Your data.
Privacy Policy.

01 Data Controller

Shulker Hosting ("Shulker", "we", "us") is the data controller responsible for your personal data.

For any data protection inquiries, please contact: [email protected]

02 Introduction

At Shulker Hosting, accessible at https://shulker.in, your privacy is a top priority. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By accessing or using our services, you consent to the terms outlined in this Privacy Policy.

03 Data Collection

We collect the following information when you create an account or use our services:

• Name: Provided during account registration.
• Email Address: Used for account communication and notifications.
• Payment Details: Processed securely through Razorpay and not stored on our servers.
• IP Address: Collected for security and service optimization purposes.
• Service Usage Data: Information about your interaction with our services.

04 Data Usage

The personal data we collect is used solely for the purpose of providing and maintaining our services, including:

• Managing hosting services and user accounts.
• Sending important service-related notifications.
• Ensuring compliance with legal and regulatory requirements.
• Improving service quality and performance.
• Preventing fraud and ensuring security.

We do not use your data for advertising or marketing purposes, and it is not shared with any third parties except as specified in Section 6.

05 Data Storage and Geographic Location

Your data is securely stored with the following geographic considerations:

• Users from Europe: Data is stored on servers located in Frankfurt, Germany.
• Other Users: Data is stored on servers located in India.
• Backup Data: May be stored in multiple locations for redundancy and disaster recovery purposes.

All data transfers comply with GDPR requirements and appropriate safeguards are in place.

06 Third-Party Service Providers

We use trusted third-party service providers to deliver our services:

• OVH: Infrastructure hosting provider with data centers in Europe and worldwide.
• Razorpay: Payment processing service. Razorpay's privacy policy governs the handling of your payment details.
• Custom Data Centers: Our proprietary infrastructure for specialized hosting needs.

All third-party providers are GDPR-compliant and operate under strict data processing agreements.

07 Data Retention

We retain personal data only as long as necessary to:

• Provide our services to you.
• Comply with legal obligations.
• Resolve disputes.
• Enforce our agreements.

Retention Periods:

• Active Accounts: Data retained while account is active.
• Backup Data: Retained for 30–90 days depending on service type.
• Log Data: Retained for up to 12 months for security monitoring.
• Inactive Accounts: Data deleted after 24 months of inactivity.

08 Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Update or correct inaccurate personal data.
• Right to Erasure: Request deletion of your personal data (processed within 30 days).
• Right to Restriction: Request restriction of processing under certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at [email protected].

Account Deletion: Deletion requests are processed within a reasonable timeframe, typically within 30 days of verification.

09 Cookies and Tracking

We use only essential cookies required for basic website functionality, including:

• Session cookies for login functionality.
• Security cookies for protection against CSRF attacks.
• Preference cookies for user settings.

We do not use:

• Tracking cookies.
• Advertising cookies.
• Analytical cookies (unless explicitly consented).
• Third-party marketing cookies.

10 Data Security

We implement comprehensive security measures including:

• Encryption of data in transit (TLS 1.2+) and at rest.
• Firewalls and intrusion detection systems.
• Regular security audits and vulnerability assessments.
• Access controls and authentication mechanisms.
• Regular security training for our team.

In the event of a data breach, we will notify affected users and relevant supervisory authorities within 72 hours as required by GDPR.

11 International Data Transfers

When transferring data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs).
• Adequacy decisions where applicable.
• Binding Corporate Rules for intra-group transfers.

12 Complaint Rights

You have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.

For users in the EEA, you may contact your national data protection authority. Our lead supervisory authority is:

13 Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal and regulatory reasons. Significant changes will be communicated to you via email or through our services.

The "Last Updated" date at the top of this page indicates when this policy was last revised. Your continued use of our services signifies your acceptance of the updated terms.

14 Contact Information

For any questions, concerns, or to exercise your data protection rights, please contact our Data Protection Officer: