Privacy Policy

1. Identity of the data controller

The main controller of data collected in connection with the use of host.nc, the client area, orders, billing and support is:

Hostchilipepper LLC d/b/a HOST.NC

Legal information

Information relating to the publisher, the administrative holder of the host.nc domain name, the HOST.NC partner and support, and the referenced .NC manager is available in the Legal Notice.

3. Personal data collected

When using host.nc, the following data may be collected: first name and last name, company or organization name, postal address, email address, client account credentials, billing information, payment information processed by secure payment providers, order history, subscribed services, domain names searched, ordered or managed, support tickets, exchanges with customer service, IP addresses, connection logs, technical data related to use of the client area and information necessary for security, fraud prevention and proper service operation.

Hostchilipepper only collects data necessary for service provision, client relationship management, platform security, billing and compliance with legal or contractual obligations.

4. Payment data

Payments may be processed by third-party payment providers, including Stripe where card payment is offered, or any other payment method available on host.nc.

Hostchilipepper does not directly store full bank card numbers on its own servers.

Payment data is processed by the relevant payment providers according to their own security rules and privacy policies.

Hostchilipepper may retain certain transaction-related information, including amount paid, payment date, payment status, payment method used, transaction reference, associated invoice and payment history.

5. Purposes of processing

Personal data is collected and used for client account creation and management, order processing, hosting service provision, domain name reservation, registration or management, email service management, SSL certificate management, billing, payment, accounting follow-up, technical and commercial support, support ticket handling, renewal management, suspension, termination or incident management, infrastructure security, fraud, spam, phishing and abuse prevention, report handling, service improvement, communication with clients about their services and compliance with legal, tax, accounting or administrative obligations.

6. Legal bases for processing

Personal data processing carried out in connection with host.nc may be based on contract performance, compliance with a legal obligation, Hostchilipepper’s legitimate interest or the user’s consent.

Legitimate interest may include platform security, abuse prevention, incident management, service improvement and infrastructure protection. Consent may be used for certain cookies, marketing communications or optional processing.

7. Client account and client area

Creating a client account may be necessary to order, manage or renew services offered on host.nc.

The client is responsible for the accuracy of provided information and the confidentiality of credentials.

Any activity carried out from the client account is deemed to have been carried out by the client, unless proven otherwise.

In case of suspected unauthorized access, the client must promptly contact Hostchilipepper through support: open a support ticket.

8. Support and assistance tickets

When the client contacts support, Hostchilipepper or an authorized support partner may process information necessary to understand and resolve the request.

This information may include client identity, contact details, service concerned, domain name, screenshots, technical descriptions, exchange history, configuration information and logs useful for diagnosis.

The client should avoid transmitting sensitive or confidential data that is not necessary for handling the request.

9. Domain names

In connection with domain name reservation, registration, transfer or management, certain personal data may be transmitted to registries, registrars or competent organizations.

This data may include first name, last name, company, address, email, administrative, technical or billing contacts, supporting documents and information necessary to validate the domain name.

.NC domain names are subject to the rules of the .NC registry. Availability displayed during a search is indicative until effective validation.

Requests relating to .NC domains may require manual verification, additional information, supporting documents or validation by the competent registry.

HOST.NC follows up these requests with the support of a referenced .NC manager when the request requires specific assistance.

10. Data hosted by clients

When the client uses hosting services to host a website, files, databases, forms, online stores or applications, the client may collect or process personal data concerning its own users.

In this case, the client is generally responsible for the data processing carried out through its own services. Hostchilipepper acts as technical provider or hosting processor within the limits of the services provided.

The client remains responsible for informing its own users, collecting required consent, securing applications, ensuring form compliance, managing rights requests, complying with rules applicable to its own processing and keeping its own backups.

A Data Processing Agreement may be provided for professional clients where necessary.

11. Data recipients

Personal data may be accessible, within the limits of each party’s needs, to Hostchilipepper, authorized support partners, hosting providers, server infrastructure providers, payment providers, domain registries and registrars, SSL certificate providers, email providers, security providers, customer support tools, accounting, administrative or legal providers and competent authorities when required or permitted by law.

