Privacy Policy
Effective Date: October 5, 2026
WorkHost is a trade name under which sole proprietor Ihor Viktorovych Pidhainyi provides hosting, virtual server, domain name registration, and related services.
In this Privacy Policy, the term “WorkHost” refers to sole proprietor Ihor Viktorovych Pidhainyi.
This Privacy Policy sets out the procedures for the collection, use, storage, transfer, and protection of personal data of users of WorkHost websites, client areas, support systems, and other services.
For matters related to personal data, you can contact us at: support@workhost.pro
1. Scope of the Privacy Policy
This Privacy Policy applies to personal data collected by WorkHost when:
- visiting the WorkHost website;
- creating and using an account;
- placing and paying for orders;
- use of the client account;
- registration and management of domain names;
- use of hosting, servers, and other services;
- contacting support or using online chat;
- participation in the affiliate program;
- undergoing additional identification;
- use of third-party authentication methods;
- other interactions with WorkHost.
2. What Data WorkHost May Process
2.1. Registration and Contact Data
- first and last name;
- company name or sole proprietor;
- address;
- country, region, city, postal code;
- email address;
- phone number;
- tax number, VAT ID, or other details if required or voluntarily provided by the client.
2.2. Account Data
- client identifier;
- account settings;
- selected language and currency;
- login history;
- IP addresses;
- activity history in the client account;
- associated orders and services.
2.3. Order and Service Data
WorkHost may store information about:
- ordered services;
- pricing plans;
- servers and other resources;
- domain names;
- IP addresses;
- additional services;
- activation and termination dates of services;
- renewal history;
- configuration changes;
- other operations related to client service.
2.4. Payment and Billing Information
- invoices;
- payment amounts and currency;
- payment status;
- date and time of transaction;
- transaction identifier;
- payment method;
- refunds;
- other data necessary for accounting and payment records.
As a rule, WorkHost does not receive or store full bank card numbers, CVV/CVC codes, or other complete card details. Processing of such data is carried out by the respective payment service provider.
WorkHost may receive and store technical payment identifiers, masked details, last digits of the payment instrument, tokens, or other data that the payment provider transmits for processing payments, refunds, or recurring transactions.
3. Technical Data
When using WorkHost websites and services, the following may be automatically processed:
- IP address;
- date and time of request;
- browser type;
- device type;
- operating system;
- pages and resources accessed;
- server logs;
- error and security event data;
- network and other technical identifiers.
4. Approximate Location Determination
WorkHost may determine the approximate geographic location of a user based on their IP address.
Such data may be used for:
- automatic language selection;
- currency selection;
- determining available payment methods;
- applying regional settings;
- enforcing legal or regional restrictions;
- preventing fraud and abuse.
This mechanism does not involve obtaining precise GPS coordinates of the device.
5. Registration and Login via Third-Party Accounts
WorkHost may provide the ability to register or log in using third-party authentication providers.
In such cases, WorkHost may receive data transmitted by the respective service according to user permissions, for example:
- name;
- email address;
- account identifier;
- profile picture;
- other information to which the user has separately granted access.
WorkHost does not receive the password from the third-party account.
6. Online Chat, Support, and Internal CRM
- message text;
- name;
- email;
- other contact details;
- IP address;
- technical information;
- attached files;
- other materials voluntarily provided by the user.
7. Additional Client Identification
As a general rule, WorkHost does not require passport data, copies of documents, photos with documents, or video identification for standard account registration, order placement, or service use.
Additional identification is applied when performing operations that may significantly affect the rights of the account owner, domain name, or other service, as well as in cases of heightened risk of unauthorized actions or fraud.
7.1. Domain Name Transfer
- statement from the domain name owner;
- identity document of the owner.
Depending on the client’s country and available identification methods, the statement may be:
- signed with a qualified electronic signature or other acceptable electronic signature;
- signed by hand with subsequent provision of a scanned or photographic copy;
- executed in another manner agreed upon with WorkHost that allows confirmation of the applicant’s identity and their right to perform the respective operation.
Along with the statement, the client provides a copy or photograph of a valid identity document.
If the provided documents are insufficient for reliable identification or there are reasonable doubts regarding the applicant’s identity or their right to the domain name, WorkHost may additionally require:
- photograph of the person together with the identity document;
- video identification;
- confirmation of specific registration or contact details;
- other information reasonably necessary to confirm identity and the right to perform the respective operation.
WorkHost has the right to refuse to execute a domain name transfer until the identification procedure is completed.
