Privacy Policy

Effective Date

This Privacy Policy is effective as of July 12, 2026.

Data Controller

The data controller responsible for your personal information under this Privacy Policy is Nova Grid Hosting LLC. You may contact us by mail at:

Nova Grid Hosting LLC
#1035
62 NE 167th St
Miami, FL 33162
United States

Information We Collect

Account Information

When you create an account or purchase services, we collect your name, email address, billing address, phone number, and payment method details.

Payment Information

All payments are processed securely through Stripe. Nova Grid does not store full credit card numbers on our servers. Stripe's privacy policy governs the handling of your payment data.

Hosting and Domain Data

We store information related to your hosting account, including domain names, DNS records, website files, databases, and server logs necessary to provide our services.

Usage and Log Data

When you visit novagridhosting.com, we automatically collect:

• IP addresses
• Browser type and version
• Pages visited on our website
• Timestamps and visit duration
• Referring URLs

Cookies and Similar Technologies

We use a small number of cookies and browser-storage items, some of which are strictly necessary to deliver the service (for example, your billing-portal session) and some of which are optional and only set if you click "Accept" on our cookie banner (for example, Google Analytics and Google Ads conversion tracking). A complete list, including the name, purpose, and duration of each, is available in our Cookie Policy. We do not use cookies for cross-site behavioural advertising on third-party sites, and we do not sell personal information.

How We Use Your Information

We use the information we collect to:

• Provision and maintain your hosting and domain services
• Process payments and send invoices
• Provide customer support
• Send service-related notices, including outage alerts, maintenance windows, and billing reminders
• Improve our infrastructure and services
• Comply with legal obligations

Lawful Basis for Processing (UK GDPR)

For customers and visitors located in the United Kingdom, we rely on the following lawful bases under Article 6 of the UK GDPR for each category of processing:

• Provision of hosting, domain, and support services: Article 6(1)(b), performance of a contract.
• Billing, invoicing, and tax record-keeping: Article 6(1)(b), performance of a contract; Article 6(1)(c), compliance with a legal obligation (tax and accounting law).
• Service-related notices (outages, maintenance, renewals): Article 6(1)(b), performance of a contract.
• Fraud prevention, abuse mitigation, and infrastructure security: Article 6(1)(f), legitimate interests of Nova Grid Hosting and its customers in operating a secure and reliable service.
• Server log retention and analysis: Article 6(1)(f), legitimate interests in operational monitoring and security.
• Optional marketing communications, where applicable: Article 6(1)(a), consent. You may withdraw consent at any time without affecting prior processing.
• Compliance with valid legal process and law-enforcement requests: Article 6(1)(c), legal obligation.

We do not process special-category personal data (Article 9 UK GDPR) in the ordinary course of providing our services. If you upload such data to your hosting account, you do so as the controller of that data, governed by our Data Processing Agreement.

How We Share Your Information

We do not sell your personal information. We share data only with the following parties and only as necessary:

• Stripe: for payment processing
• RackNerd: our infrastructure provider, which hosts the servers on which our services run
• Hetzner: our game-server infrastructure provider, which hosts the servers on which Minecraft and other game-server services run
• Domain registrars: for ICANN-required WHOIS data when you register a domain
• Anthropic: for AI-assisted support chat, where you have engaged the chat widget
• Google: for the email infrastructure that delivers our customer support and transactional messages
• Google Analytics and Google Ads (for website measurement and ad-conversion tracking, fired only after you accept the cookie banner)
• Law enforcement: when required by valid legal process
• Service providers: who assist our operations under strict confidentiality agreements

A complete and current list of the subprocessors we engage, including the categories of personal data each receives and the country in which each is established, is published at novagridhosting.com/subprocessors.html. We update that page when subprocessors change.

International Data Transfers

Our hosting infrastructure is located in New York, NY, United States, operated by RackNerd LLC. This means that personal data we process is transferred from the United Kingdom (and the European Economic Area) to the United States.