Hostchilipepper does not sell its clients’ personal data to third parties.

12. International data transfers

As Hostchilipepper is a company registered in the United States, certain data may be transferred to or accessible from countries outside New Caledonia, the European Union or the European Economic Area.

Transfers may also occur when technical, payment, hosting, support or domain name providers are located outside these territories.

Where necessary, Hostchilipepper ensures that these transfers are governed by appropriate safeguards, such as an applicable adequacy decision, recognized certification, standard contractual clauses, complementary contractual, organizational or technical measures, or the necessity of the transfer for performance of the contract requested by the client.

13. Retention period

Personal data is retained for a period proportionate to the purposes for which it was collected.

As an indication, client account data is retained for the duration of the contractual relationship, order and billing data for the period required by accounting, tax or legal obligations, support tickets for the period necessary to follow the client relationship, technical logs for a limited period necessary for security and diagnosis, domain name data for the domain management period and according to applicable registry or registrar rules, and data necessary to prove a right, contract or dispute for the applicable limitation period.

Data that is no longer useful is deleted, anonymized or archived according to applicable obligations.

14. Data security

Hostchilipepper implements reasonable measures intended to protect personal data against loss, unauthorized access, disclosure, alteration or destruction.

These measures may include restricted access to internal tools, account authentication, server protection, connection encryption where applicable, technical logging, technical backups, abuse monitoring, limiting access to strictly necessary data and prevention measures against spam, phishing, malware and attacks.

As no security measure can guarantee absolute protection, the client must also protect its own access, passwords, websites, CMS, extensions, scripts and backups.

15. Cookies and trackers

The host.nc website may use cookies or trackers necessary for the operation of the website and client area, including session management, client account security, order cart retention, payment, technical preferences and platform operation.

Strictly necessary cookies may be placed without prior consent where they are essential to the requested service.

Other cookies or trackers may be used for audience measurement, website improvement, personalization or marketing. Where required, these cookies are placed only after user consent.

The user may manage preferences through the cookie banner or management module when available.

A detailed Cookie Policy may be consulted at: https://host.nc/cookie-policy.

16. Commercial communications

Hostchilipepper may send clients communications relating to subscribed services, including order confirmations, invoices, renewal reminders, technical notifications, security alerts, important service information and responses to support requests.

These communications are necessary for managing the contractual relationship.

Commercial communications or newsletters may also be sent where the client has consented or where applicable regulations allow it.

The client may unsubscribe from marketing communications using the unsubscribe link provided or through the Personal data section.

17. Data subject rights

In accordance with applicable regulations, data subjects may have rights of access, rectification, erasure, objection, restriction of processing, portability where applicable, withdrawal of consent where processing is based on consent, and the right to lodge a complaint with the competent authority.

These rights may be exercised through the Personal data section.

The request must specify the right exercised, the data concerned and allow reasonable identification of the requester.

For security reasons, Hostchilipepper may request additional information to verify the requester’s identity before responding.

18. Complaint to the competent authority

If a person considers that their rights are not respected, they may contact Hostchilipepper through the Personal data section.

They may also lodge a complaint with the competent personal data protection authority, including the CNIL where it is competent.

19. Minors’ data

The services offered on host.nc are intended for professionals, businesses, associations, organizations and persons legally able to subscribe to a hosting, domain name or related service.

Hostchilipepper does not seek to voluntarily collect personal data concerning minors.

If data concerning a minor is transmitted by mistake or without appropriate authorization, a deletion request may be sent through the Personal data section.

20. Links to third-party websites

The host.nc website may contain links to third-party websites, services or platforms.

Hostchilipepper is not responsible for the privacy, security or content practices of these third-party websites.

Users are invited to consult the privacy policies of third-party websites they visit.

21. Changes to the Privacy Policy

Hostchilipepper reserves the right to modify this Privacy Policy in order to adapt it to changes in the website, services, tools used, regulations or its organization.

The applicable version is the version published on host.nc on the date of consultation.

In case of important changes, information may be communicated to clients by email, client area notification or publication on the website.

22. Contact

For any question relating to this Privacy Policy or the exercise of your rights, you may contact:

Additional legal information is available in the Legal Notice.