Privacy Policy

1. Information we collect

2. How we use information

We may use personal information to:

• Create, authenticate, and administer customer accounts
• Process orders, provision services, register or transfer domains, and manage renewals
• Process payments, maintain invoices, prevent payment fraud, and resolve billing disputes
• Provide technical, sales, and customer support
• Send service notices, login or security alerts, renewal reminders, invoices, maintenance notifications, and policy updates
• Monitor performance, uptime, resource consumption, network traffic, and service reliability
• Detect and prevent unauthorized access, malware, spam, phishing, fraud, denial-of-service activity, and other abuse
• Diagnose errors, improve our websites and services, and understand aggregate usage trends
• Comply with applicable laws, court orders, regulatory requirements, tax and accounting obligations, and lawful requests
• Establish, exercise, or defend legal claims and enforce our Terms of Service, Acceptable Use Policy, and other agreements
• Send promotional messages where permitted. You may opt out of promotional messages, although essential service and billing communications will continue

We will not use personal information for materially different purposes without an appropriate legal basis or additional notice where required.

3. Payments

Payments may be processed by banks, mobile financial services, card processors, or other payment-gateway providers. Payment details may be collected directly by those providers under their own privacy policies. BahariHost generally receives information such as the payer name or number, transaction identifier, payment status, amount, and payment method rather than complete card or account credentials.

We may retain payment and invoice records as required for accounting, fraud prevention, dispute resolution, and legal compliance.

4. Domain registrations and WHOIS data

When you register or transfer a domain through BahariHost, we must share required registration information with the applicable registrar, registry operator, ICANN-related service, or country-code domain authority. Some domain-registration data may be displayed through WHOIS or registration-data services where required by registry rules or applicable law, although privacy or proxy services may be available for eligible domain extensions.

Domain registration data is also subject to the policies of the relevant registrar and registry.

5. How we share information

We do not sell or rent personal information.

We may disclose limited information to:

• Data centers, network and infrastructure providers, upstream hosting providers, backup providers, and security vendors
• Domain registrars, registry operators, WHOIS or registration-data providers, and certificate authorities
• Banks, payment gateways, fraud-prevention providers, and accounting service providers
• Email, SMS, communication, customer-support, analytics, content-delivery, and website service providers
• Professional advisers, auditors, insurers, and legal representatives where reasonably necessary
• Government authorities, courts, regulators, or law-enforcement agencies where required by applicable law or a valid legal process
• A buyer, investor, successor, or adviser in connection with a merger, acquisition, financing, restructuring, or transfer of all or part of our business, subject to appropriate confidentiality measures
• Other parties when you direct us to share information or give us consent

Service providers receive only the information reasonably necessary for their role and are expected to protect it appropriately. We may also disclose information when we reasonably believe it is necessary to protect our customers, systems, rights, property, safety, or the public; investigate fraud or abuse; or respond to an emergency.

6. International processing

Our customers, service providers, domain registries, payment processors, and infrastructure may be located in Bangladesh or other countries. As a result, information may be processed or stored outside your country. Where required, we take reasonable steps to use appropriate contractual, organizational, or technical safeguards for such transfers.

7. Cookies and similar technologies

We use necessary cookies to keep you signed in, maintain sessions, remember preferences, secure forms, and operate the shopping cart and client portal. We may also use analytics or performance cookies to understand website usage and improve our services.

You can control cookies through your browser settings. Blocking necessary cookies may prevent login, ordering, payment, support, or other website features from working correctly.

8. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures may include encrypted connections, access controls, authentication protections, logging, network filtering, malware detection, backups, and restricted staff access.

No internet transmission or storage system is completely secure. Customers are responsible for protecting their passwords, private keys, applications, and hosted accounts; applying software updates; maintaining appropriate backups; and promptly notifying us of suspected unauthorized access.

If we identify a security incident involving personal information, we will investigate and take appropriate action. Where required by applicable law, we will notify affected individuals or relevant authorities.

9. Data retention

We retain information only for as long as reasonably necessary to provide services, maintain business and security records, resolve disputes, enforce agreements, and comply with legal, tax, accounting, domain-registry, and regulatory obligations.

Retention periods vary by data type. For example:

• Account, order, invoice, payment, and domain-registration records may be retained after account closure where required for business or legal purposes
• Support communications may be retained to document requests, prevent fraud, and improve support
• Security, authentication, mail, network, and system logs are generally retained for limited operational periods unless they are required for an investigation or legal matter
• Customer Content may be deleted after service termination, cancellation, suspension, or expiry in accordance with our service terms
• Backup copies may remain temporarily until overwritten or expired through the normal backup cycle

Service cancellation or account deletion does not guarantee immediate deletion from every backup or legally required record. Customers should download required data before a service terminates.

10. Your choices and rights

Subject to applicable law and verification of your identity, you may request that we:

• Provide access to personal information associated with your account
• Correct inaccurate or incomplete account information
• Delete personal information that we are not legally or contractually required to retain
• Restrict or object to certain processing
• Provide available account data in a portable format where reasonably applicable
• Stop sending promotional communications

You can update certain information through the client portal. For other requests, open a support ticket or email support@baharihost.com. We may request additional information to verify account ownership and protect customer data. We may decline or limit a request where retention or processing is required for security, fraud prevention, billing, legal compliance, dispute resolution, or the rights of others.

11. Children's privacy

Our services are not directed to children under the age legally permitted to enter a binding service agreement. A parent, guardian, or authorized organization must manage any service intended for a minor. If you believe a child has provided personal information without appropriate authorization, contact us so we can review the matter.

12. Third-party links and customer websites

Our websites may link to third-party websites, applications, payment services, or social platforms. Their privacy practices are controlled by their own policies, and BahariHost is not responsible for those practices.

Websites and applications hosted by BahariHost are operated by our customers. BahariHost does not control how those customers collect or use information through their services. Privacy questions about a hosted customer website should normally be directed to that website's operator.

13. Legal requests and abuse investigations

We may preserve or disclose account, traffic, registration, or Customer Content information when required by applicable law, a valid court order, or another lawful process. We may also review and preserve relevant information to investigate spam, phishing, malware, fraud, intellectual-property complaints, unauthorized access, attacks, or violations of our policies.

We review requests for information and may reject or narrow requests that are invalid, overly broad, or not legally binding where permitted.

14. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices, or legal obligations. The revised version will be posted on this page with a new “Last updated” date. If a change materially affects how we handle personal information, we may also provide notice through the client portal, email, or another appropriate channel.

15. Contact us

For privacy questions, requests, or complaints, contact us using the details below. We will review privacy-related requests and respond within a reasonable period, subject to identity verification and applicable legal requirements.