PRIVACY POLICY - CPANEL


  1. OUR APPROACH TO PRIVACY
    1. cPanel is committed to providing information to its customers about how we use certain information. This Privacy Policy describes the ways in which cPanel, L.L.C. (cPanel, we or our) collects, uses, maintains and discloses information collected from our customers (collectively, you or your) through the use of the cPanel Product and visitors to our websites.
    2. Contacting us about privacy related questions and issues:
      1. General questions: privacy [at] cpanel.net
      2. Requests to know the personal information we collect: click here
      3. Requests to delete personal information we have collected: click here
      4. To opt out of the sale of information: click here
      5. Our toll free number: 844-427-2635
      6. If you are using an agent to make a request under our privacy policy: click here
    3. Our Privacy Policy supplements, but does not replace, any other agreements or policies applicable to you including our Terms of Service (TOS), PartnerNOC Agreement and Acceptable Use Policy (AUP). You may find these policies useful in learning how we handle information.
    4. cPanel complies with the EU-U.S Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. cPanel has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the proessing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles the Principles govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

      cPanel complies with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. cPanel has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. cPanel has certified to the U.S.

      Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework program Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
  2. WHAT OUR PRIVACY POLICY COVERS
    1. This Privacy Policy sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you (Personal Information) and information regarding our use of cookies and similar technologies.
    2. cPanel provides software and services which allows customers to manage their web hosting activities via hosting automation software (cPanel Product) made available via our website located at https://cpanel.net (Website) or through those licensed to distribute the cPanel Product, or those who are legally entitled to use the cPanel Product (Authorized Distributors).
    3. This Privacy Policy applies to the cPanel Product, our Website, and all Corporate Sites [1].
    4. Before accessing our Website or using the cPanel Product, please ensure that you have read and understood this Privacy Policy.
    5. With the exception of individuals who use the cPanel Product as customers of our Authorized Distributors (as described at 3.1 below), cPanel is the controller responsible for the Personal Information we hold about you.
  3. PERSONAL INFORMATION WE COLLECT ABOUT YOU AND HOW WE USE IT
    1. We process Personal Information about the following types of individuals:
      1. individuals who are our direct customers;
      2. where our customer is a business or similar entity, individuals who are our customers’ employees, agents and other representatives; and
      3. where the cPanel Product is licensed through an Authorized Distributor, individuals who are customers of our Authorized Distributors.

      Please note that we process information about individuals who are customers of our Authorized Distributors in the same way as individuals who are our direct customers. However, we are not the controller of that information; the relevant Authorized Distributor will have its own privacy policy which will apply and any questions should be directed to that Authorized Distributor.

    2. We collect Personal Information about you when you voluntarily submit information directly to us when you access our Website or use the cPanel Product. This can include information you provide to us when you register for an account, fill in a form, correspond with us via the Website, phone, email or otherwise, subscribe to our mailing lists, newsletters or other forms of marketing communications, respond to surveys, agree to be a beta tester or use some other feature of the cPanel Product as available from time to time.
    3. Schedule 1 describes categories of Personal Information we collect and how we use that Personal Information. When we process Personal Information, the legal basis we rely on for this activity is also set out. If Personal Information is provided to third parties, that fact is stated. Finally, Schedule 1 also sets out information as to how we determine applicable retention periods. This schedule contains categories of Personal Information that we have collected since April 2018.
    4. Regardless of whether you license the cPanel Product directly from us, or through Authorized Distributor, we automatically collect certain Personal Information indirectly about how you access and use the cPanel Product and information about the device you use to access the cPanel Product.
    5. Schedule 2 sets out the categories of Personal Information we collect about you automatically and how we use that information. The schedule also lists the legal basis which we rely on to process the Personal Information, the categories of recipients of the Personal Information and information as to how we determine applicable retention periods.
    6. We may link or combine the Personal Information we collect about you and the information we collect automatically. This allows us to provide you with a personalized experience regardless of how you interact with us.
    7. We may anonymize and aggregate any of the Personal Information we collect (so that it does not directly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the cPanel Product and developing new products and features. We may also share such anonymized information with others.
  4. MARKETING AND ADVERTISING
    1. From time to time we may contact you with relevant information about the cPanel Product. Most messages we send will be by email. For some messages, we may use Personal Information we collect about you to help us determine the most relevant information to share with you.
    2. If you do not want to receive such messages from us, you will be able to tell us by selecting certain boxes on forms we use when we first collect your contact details. You can change your marketing preferences by clicking on the unsubscribe link at the bottom of our emails, or following the “update preferences” on these emails.
  5. APPLYING FOR A JOB THROUGH OUR SITE

    If you apply for a job through the Website, we, or a human resources company assisting us, may ask you to provide certain self-identifying information in conjunction with laws and regulations enforced by federal, state, and local regulatory agencies. Providing self-identifying information is voluntary, but if you do provide us with that information, we may submit it to federal, state, and local regulatory agencies, upon legal compulsion, for business-related purposes, responding to information requests, fulfilling regulatory reporting requirements and defending against employment related complaints.

