Privacy Policy
What this policy covers
WHMCS Limited ("WHMCS") respects and values your privacy. That's why WHMCS has established this Privacy Policy (referred to as the "Privacy Policy" herein) - so that WHMCS can disclose what information WHMCS collects about you and how WHMCS use, store and disclose such information. WHMCS want to help you make an informed decision about whether or not to share your information with WHMCS.
- How does WHMCS collect information from you?
- What information does WHMCS collect?
- What information does WHMCS collect if you're under the age of 13?
- How does WHMCS use and store the information it collects?
- Where is your Personal Information stored?
- How does WHMCS disclose the Personal Information it collects?
- Does WHMCS use cookies and web beacons?
- Information and access to your Personal Information
- What if you have questions, comments or complaints about this Privacy Policy?
WHMCS reserves the right to revise, modify, add or remove provisions to this Privacy Policy at any time. In the event that WHMCS do so, WHMCS will notify you in accordance with the notice provisions of WHMCS' Terms of Service. Take note of the 'Last Updated' date listed at the foot of this Privacy Policy. If WHMCS make changes to this Privacy Policy, WHMCS will update that date to notify you of the date of such changes. By continuing to use www.whmcs.com ("the Website") after receiving notice of the updated Privacy Policy, you acknowledge that you have read and understand the revised Privacy Policy.
Capitalised terms in this Privacy Policy have the meaning given to such terms in WHMCS' Terms of Service.
How does WHMCS collect information from you?
WHMCS collects information from you when you send it to WHMCS directly by filling out forms on WHMCS' Website (including any application you may make for Services or the Software), corresponding with WHMCS by e-mail, writing to WHMCS by post, or speaking to WHMCS by telephone. WHMCS also collect information from you when you browse the Website and use the Software, as set out in detail below. Some of the methods WHMCS use to collect data are automated and will take effect automatically as you navigate the Website and/or use the Software.
What information does WHMCS collect?
Personal Information.
Personal information means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person ("Personal Information").
WHMCS may collect the following Personal Information from you: name, address, telephone number, postal address, e-mail address, IP address, information about the type of browser you use, your operating system, the screen resolution of your browser, your ISP, which pages you view on the Website and the time and duration of your visits to the Website, credit card number (in the case of direct customers) and, if applicable, company name, postal address, telephone number, e-mail address, credit card number or tax ID number as well as similar information concerning technical contacts, marketing contacts, and executive contacts within your company or organisation.
User Communications.
If you communicate with WHMCS, WHMCS may collect information relating to that communication whether it takes the form of e-mail, letter, forum posting, testimonials or any other form of communication between you and WHMCS or submitted by you to the Website (collectively, "User Communications").
Server Information.
If you use one of WHMCS' software products such as WHMCS' proprietary Web Hosting, Billing and Automation Solution, WHMCS may collect certain information concerning such software and concerning the server upon which the software operates. This information includes without limitation: (a) the licensed or unlicensed status of the software; (b) the source from which the license for the software was obtained (i.e., WHMCS or a WHMCS affiliate); or (c) information about the server upon which the software is installed including (i) the public IP address, (ii) the operating system and (iii) the use of any virtualization technologies on such server ((a) through (c) collectively, "Server Information")). Additionally, "Server Information" may also include information collected by WHMCS from time to time concerning which features of the software are most often used in order to improve and make adjustments to the software; and information collected from you by WHMCS in the event that you request technical support services including without limitation, IP addresses, usernames and passwords necessary to login to SSH, the root directory of the server upon which you installed the WHMCS software and any affected accounts including email accounts, MySQL accounts and other accounts.
Non-Personal Information.
WHMCS also collect data in a form that does not, on its own, permit direct association with any specific individual. WHMCS may collect, use, transfer, and disclose non-personal information for any purpose.
What information does WHMCS collect if you're under the age of 13?
WHMCS does not knowingly collect Personal Information about children under the age of 13. If WHMCS becomes aware that it has inadvertently collected Personal Information about children under the age of 13, it will take steps to delete the information as soon as possible, except where WHMCS is required by applicable law to keep it.
Where WHMCS knows a child is above the age of 13, but considered a minor under applicable law, WHMCS will obtain parental/guardian consent prior to using that child's Personal Information.
How does WHMCS use and store the information it collects?
As a general matter, WHMCS may use the Personal Information you disclose to WHMCS to improve and provide the Website, the Services and WHMCS' other products and services, and for the specific purpose that you gave WHMCS your Personal Information. More specific details on how WHMCS use your information follows below.
WHMCS may use Personal Information to create and authenticate your account, to process transactions you request such as software license purchases in order to perform any contract you have entered into with WHMCS, to provide you with customer and technical support and to communicate with you about your account and WHMCS' products and services.
