are not overridden by your rights.
Consent
(Art. 6(1)(a) GDPR) Processing based on your freely given, specific, and informed consent — including the sending of marketing emails and the placement of non-essential cookies. You may withdraw consent at any time.
Legal Obligation
(Art. 6(1)(c) GDPR) Processing required to comply with applicable law — including the retention of tax and financial records, and responding to lawful requests from government authorities or courts.
Where we rely on legitimate interests as our legal basis, you have the right to object to that processing. See Section 9 for information on how to exercise your rights.
Section 5 – Cookies & Tracking Technologies
Xyliex Hosting uses cookies and similar tracking technologies to operate our website, understand how it is used, and deliver relevant content. A cookie is a small text file placed on your device when you visit a website.
Types of Cookies We Use
Cookie Type Purpose Can Be Disabled?
Essential Required for the website to function — enabling login sessions, shopping cart functionality, and security features. No — required for core functionality
Functional Remember your preferences and settings (e.g., language, region) to provide a personalized experience. Yes — via cookie preferences
Analytics Collect aggregated data about website usage to help us understand visitor behaviour and improve our services. Yes — via cookie preferences
Marketing Track visits across websites to deliver targeted advertisements and measure the effectiveness of campaigns. Yes — via cookie preferences
Controlling Cookies
You may control or disable cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are set. Please note that disabling certain cookies may impair the functionality of our website.
You may also manage your cookie preferences through our Cookie Preference Centre, accessible via the cookie banner displayed on your first visit to our website. Full details are provided in our separate Cookie Policy, available at www.xyliex.com/cookie-policy.
Third-Party Analytics
We use Google Analytics to collect aggregated usage statistics. Google Analytics sets cookies to track sessions, pages visited, and user behaviour. The data collected is anonymized where possible. To opt out of Google Analytics tracking across all websites, you may install the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout. Google's privacy practices are described in Google's Privacy Policy.
Section 6 – How We Share Your Information
Xyliex Hosting does not sell, rent, or trade your personal data to any third party for commercial purposes.
We share personal data only in the following limited circumstances:
6.1 – Service Providers and Subprocessors
We engage trusted third-party companies to assist us in delivering our services. These service providers may process your personal data on our behalf and are contractually bound by data processing agreements that require them to protect your data and use it only for the purposes we specify. Categories of service providers include:
Hosting infrastructure and data centre providers
Payment processors (e.g., Stripe)
Transactional email delivery services
Fraud prevention and identity verification services
Customer support platform providers
Analytics service providers
6.2 – Legal Compliance
We may disclose your personal data when required to do so by applicable law, regulation, court order, or a lawful request from a governmental or regulatory authority. We will endeavour to notify you of any such disclosure where permitted by law and where feasible.
6.3 – Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide you with prior notice of any such transfer and of any changes to this Privacy Policy that may result, and you will retain your privacy rights under applicable law.
6.4 – With Your Consent
We may share your personal data with third parties in any other circumstance not described above, but only with your prior, explicit, and informed consent. You may withdraw such consent at any time by contacting us at privacy@xyliex.com.
Section 7 – International Data Transfers
Xyliex Hosting is headquartered in Canada. In the course of providing our services, your personal data may be transferred to, and processed in, countries other than Canada — including the United States and other jurisdictions where our service providers and subprocessors are located.
Some of these countries may not provide the same level of data protection as your home jurisdiction. Where we transfer personal data to countries not recognized as providing an adequate level of data protection, we take steps to ensure that appropriate safeguards are in place, including:
Standard Contractual Clauses (SCCs) approved by the European Commission, for transfers from the EEA
UK International Data Transfer Agreements (IDTAs), for transfers from the United Kingdom
Binding Corporate Rules or other equivalent mechanisms where applicable
If you are located in the EEA or the United Kingdom, you may request a copy of the transfer safeguards applicable to your personal data by contacting us at privacy@xyliex.com.
For users in Canada, your data may be subject to the laws of foreign jurisdictions where it is processed, and those foreign governments, courts, or law enforcement agencies may be able to access it in certain circumstances.
Section 8 – Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following retention schedule applies:
Data Category Retention Period
Account and customer data Duration of the customer relationship, plus 7 years for tax and legal compliance purposes
Backup data May persist for up to 90 days following account deletion or data removal request
Marketing data Until you opt out of marketing communications or close your account, whichever occurs first
Support tickets and communications 3 years from the date the ticket is closed
Analytics and log data Up to 26 months in aggregated or pseudonymized form
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. You may request earlier deletion of your data by submitting a request to privacy@xyliex.com; however, we may be required to retain certain data to comply with our legal obligations, resolve disputes, or enforce our agreements.
Section 9 – Your Privacy Rights
Depending on your location, you may have specific rights with respect to the personal data we hold about you. We are committed to honouring these rights and responding to your requests in a timely and transparent manner.