  6. STORING AND TRANSFERRING YOUR PERSONAL INFORMATION
    1. Security. We implement and maintain appropriate technical and organizational measures to protect your Personal Information against accidental or unlawful destruction, loss, change or damage. All Personal Information we collect from the cPanel Product will be stored on secure servers and will be protected by SSL encryption technology. All electronic transactions entered into via our Website will be protected by SSL encryption technology.

      Where you register for an account on the cPanel Product, you are responsible for maintaining your account’s security as explained in our TOS. If you are not a direct cPanel customer, information about your account’s security may be explained in the contract between you and the Authorized Distributor from whom you license the cPanel Product.

    2. International Transfers of your Personal Information. The Personal Information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third party service providers have operations. If you are located in the European Union (EU), your Personal Information will be processed outside of the EU, including in the United States; these international transfers of your Personal Information are made pursuant to appropriate safeguards, such as the EU-US Privacy Framework, or, if applicable, Standard Contractual Clauses. If you wish to inquire further about these safeguards used, please contact us using the details set out at the end of this Privacy Policy.
    3. Disclosure to Government Agencies and Law Enforcement. Our Transparency Report discusses the standards we use to evaluate disclosures to governments and law enforcement agencies. It is incorporated into this Privacy Policy.
  7. CERTAIN RIGHTS THAT APPLY IF YOU ARE LOCATED IN THE EU
    1. In accordance with applicable privacy law, you have the following rights regarding Personal Information covered by the GDPR that we hold:
      1. Right of access. The right to obtain access to your Personal Information.
      2. Right to rectification. The right to obtain rectification of your Personal Information without undue delay where that Personal Information is inaccurate or incomplete.
      3. Right to erasure. The right to obtain the erasure of your Personal Information without undue delay in certain circumstances, such as where the Personal Information is no longer necessary in relation to the purposes for which it was collected or processed.
      4. Right to restriction. The right to obtain the restriction of the processing undertaken by us on your Personal Information in certain circumstances, such as where the accuracy of the Personal Information is contested by you, for a period enabling us to verify the accuracy of that Personal Information.
    2. You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.
    3. If you wish to exercise one of these rights, please contact us using the contact details at the end of this Privacy Policy.
    4. For data that is received or transferred pursuant to the Privacy Framework, we have agreed to the Privacy Framework’s principles of Notice, Choice and Onward Transfer. Pursuant to Privacy Framework:
      1. Notice: Schedules 1 and 2 describe the Personal Information we collect about you, how we use it, and the types of third parties with whom we share it.
      2. Choice: Disclosure to third parties of Personal Information covered by Privacy Framework is set out in Schedules 1 and 2. For Personal Information covered by Privacy Framework, and which is not required for the operation of the Product or Services, we will provide you with an opportunity to decline to have us disclose this Personal Information to third parties for a purpose that is different than the one for which it was originally collected. Email marketing is opt-in, lists are segmented by reason for collection, and recipients may remove their names from email lists by unsubscribing.
      3. Onward Transfer: When cPanel discloses information to third parties to provide functions on its behalf, cPanel will take appropriate measures to protect the privacy of the Personal Information it transfers. These measures are set out in paragraph 6.1. This Personal Information will only be shared with third parties to the extent reasonably necessary for them to perform the services contracted for, or when cPanel must comply with applicable law. Third parties will not be authorized by us to process Personal Information in any other way. cPanel is responsible for the processing of Personal Information that it transfers to third parties acting as an agent on its behalf.
      4. If you wish to exercise one of these rights, please contact us using the contact details at the end of this Privacy Policy.
    5. Privacy Framework Jurisdiction and Enforcement
      1. As part of our participation in the Privacy Framework, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
      2. In compliance with the EU-US Data Privacy Framework Principles, cPanel commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles. European Union, Swiss and United Kingdom individuals with DPF inquiries or complaints should first contact cPanel using the contact information at the end of this Policy.
      3. cPanel has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers for more information and to file a complaint. This service is provided free of charge to you.
      4. Finally, and as a last resort, if your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2
  8. COOKIES AND SIMILAR TECHNOLOGIES
    1. The cPanel Product and Corporate Sites use cookies and similar technologies to distinguish you from others. This helps us to provide you with a good experience when you use the cPanel Product or browse our Website and also allows us to improve both the cPanel Product and Website.
    2. These items allow for personalization of your experience by saving your information such as user ID and other preferences. A cookie is a small data file that we transfer to your device's hard disk (such as your computer or smartphone) for record-keeping purposes. A list of the cookies we use and other relevant information is set out in Schedule 3.
    3. We use the following types of cookies:
      1. Strictly necessary cookies. These are cookies that are required for the essential operation of our Corporate Site and products such as to authenticate users and prevent fraudulent use.
      2. Analytical/performance cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our Corporate Site and products when they are using it. This helps us to improve the way our Corporate Site and products work, for example, by ensuring that users are finding what they are looking for easily.
      3. Functionality cookies. These are used to recognize you when you return to our Corporate Site and products. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region), and your username.
      4. Targeting cookies. These cookies record your visit to our Website, the pages you have visited and the links you have followed. We will use this information to make our Website, and the advertising displayed on it, more relevant to your interests. We may also share this information with third parties for this purpose.