The Personal Information you provide to WHMCS allows WHMCS to provide you with the newsletters and mailing lists that you have signed up for with WHMCS. If you do not want to be on WHMCS' mailing list, you can opt out at any time by changing your settings in your 'My Details' page within the client area.
WHMCS may also use Personal Information to offer, market or advertise to you WHMCS products and services. While such WHMCS products and services may reference, incorporate or include third-party products and services, WHMCS will not use your Personal Information to independently offer, market or advertise third-party products and services unless WHMCS first obtain your consent to do so.
From time to time, WHMCS may use your Personal Information to send important notices, such as important product updates and communications about purchases as well as changes to WHMCS' terms, conditions, and policies. Because this information is important for your interaction with WHMCS you may not opt out of receiving these communications.
WHMCS may also use your Personal Information for any other legal purpose stated in this Privacy Policy, and any other purpose for which you have given WHMCS express consent.
Where you consent to WHMCS doing so, WHMCS may use your Personal Information to send you direct marketing communications. Should you ever choose to 'opt out' of receiving such communications WHMCS may retain your Personal Information on file to ensure that WHMCS do not continue to target you with communications of the type that you have asked WHMCS to cease sending to you.
WHMCS limits the use of Personal Information to the purposes identified in this Privacy Policy and for which you have provided explicit consent. In accordance with established policies and procedures, WHMCS retains Personal Information only for as long as necessary to fulfil the stated purposes, unless it is required by law for a different period or WHMCS has the consent of the individual.
In accordance with established policies and procedures, WHMCS will periodically destroy or erase any Personal Information that is no longer needed.
WHMCS may use User Communications in the same way as WHMCS uses Personal Information. If you communicate with WHMCS for a particular purpose, WHMCS may use your User Communications for that purpose. For example, if you contact WHMCS for technical support, WHMCS may use your communications to provide technical support to you.
WHMCS may use Server Information to provide you with technical support services and to maintain, evaluate, improve and provide WHMCS products and services. WHMCS may also use such information to investigate unlicensed (and therefore unauthorised) uses of WHMCS' software.
Where is your Personal Information stored?
WHMCS IS A GLOBAL COMPANY AND YOUR PERSONAL INFORMATION WILL NOT NECESSARILY BE HELD IN THE EUROPEAN ECONOMIC AREA ("EEA"). YOUR PERONAL DATA MAY BE TRANSFERRED TO AND STORED AT OUR US OFFICE AND ASSOCIATED DATACENTERS AND BY ACCEPTING OUR TERMS OF SERVICE AND/OR A SOFTWARE EULA, YOU ARE EXPLICITLY CONSENTING TO THIS TRANSFER AND STORAGE TAKING PLACE. WE WILL TAKE ALL STEPS REASONABLY NECESSARY TO ENSURE THAT YOUR PERSONAL INFORMATION IS TREATED SECURELY AND IN ACCORDANCE WITH THIS PRIVACY POLICY.
How does WHMCS disclose the Personal Information it collects?
Except as disclosed in this Privacy Policy, WHMCS does not share your Personal Information with unaffiliated third parties other than as set out in this Privacy Policy. WHMCS will never disclose your Personal Information to an unaffiliated third party for the purposes of e-mail or other marketing unless WHMCS first obtain your consent to do so.
WHMCS cannot be responsible for protecting your Personal Information if you share such information in publicly available sections of the Website such as the user forums or testimonials section. You should use your own judgment in disclosing this information on the Website.
In the event that WHMCS is purchased by another company, merges with another company or has a substantial portion of its assets purchased by another company, WHMCS may share your Personal Information with that company. In such an event, WHMCS will notify you in accordance with the notice provisions of the Terms of Use.
WHMCS may share your Personal Information with third parties as permitted or required by applicable law, by a court order or by another judicial or governmental request. WHMCS may also disclose your Personal Information if WHMCS determine that such disclosure is necessary to protect WHMCS's rights and remedies or is necessary for national security, law enforcement, or other issues of public importance. Such disclosures could take place in the context of an investigation or to prevent or take action against illegal activity, suspected fraud, situations involving potential threats to the physical safety of any person, violations of WHMCS's Terms of Service, applicable EULAs or other WHMCS agreements, or as otherwise required by applicable law. Where this is the case WHMCS will endeavour to give you notice of such disclosures, to the extent that WHMCS are lawfully permitted to do so.
WHMCS may disclose your Personal Information to affiliated third parties that assist WHMCS in providing maintaining, evaluating, improving and providing the Website, the Services and any other WHMCS products and services. WHMCS may disclose your Personal Information to affiliated third parties for the purposes of offering, marketing or advertising WHMCS products and services to you (such WHMCS products and services may reference, incorporate or include third-party products and services). In such an event, WHMCS will take reasonable measures to prevent such affiliated third parties from using your Personal Information for other purposes.
Does WHMCS use cookies and web beacons?