Rights Available to All Users
Right to Access: You may request a copy of the personal data we hold about you.
Right to Correct: You may request correction of any inaccurate or incomplete personal data.
Right to Delete: You may request deletion of your personal data, subject to applicable legal obligations.
Right to Opt Out of Marketing: You may unsubscribe from marketing communications at any time.
EEA and United Kingdom Users GDPR
In addition to the rights above, if you are located in the EEA or UK, you have the following rights under the GDPR:
Right to Data Portability: You may receive your personal data in a structured, machine-readable format and transmit it to another controller.
Right to Restrict Processing: You may request that we limit the way we process your personal data in certain circumstances.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to file a complaint with the data protection supervisory authority in your country of residence or establishment.
California Residents CCPA
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for which it is used.
Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
Right to Opt Out of Sale: You have the right to opt out of the sale of your personal information. Xyliex Hosting does not sell personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive a different level or quality of service as a result of making a request.
Canadian Residents PIPEDA
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the following rights:
Right to Access: You may request access to the personal information we hold about you and information about how it is used and disclosed.
Right to Correct: You may challenge the accuracy of your personal information and request that it be corrected or annotated.
Right to Withdraw Consent: You may withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice.
How to Exercise Your Rights
To submit a privacy rights request, please contact us at:
Email: privacy@xyliex.com
We will verify your identity before processing your request to protect the security of your personal data. We will respond to all verified requests within 30 days of receipt. In cases of complexity or volume, we may extend this period by a further 30 days and will notify you accordingly.
Section 10 – Children's Privacy
Xyliex Hosting's website and services are intended for adults and are not directed to children under the age of 16 years. We do not knowingly collect, use, or disclose personal data from minors under this age.
If we become aware that we have inadvertently collected personal data from a child under 16 without appropriate parental or guardian consent, we will take prompt steps to delete that information from our systems.
If you are a parent or legal guardian and believe that your child has provided us with personal data without your consent, please contact us at privacy@xyliex.com and we will address your request promptly.
Section 11 – Security
Xyliex Hosting takes the security of your personal data seriously and implements a range of industry-standard technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:
Encryption in transit: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS).
Encryption at rest: Sensitive data stored on our systems is encrypted using industry-standard encryption protocols.
Access controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
Regular security audits: We conduct periodic vulnerability assessments and security audits to identify and remediate potential weaknesses in our systems.
Incident response procedures: We maintain documented procedures for detecting, reporting, and responding to security incidents.
While we employ these safeguards, no method of electronic transmission or data storage is completely secure. We cannot guarantee the absolute security of your information, and we encourage you to protect your account credentials, use strong and unique passwords, and notify us immediately at privacy@xyliex.com if you suspect any unauthorized access to your account.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Xyliex Hosting will notify affected users and, where required by law, the relevant supervisory authorities, within the timeframes prescribed by applicable data protection legislation.
Section 12 – Third-Party Links
Our website may contain hyperlinks to websites, services, or resources operated by third parties. These links are provided for your convenience and informational purposes only. Xyliex Hosting has no control over the content, privacy practices, or data handling policies of third-party websites, and we are not responsible or liable for them.
The inclusion of any link on our website does not imply our endorsement of the linked site or its operators. We strongly encourage you to review the privacy policy of any third-party website you visit before providing any personal information.
This Privacy Policy applies solely to information collected by Xyliex Hosting through its own website and services.
Section 13 – Changes to This Policy
Xyliex Hosting may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational reasons. The most current version of this policy will always be available at www.xyliex.com/privacy-policy.
Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data, or your rights in relation to it — we will provide advance notice of at least 14 days before the changes take effect. Notice will be provided by one or more of the following means:
An email notification to the primary email address associated with your account
A prominent notice posted on our website or within the customer portal
Your continued use of Xyliex Hosting's services following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of our services and contact us to close your account.
We maintain an archive of previous versions of this Privacy Policy. To request a copy of a prior version, please contact us at privacy@xyliex.com.
Section 14 – Contact & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us using the following details:
Contact Type Details
Privacy Inquiries privacy@xyliex.com
Legal / Data Protection Officer legal@xyliex.com
Mailing Address Xyliex Hosting, [Address on File]
Website www.xyliex.com
We take all privacy-related complaints seriously and will acknowledge your inquiry within 5 business days and provide a full response within 30 days, unless the complexity of your request requires additional time, in which case we will notify you.
If you are not satisfied with our response, or if you believe we are processing your personal data in a manner inconsistent with applicable law, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction:
Canada: Office of the Privacy Commissioner of Canada — www.priv.gc.ca
EEA: Your national data protection supervisory authority (e.g., CNIL in France, BfDI in Germany)
United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
California (USA): California Privacy Protection Agency (CPPA) — cppa.ca.gov