      Please be aware that third parties (for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

    4. The items we use that are covered by this paragraph are designed to help you get the most from the Corporate Sites and products but if you do not wish to receive them, most browsers allow you to change your settings. Please note that if you choose to refuse some of these technologies you may not be able to use the full functionality of our Website and Products. Should you configure your browser to block all cookies, you will not be able to access our products. These settings will typically be found in help section of your browser.
  9. SELF SERVICE PORTALS

    cPanel may provide blogs, chat features and moderated and unmoderated FAQs on the Website (Self Service Portal). When you interact with a Self Service Portal, the information you provide may be read by cPanel employees. In addition, if you provide information to a Self Service Portal, other than method of contact operated by cPanel, any Personal Information you submit may be seen by third parties outside of cPanel’s control.

  10. BETA TESTING

    Some products may be provided to you as “Beta” products. The term “Beta” is defined in our End User License Agreement. The license of Beta Products from cPanel may require providing us with additional Personal Information. The Personal Information we collect from the license of Beta Products is set out in Schedule 1. Should you choose not to provide Personal Information to us, do not license or install the Beta Products.

  11. LINKS TO THIRD PARTY SITES

    The cPanel Product may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

  12. OUR POLICY TOWARDS CHILDREN

    The cPanel Product is not directed at persons under 16 and we do not knowingly collect Personal Information from children under 16. If you become aware that your child has provided us with Personal Information, without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.

  13. HOW TO REQUEST INFORMATION ABOUT THE PERSONAL INFORMATION WE COLLECT
    1. Customers should fill out a request by logging in through their manage2 or store account. Customer’s identity will be verified based on authenticating through manage2 or your store account.
    2. Non-customers may fill out a request form by clicking on this link: https://go.cpanel.net/privacy-request. A non-customer’s identity will be verified based on information provided and transmitted to a credit bureau for verification.
  14. HOW TO REQUEST THAT WE DELETE PERSONAL INFORMATION
    1. Customers should fill out a request by logging in through their manage2 or store account. Customer’s identity will be verified based on authenticating through manage2 or your store account. Your request to delete will be confirmed separately.
    2. Non-customers may fill out a request form by clicking on this link: https://go.cpanel.net/privacy-request or by calling our toll free number. A non-customer’s identity will be verified based on information provided and transmitted to a credit bureau for verification. Your request to delete will be confirmed separately.
    3. We may retain and continue to use Personal Information as permitted by this Privacy Policy and applicable law, including, for example, as necessary to complete a transaction you have requested or fulfil our contractual obligations to you, and to detect security incidents, fraud, or illegal activity.
  15. INTENTIONALLY RESERVED
  16. USING AN AGENT TO MAKE A REQUEST UNDER OUR PRIVACY POLICY

    If you seek to have an agent make a request under Paragraphs 12, 13, or and 14 above click here: https://go.cpanel.net/privacy-request. Note that customers are prohibited from sharing passwords to Manage2 and all other cPanel operated products and services, and should create a separate account for verified agents to avoid compromising their accounts.