7.2. Other Cases of Additional Verification
Additional identity verification may also be applied during:
- change of domain name owner;
- account access recovery;
- change of critical account data;
- operations that may significantly affect the rights of the legitimate service owner;
- reasonable suspicion of unauthorized access;
- detection of signs of fraud, use of others’ or false data.
Depending on the nature of the operation and risk level, WorkHost may require an identity document, signed statement, photograph of the person with the document, video identification, or other information necessary for verification.
WorkHost requests only the data and documents reasonably necessary for the specific verification.
Additional identification materials are stored only for the period necessary to conduct the verification and resolve directly related disputes or security issues, after which they are deleted unless there is another lawful basis for their continued storage.
8. Domain Name Registration and Management
For registration, renewal, transfer, or other management of a domain name, WorkHost may transmit necessary client data to:
- the registrar;
- the registry of the respective domain zone;
- the technical operator;
- another party whose participation is necessary to perform the respective domain operation.
The scope of transmitted data is determined by the rules of the respective domain zone, registrar, and the nature of the operation.
9. Purpose of Personal Data Processing
WorkHost may process personal data for:
- creating and maintaining an account;
- concluding and executing a contract;
- processing orders;
- activating and managing services;
- processing payments and refunds;
- generating invoices;
- registering and managing domains;
- operating support services;
- client identification;
- ensuring security;
- preventing fraud;
- detecting and stopping abuse;
- technical diagnostics;
- fulfilling legal and tax obligations;
- maintaining accounting and operational records;
- resolving disputes;
- protecting the rights of WorkHost and clients;
- analytics and service improvement;
- marketing purposes, if there is an appropriate legal basis.
10. Legal Basis for Processing
Depending on the circumstances, personal data may be processed on the basis of:
- necessity to conclude or execute a contract;
- compliance with legal requirements;
- user consent;
- necessity to protect the rights and legitimate interests of WorkHost or other persons;
- necessity to ensure security and prevent fraud;
- other grounds provided by applicable law.
For users subject to GDPR, the respective grounds apply in accordance with its requirements.
11. Cookies and Similar Technologies
WorkHost may use cookies, browser local storage, and other similar technologies for:
- ensuring website operation;
- authorization;
- saving settings;
- ensuring security;
- determining the source of affiliate referrals;
- web analytics;
- conversion measurement;
- advertising and marketing functions.
Non-essential analytical and advertising technologies are used in accordance with applicable requirements for obtaining user consent.
Detailed information about such technologies may be provided in a separate Cookie Policy and through respective cookie settings.
12. Affiliate Program
When following an affiliate link, WorkHost may use a cookie or other technical identifier to determine the partner from whom the referral or order originated.
Such data is used for tracking affiliate referrals, calculating commissions, and preventing abuse of the affiliate program.
13. Analytics and Advertising
WorkHost may use third-party systems for:
- web analytics;
- conversion measurement;
- advertising statistics;
- remarketing;
- evaluating advertising campaign effectiveness.
When such systems are used, technical data, cookie identifiers, IP addresses, information about visited pages and events may be transmitted to the respective providers.
If applicable law requires prior consent for such processing, the respective technologies are activated after obtaining such consent.
14. Service and Marketing Messages
WorkHost may send service messages necessary for providing and managing services, including:
- invoices;
- renewal reminders;
- activation notifications;
- service suspension or termination notifications;
- security notifications;
- support responses;
- other information directly related to the account or services.
Such messages are not marketing communications.
WorkHost may also use contact details to send information about new services, special offers, promotions, and other marketing materials if there is an appropriate legal basis and, when necessary, user consent.
Users may opt out of marketing messages at any time.
Opting out of marketing communications does not affect receipt of service messages.
15. To Whom Personal Data May Be Transferred
WorkHost does not transfer clients’ personal data to third parties except when such transfer is necessary to perform a specific operation, provide a requested service, ensure the operation of a respective function, comply with legal requirements, or protect the legitimate interests of WorkHost and its clients.
Depending on the nature of the specific operation, personal data may be transferred to:
- payment institutions and payment service providers—to the extent necessary for processing payments, refunds, and related operations;
- registrars, domain zone registries, and other authorized participants in the domain infrastructure—to the extent necessary for registration, renewal, transfer, or other management of a domain name;
- authentication providers—if the user chooses to log in or register via a third-party account;
- fraud prevention and information security services—to the extent necessary for risk assessment, fraud detection, abuse, and bypass blocking;
- electronic messaging and communication services—only to the extent necessary to deliver the respective message;
- competent state, judicial, or law enforcement authorities—in cases and procedures provided by law.
Transfer is carried out only to the extent necessary for the specific purpose.
