This document contains two parts: Part I: Privacy Policy, which details how Digital Dragonz Canada ("Company", "we", "us", "our") collects, uses, and protects personal information under easycloudserver.com; and Part II: Data Processing Addendum (DPA), which governs our obligations as a Data Processor for our Reseller and Web Hosting clients.
Privacy Policy
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit easycloudserver.com, register for an account, or purchase our hosting services. We are committed to complying with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario provincial privacy laws, and international standards including the General Data Protection Regulation (GDPR).
1Information We Collect
We collect information that identifies, relates to, or describes you ("Personal Data"):
Account & Contact Data
Name, email address, phone number, billing address, business name, and account login credentials.
Financial & Payment Data
Payment details (e.g., credit card billing postal code, transaction IDs). Direct card details are processed securely by payment gateways (e.g., Stripe, PayPal); we do not store full payment card numbers on our servers.
Technical & Infrastructure Data
IP addresses, browser types, operating systems, domain names access logs, server metrics, and interaction data with our billing portal (WHMCS).
Hosted Client Data
Data uploaded to, stored on, or transmitted through our hosting servers by you or your end-users.
2Legal Basis & How We Use Your Information
We process your personal information for the following business purposes:
Service Provision
Setting up hosting accounts, processing payments, provisioning server resources, managing domain registrations, and providing technical support.
Communication
Sending service notices, invoice reminders, security alerts, software updates, and administrative notifications.
Security & Prevention
Detecting and preventing server abuse, fraudulent transactions, spam, unauthorized access, and cyberattacks.
Legal Compliance
Complying with statutory obligations, tax regulations, law enforcement subpoenas, and court orders.
3Data Sharing & Third-Party Service Providers
We do not sell, rent, or trade your personal information. We share data only with trusted third-party sub-processors strictly necessary to operate our business:
Upstream Infrastructure Providers
Data centers and cloud infrastructure providers hosting our hardware.
Domain Registrars
ICANN-accredited registries required to complete domain name registrations.
Payment Processors
Secure merchant gateways for billing and automated renewals.
Control Panel & Software Vendors
Control panel licensors (e.g., cPanel, WHMCS) for active software licensing and ticket management.
4Data Security & Storage Location
Storage Location
Primary data and control systems are maintained on servers located in Canada and trusted global data centers.
Security Controls
We implement industry-standard physical, technical, and administrative safeguards, including SSL/TLS encryption for transit data, secure server firewalls, routine vulnerability patching, and restricted administrative access.
5Data Retention & Your Rights
Retention
Account and billing records are retained for as long as your account remains active or as required by law (e.g., tax record requirements). Hosted data on terminated or cancelled accounts is permanently purged in accordance with our Terms of Service.
Your Privacy Rights
Depending on your jurisdiction (under PIPEDA, GDPR, or state laws), you have the right to:
- Access, review, or request a copy of your personal data.
- Request correction or updating of inaccurate personal data.
- Request deletion ("right to be forgotten") of non-essential personal data.
- Withdraw consent for non-essential communications (marketing emails).
Requests can be submitted to Info@digitaldragonz.com.
Data Processing Addendum (DPA)
This Data Processing Addendum ("DPA") forms an integral part of the Master Terms of Service between Digital Dragonz Canada ("Data Processor") and the Customer ("Data Controller" or "Reseller") who purchases hosting services on easycloudserver.com. This DPA applies to the processing of personal data stored on or passing through our hosting infrastructure on behalf of the Customer or the Customer's end-users.
1Definitions
"Customer Personal Data"
Any personal data processed by Digital Dragonz Canada on behalf of the Customer in performance of the hosting services.
"Controller" & "Processor"
Have the meanings defined under applicable data protection legislation (e.g., GDPR / PIPEDA).
"Sub-processor"
Any third-party provider engaged by Digital Dragonz Canada to assist in fulfilling host infrastructure processing tasks.
2Scope & Instructions
Roles
The Customer is the Controller (or Processor acting on behalf of end-user Controllers) of Customer Personal Data. Digital Dragonz Canada acts solely as a Data Processor.
Instructions
The Processor shall process Customer Personal Data exclusively for the purpose of providing web and reseller hosting services as authorized by the Terms of Service and this DPA, or as required by applicable law.
3Processor Obligations & Security
Confidentiality
Digital Dragonz Canada ensures that personnel authorized to handle hosting systems and Customer Personal Data are bound by strict confidentiality obligations.
Technical Safeguards
We maintain administrative, physical, and technical measures designed to protect Customer Personal Data against accidental loss, unauthorized access, destruction, or alteration.
Sub-processors
Customer grants general authorization to Digital Dragonz Canada to engage upstream sub-processors (e.g., data center facilities, hardware nodes, software licensors). We ensure all sub-processors are bound by data protection obligations consistent with this DPA.
4Personal Data Breach Management
In the event of a confirmed security incident resulting in unauthorized access, loss, or disclosure of Customer Personal Data hosted on our infrastructure:
We will notify the Customer via email without undue delay after becoming aware of the breach.
We will provide reasonable cooperation and details regarding the nature of the breach, affected systems, and mitigation measures taken.
5Data Deletion & Assistance
Deletion upon Termination
Upon account termination or expiration, the Processor shall delete or overwrite Customer Personal Data from active hosting environment storage, subject to standard automated system backup retention windows.
Audits & Assistance
Taking into account the nature of processing, the Processor shall provide reasonable assistance to the Controller to fulfill end-user data subject requests or demonstrate compliance, provided the Controller reimburses any extraordinary costs incurred.
@Contact Information for Privacy & DPA Inquiries
For any questions regarding this Privacy Policy or DPA, please contact our Data Protection Office: