Privacy Policy

Last updated: September 2026

1. Data Controller

Controller:: enginerIT
Address:: Mas de Klé 2, 7 rue Isaac Newton, 34110 Frontignan (Hérault), France
Privacy contact:: privacidad@enginerit.com

2. Data We Collect

We collect the following categories of personal data:

Account data: Name, email address, password (encrypted), phone number (optional).
Payment data: Processed by Stripe. We do not store credit card numbers. Stripe acts as an independent data controller for payment processing.
Technical data: IP address, browser type, operating system, access logs, for security and service delivery.
Contact form data: Name, email, message content, submitted voluntarily.
Service usage data: Hosting resource usage, bandwidth, storage, for billing and capacity planning.

3. Legal Basis for Processing

Contract performance (Art. 6.1.b GDPR): Processing necessary for providing hosting services you have contracted.
Consent (Art. 6.1.a GDPR): For contact form submissions, newsletters, and non-essential cookies.
Legitimate interest (Art. 6.1.f GDPR): Security monitoring, fraud prevention, service improvement.
Legal obligation (Art. 6.1.c GDPR): tax and accounting records required of enginerIT by French law.

4. Data Retention

Account data: for the duration of the contract plus five years, under the accounting obligations applying to enginerIT.
Billing data: ten years, under French accounting law (art. L123-22 of the Code de commerce).
Contact form data: 12 months from submission, unless a commercial relationship is established.
Access logs: 12 months (LSSI-CE Art. 12).
Cookies: As specified in our Cookie Policy.

5. Data Recipients

Your data may be shared with the following third parties, solely for the purposes described:

Stripe, Inc. — Payment processing (US, EU-US Data Privacy Framework certified).
Let’s Encrypt (ISRG) — SSL certificate issuance (domain names only).
Cloudflare Turnstile — Spam and abuse prevention on the contact form. See Cloudflare’s privacy policy.
Telegram — Delivery of contact-form messages to Hostbrid’s support team. The name, email address, reason and message content are transmitted. See Telegram’s privacy policy.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Your Rights (GDPR Articles 15-22)

You have the following rights regarding your personal data:

Right of access: Obtain confirmation of whether we process your data and receive a copy.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): Request deletion of your data when no longer necessary.
Right to restriction: Request limitation of processing under certain circumstances.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interest.
Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to privacidad@enginerit.com from your account address. If that is not enough to identify you, we will ask for the minimum needed to check who you are. We answer within one month (GDPR art. 12.3).

7. Supervisory Authority

enginerIT is established in France, so the lead supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL). If you live in Spain you may equally complain to the Spanish Data Protection Agency (AEPD), or to the authority of your country of residence (GDPR art. 77):

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including: encrypted data transmission (TLS/SSL), encrypted password storage, access controls, regular security audits, and intrusion detection systems.

9. Changes to This Policy

We may update this privacy policy periodically. Any significant changes will be communicated via email or through a notice on our website. The date of the last update is indicated at the top of this page.

We use cookies