  17. CHANGES TO THIS POLICY

    We may update this Privacy Policy from time to time. If no updates have been made to this Privacy Policy for twelve months, it is automatically reviewed. When we change this Privacy Policy in a material way, we will update the "last modified" date at the end of this Privacy Policy and provide notice to you through the cPanel Product. Because the individual who accesses the cPanel Product may be different than the person who has authority to license the cPanel Product from us, it is important that the person with licensing authority review this Privacy Policy regularly. Changes to this Privacy Policy are effective when they are posted on this page.

  18. NOTICE TO YOU

    If we need to provide you with information about something, whether for legal, marketing or other business related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this by email, by placing a notice on our Website, as well as contacting the email address provided to us by you, or the Authorized Distributor. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this Privacy Policy.

  19. CALIFORNIA RESIDENTS – YOUR CALIFORNIA PRIVACY RIGHTS
    1. Pursuant to California Civil Code Section 1798.83, residents of the State of California have the right to request from companies conducting business in California certain information relating to third parties to which the company has disclosed certain categories of Personal Information during the preceding year for the third parties’ direct marketing purposes. Alternatively, the laws provides that a company may comply, as cPanel does, by disclosing in its Privacy Policy that it provides consumers choice (opt-out or opt-in) regarding sharing Personal Information with third parties for those third parties’ direct marketing purposes, and information on how to exercise that choice. As stated above in this Privacy Policy, cPanel provides you choice prior to sharing your Personal Information with third parties for their direct marketing purposes. If you do not opt-in or if you choose to opt-out at the time cPanel offers that choice, cPanel does not share your information with that identified third party for its direct marketing purposes.
  20. SWEEPSTAKES, CONTESTS AND PROMOTIONS

    We may offer sweepstakes, contests, and other promotions (Promotion) that may require registration. By participating in a Promotion, you are agreeing to the official rules that govern that Promotion, which may contain specific requirements of you by, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, your Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion in connection with winner selection, prize fulfilment, and as required by law or permitted by the Promotion’s official rules, such as on a winners list.

  21. CONTACTING US
    1. Questions, comments and requests regarding this Privacy Policy are welcome and should be addressed to the General Counsel at privacy [at] cpanel.net.
    2. This Privacy Policy was last modified on October 6, 2023. It was last reviewed on October 6, 2023.
  22. ANALYTICS IN GENERAL
    1. The cPanel Product contains a number of analytical tools. This Privacy Policy covers tools that apply to Personal Information.
    2. If you are a customer, you may view all of the analytical tools used by the cPanel Product here (The Data We Use Description): https://go.cpanel.net/analytics
      1. Analytics that record the configuration of the server on which cPanel is used are required to be enabled. Licensees of cPanel software, and their users may not disable this feature. In “The Data We Use Description” this is referred to as “Configuration Analytics.”
      2. (b) Analytics that record the use of the cPanel Interface are optional – but are enabled by default. They may be disabled by the licensee of cPanel software and the end user. In “The Data We Use Description” this is referred to as “Interface Analytics.” Information about how to disable Interface Analytics may be found here https://go.cpanel.net/analytics.
        1. Interface Analytics collects the “company ID” used by the cPanel Software. cPanel may analyze this data to determine how a company uses the cPanel interface.
    3. Analytics Tools and Marketing Services In Use
      1. cPanel & WHM and all Corporate Sites use Analytics tools and Marketing services to understand the performance of our products and sites. Your participation in these tools and services are based on your consent, which you may update at any time.
      2. Google Analytics is enabled based on end user participation consent. Information collected by cPanel using Google Analytics is retained for up to 26 months after your most recent activity.
        1. To understand the information collected by Google Analytics, please follow this link.
      3. Mixpanel is enabled based on end user participation consent. Information collected by cPanel using Mixpanel is retained for 5 years in the case of event tracking, and indefinitely in the case of user profile information.
        1. To understand the information collected by Mixpanel, please follow this link.
      4. The following information is collected by cPanel, retained by cPanel and transmitted to Google Analytics and Mixpanel:
        1. cPanel & WHM
          1. Audience information - This includes de-identified information about you, including your geographic location, preferred interface languages, how often you return, and what devices you use to access cPanel & WHM.
          2. Acquisition information - This includes information about the path you took to arrive at your cPanel & WHM account, if you performed a search in order to find your account, if you clicked an advertisement which took you to your account, or if you participated in any social media or marketing campaigns which enabled you to arrive at your account.
          3. Behavior information - This includes information about what features of your cPanel & WHM you use regularly and which paths through cPanel & WHM you took.
          4. Conversion information - This includes information about what goals you have achieved using cPanel & WHM.
        2. Corporate Sites
          1. Audience information - This includes anonymized information about you, including your geographic location, preferred interface languages, how often you return, and what devices you use to access the corporate sites.
          2. Acquisition information - This includes information about the path you took to arrive at the corporate sites, if you performed a search in order to find the corporate sites, if you clicked an advertisement which took you the corporate sites, or if you participated in any social media or marketing campaigns which enabled you to arrive the corporate sites.
          3. Behavior information - This includes information about what features of the corporate sites you use regularly and which paths through the corporate sites you took.
          4. Conversion information - This includes information about what goals you have achieved using the corporate sites.
        3. Google Remarketing
          1. The corporate sites use Google Remarketing, or re-engagement, tools. These tools use cookies or other similar technologies (Remarketing Cookies) to serve cPanel’s advertising on websites not owned by cPanel. To do that, cPanel and third parties not affiliated with cPanel use Remarketing Cookies to track you across multiple websites and serve you with advertising based on your past visits to our corporate sites.
          2. You can opt-out of Remarketing Cookies by:
            1. visiting Google’s “ad settings” here: https://adssettings.google.com/
            2. Visiting the Network Advertising Initiative’s “opt out page:” here: https://optout.networkadvertising.org/?c=1
            3. Or changing your device settings to block Remarketing Cookies
    4. Disabling your participation in Analytics Tools and Marketing Services
      1. In cPanel & WHM
        1. In cPanel & WHM, you control your participation in Interface Analytics tools and services. To find instructions for how to manage your participation, please click here - https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-analytics/.
      2. In Corporate Sites
        1. When using our corporate sites, you control your participation in analytics tools and services by locating the "Manage Cookies" preference and allowing or declining cookies. Declining cookies will disable your participation.
    5. Requesting Deletion of Information Transmitted to Google by Google Analytics and to Mixpanel, Inc by Mixpanel
      1. To request the disclosure of your information, deletion of your information, or exercise any other rights afforded to you by the relevant statutes listed in other areas of this Privacy Policy, please refer to Section 1.2.
      2. For the Google Analytics deletion API, please use this link https://developers.google.com/analytics/devguides/config/userdeletion/
      3. For the Mixpanel deletion API, please use this link https://developer.mixpanel.com/reference/delete-profile
Version 10-06-2023