The United Kingdom is not currently subject to a general adequacy decision in respect of the United States. We document UK to US transfers using one of the following mechanisms, depending on the recipient:

• UK Extension to the EU-US Data Privacy Framework: where the recipient is self-certified under the UK Data Bridge mechanism that came into force on 12 October 2023.
• UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, executed with the recipient.
• Derogations under Article 49 UK GDPR, where strictly necessary and only in narrow cases (for example, where a transfer is necessary for the performance of your contract with us).

RackNerd LLC, our infrastructure provider, is not self-certified under the UK Extension to the EU-US Data Privacy Framework. Transfers of personal data to RackNerd are therefore documented under the Article 49(1)(b) UK GDPR derogation (transfer necessary for the performance of your hosting contract with us), as recorded on our subprocessors page.

The transfer mechanism applicable to each subprocessor is identified on our subprocessors page. You may request a copy of the executed transfer-safeguard documentation by emailing privacy@novagridhosting.com; we will provide a redacted copy where confidentiality of commercial terms requires it.

Domain Registration and WHOIS

When you register a domain name, ICANN requires certain contact information to be made publicly available through the WHOIS directory. We offer WHOIS privacy protection where supported by the domain registry to shield your personal details from public lookup.

Data Retention

We retain your data according to the following schedule:

• Hosting content (site files, databases, mailboxes): deleted from our servers within 7 days of account cancellation or termination, as set out in our Terms of Service
• Account data (billing-portal profile and account records): retained for the life of your account plus 90 days after termination
• Billing records: retained for 7 years per tax and accounting requirements
• Server logs: retained for 30 days
• Backups: residual copies of a terminated account's data are purged from backup rotation within 30 days of termination

Data Security

We protect your data using encryption in transit (TLS), access controls, and secure infrastructure practices. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

If we become aware of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, we will notify the UK Information Commissioner's Office (ICO) without undue delay and, where feasible, no later than 72 hours after we become aware of it, in accordance with Article 33 of the UK GDPR.

If a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, in accordance with Article 34 UK GDPR. Notifications will include, at a minimum, the nature of the breach, the categories and approximate number of records involved, the likely consequences, and the measures we have taken or propose to take to address it.

Your Rights

If you are located in the United Kingdom, you have the following rights in respect of your personal data under the UK GDPR:

• Right of access (Article 15): to obtain confirmation of whether we process your personal data and, if so, a copy of it.
• Right to rectification (Article 16): to have inaccurate or incomplete data corrected.
• Right to erasure (Article 17): to have your data deleted, subject to limited exceptions (e.g. tax-record retention obligations).
• Right to restriction of processing (Article 18).
• Right to data portability (Article 20): to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21), including to processing based on our legitimate interests.
• Rights in relation to automated decision-making (Article 22): we do not currently make decisions about you based solely on automated processing that produces legal or similarly significant effects.
• Right to withdraw consent (Article 7), where processing is based on consent.

To exercise any of these rights, email privacy@novagridhosting.com. We will respond to verified requests within one month, extendable by up to two further months for complex or numerous requests, in which case we will inform you of the extension within the first month.

You also have the right to lodge a complaint with the ICO if you believe our processing of your personal data infringes UK data protection law. The ICO's complaint portal is available at ico.org.uk/concerns. We would, however, appreciate the opportunity to address your concerns first. Please contact us before lodging a complaint.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, correct, and limit the use of your personal information, and the right not to be discriminated against for exercising those rights. To exercise CCPA rights, contact us at the address above.

For all other customers, you may request access to, correction of, or deletion of your personal data by contacting our support team. We will respond to all verified requests within one month.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page with a new effective date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us or email privacy@novagridhosting.com.

Nova Grid Hosting LLC is registered with the UK Information Commissioner's Office under registration number ZC133504.

Trademark Notice

“Nova Grid Hosting” is a trademark of Nova Grid Hosting LLC. The “Nova Grid Hosting” word mark is the subject of a pending federal trademark application with the United States Patent and Trademark Office (Serial No. 99793639, filed April 29, 2026). All other product names, logos, brands, and marks identified on this site are the property of their respective owners.