Cookies
Yes, WHMCS uses cookies to distinguish you from other users of the Website and to improve your overall experience. When you use the Website, certain information may be stored locally on your device using 'cookies' or similar technologies such as objects stored in the device's local storage. A cookie is a small text file used to store limited information about the user of the device. They help WHMCS to identify how WHMCS' users use the Website, and so that WHMCS can continue to develop and improve it.
Cookies do this by storing information about your preferences on your device, including the device model, manufacturer, screen resolution, device capabilities, service provider, country and city location data. WHMCS uses the following types of cookies:
- Strictly necessary: These cookies enable WHMCS' Website to function correctly and deliver the services and products you have requested.
- Performance & Functionality: These cookies are used to enhance the performance and functionality of WHMCS' Website but are non-essential to their use (for example, WHMCS uses cookies to remember your preferences on the Website). However, without these cookies, certain functionality may become unavailable.
- Analytical: These cookies collect information that is used either in aggregate form to help WHMCS understand how the Website is being used or to help WHMCS customise the Website for you. In particular WHMCS use the Google analytics cookies. For more information about Google's privacy policy, please visit http://www.google.com/intl/en/policies/. If you do not wish to allow the use of Google Analytics cookies at all, Google provides an opt-out plug-in for most common website browsers http://tools.google.com/dlpage/gaoptout.
By using the Service, you accept the use of cookies in accordance with this Privacy Policy.
Your cookie choices
You have the right to choose whether to accept or refuse cookies and similar technologies. You can exercise this choice by not accepting the Terms of Service and this Privacy Policy, however, please note that if you choose to do so, you will not be able to use the Service.
For more information about what cookies are and your rights to control cookies, please visit the third party educational resource www.allaboutcookies.org.
Web beacons
WHMCS does not use web beacons.
How does WHMCS protect Personal Information and other information about you?
WHMCS takes reasonable steps to protect any Personal Information WHMCS collects about you. Additionally, WHMCS may supply you with tools to evaluate the strength of the password you select for the Website. No security measures are foolproof, and WHMCS cannot guarantee the security of your information other than to take reasonable steps to protect it. In the event that WHMCS becomes aware of a security breach, unauthorised disclosure or inadvertent disclosure concerning your information, you agree that WHMCS may notify you of such an event using the notice provisions of the Terms of Use.
You are responsible for maintaining your account's security (as more specifically explained in the Terms of Service).
Information and access to your Personal Information
Based on what you have told WHMCS, WHMCS try to ensure that your contact information and preferences are accurate, complete, and up to date. You have the right to request access to and rectification or erasure of Personal Information or restriction of processing concerning your Personal Information or to object to processing as well as the right to data portability. WHMCS will comply with erasure requests as long as WHMCS is not required to retain the Personal Information by law and does not need to retain it for its legitimate business purposes. WHMCS may decline to process requests that are frivolous/vexatious, jeopardise the privacy of others, are extremely impractical, or for which access is not otherwise required by local law. Access, correction, or deletion requests can be made by emailing privacy@whmcs.com.
Your Rights
As a Data Subject you have a number of rights in relation to your Personal Information. These include your rights:
- To ask WHMCS to confirm what (if any) Personal Information WHMCS hold relating to you and how that data is processed and used by WHMCS (often referred to as a 'Subject Access Request');
- To have WHMCS rectify Personal Information which WHMCS hold about you that is inaccurate;
- To have WHMCS erase Personal Information which relates to you if it is no longer necessary for WHMCS to continue to process it, or if WHMCS have no lawful basis to store, process or retain it (though WHMCS do have rights to refuse these requests in certain situations);
- To object to WHMCS processing your Personal Information;
- To be informed about the existence of any automated decision making and profiling of your Personal Information, and where appropriate, be provided with meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing that affects you;
- To have WHMCS provide you with a copy of your Personal Information for transfer to an alternative provider of similar services.
Should you ever wish to exercise one or more of these rights you should contact WHMCS at privacy@whmcs.com.
Third party websites
WHMCS' Website may, from time to time, contain links to and from the websites of WHMCS' partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that WHMCS do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Information to these websites.
What if you have questions, comments or complaints about this Privacy Policy?
Please feel free to direct any questions, comments or complaints regarding this Privacy Policy using the contact information listed in the Notices section of the WHMCS Terms of Use. It is WHMCS' policy to investigate and attempt to resolve all formal written complaints WHMCS receive concerning this Privacy Policy. WHMCS will cooperate with appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that cannot be resolved between WHMCS and an individual.
With effect from 25 May 2018, the General Data Protection Regulation (GDPR) enters force. Your rights under that new regulation are explained at https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/. Details of how you can exercise those rights are set out in 'Your Rights'. WHMCS have largely factored GDPR into this Privacy Policy but if you think WHMCS has failed to do so in any way, please notify WHMCS at privacy@whmcs.com.
Last Updated: 25th April 2018