16. Anti-Fraud and Abuse Prevention
WorkHost may process personal and technical data to detect:
- fraudulent orders;
- bypass of blocks;
- use of false data;
- unauthorized access;
- repeated violations;
- attacks and other threats to infrastructure.
Anti-fraud records may contain:
- associated accounts;
- email;
- IP addresses;
- network identifiers;
- domains;
- technical identifiers;
- payment identifiers;
- information about confirmed violations.
Such records may be stored without a predetermined deletion date if their continued storage is necessary to prevent repeated fraud, bypass of blocks, abuse, or to protect WorkHost and its clients.
Information about confirmed fraudulent activity may be transmitted to specialized external anti-fraud systems and databases.
17. Transfer of Data to State and Law Enforcement Authorities
WorkHost may disclose personal data to law enforcement, judicial, regulatory, or other competent state authorities if such transfer is carried out in accordance with the law on the basis of a properly executed lawful request, court decision, order, warrant, or other legally binding act.
WorkHost does not transfer the full array of personal data solely on the basis of an informal request unless the respective authority has the right provided by law to obtain it.
Only the volume of information necessary to fulfill the specific lawful request is transferred.
18. International Data Transfer
Within specific operations, personal data may be transferred or processed outside Ukraine if the respective service chosen by the user or necessary to perform a specific operation operates in another jurisdiction.
This may concern, in particular, payment operations, domain services, external authentication, anti-fraud checks, analytics, advertising, or electronic communications.
International transfer is carried out only to the extent necessary for the respective purpose and in accordance with applicable personal data protection requirements.
19. Retention Periods
Unless a different period is required by law or specific circumstances, WorkHost applies the following indicative periods:
Account data, order history, invoices, and transactions—up to 2 years after termination of client service.
Financial, tax, and accounting documents may be stored longer if the respective period is established by law.
Support tickets—up to 2 years.
Online chat history and internal CRM records related to client support—up to 2 years.
Server logs, access logs, and IP logs—up to 1 year.
Additional identification materials—for the period necessary to complete the verification and resolve directly related issues.
Anti-fraud records—for the period necessary to prevent repeated abuse, without a predetermined automatic deletion date.
Data may be stored longer in case of:
- dispute;
- fraud investigation;
- legal proceedings;
- lawful request from a competent authority;
- necessity to protect the rights of WorkHost or the client;
- other obligation provided by law.
20. Deletion of Personal Data
A client may submit to WorkHost a written or properly executed electronic request for deletion of their personal data.
WorkHost deletes data that is no longer necessary for providing services, fulfilling legal obligations, ensuring security, or other lawful purposes.
Deletion may be performed immediately after verification of the request’s validity if there is no lawful basis for continued storage of the respective data.
Data that is necessary for the following is not subject to mandatory immediate deletion:
- accounting or tax records;
- compliance with legal requirements;
- dispute resolution;
- protection of the rights of WorkHost or the client;
- fraud prevention;
- execution of a court decision or other lawful request.
21. User Rights
Within the limits established by applicable law, a user has the right to:
- know the sources of collection and location of their personal data;
- know the purpose of their processing;
- receive information about the processing of their data;
- obtain access to their personal data;
- request correction of inaccurate or outdated data;
- in cases provided by law, request deletion of data;
- withdraw consent if processing is based on consent;
- object to certain types of processing if such right is provided by law;
- file a complaint with a competent authority.
Users subject to GDPR may also have rights to restriction of processing, data portability, and other rights provided by GDPR.
22. Protection of Personal Data
WorkHost applies organizational and technical measures aimed at protecting personal data from:
- unauthorized access;
- loss;
- destruction;
- alteration;
- unlawful disclosure;
- unlawful use.
Access to personal data is granted only to the extent necessary to perform the respective functions.
However, no information system or method of data transmission over the Internet can guarantee absolute security.
23. Third-Party Data
If a client transmits to WorkHost personal data of another person, the client confirms that they have lawful grounds for such transfer.
A client must not transmit to WorkHost personal data of third parties unless such transfer is necessary for using the respective service.
24. Changes to the Policy
WorkHost may amend this Policy in connection with changes in legislation, service functionality, technologies, or methods of personal data processing.
The current version of the Policy is published on the WorkHost website.
A new version applies from the moment of its publication unless otherwise expressly stated in the Policy itself or required by law.
25. Contact Information
For questions regarding processing, access, correction, or deletion of personal data, users may contact:
- Sole Proprietor Pidhainyi Ihor Viktorovych
- Commercial name: WorkHost
- Support and contact email: support@workhost.pro
- Phone: +38 050 062 17 77