SCHEDULE 1 – PERSONAL INFORMATION WE COLLECT

Your personal information may be collected when you use the cPanel & WHM or WP Squared products, beta products, the store, our ticketing system. It may also be collected when registering for an event or for general inquiries.

Category of Personal Information How we use it Legal basis for the processing Categories of recipients Retention period Categories shared with third parties
Contact information and basic personal details. Such as your name, phone number, address, domain name, e-mail address, relationship to cPanel, web hosting products used, country, server count, industry, and, where applicable, employment information such as name of your company and the nature of your role. We use this information to:
  • communicate with you, sending statements and invoices, communications, news, alerts and marketing communications;
  • deal with inquiries and complaints made by or about you relating to the cPanel Product;
  • operate, maintain and provide to you the features and functionality of the cPanel Product and any third party products chosen by you;
  • authenticate users to our products and systems;
  • process applications where you have applied for a job with us; and
  • Enter you into sweepstakes, contests and promotions at your request.
The processing is necessary for:
  • the performance of a contract and to take steps prior to entering into a contract; and
  • our legitimate interests, namely administering the cPanel Product, administering our ticketing and abuse systems for marketing purposes, for processing job applications and for communicating with users.

As required in accordance with how we use it, we will share your Personal Information with the following:

Service providers and advisors. Third party vendors and other service providers that perform services for us, on our behalf, which may include providing mailing or email services, HR services, tax and accounting services, payments processing, data enhancement services, fraud prevention, web hosting, third parties who provide items directly to customers, or providing analytic services.

Purchasers and third parties in connection with a business transaction. Personal Information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business.

Other third parties using the Self Service Portal. Where you provide information to a Self Service Portal, your comments and any other Personal Information you submit may be seen by other third parties

Law enforcement, regulators and other parties for legal reasons. Third parties as required by law or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement and regulators; (b) enforce our Terms of Use or to protect the security or integrity of our Website; and/or (c) exercise or protect the rights, property, or personal safety of cPanel, our customers or others.

For no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests.

Domain name, or related IP resource, may be shared with third parties to administer functions associated with those items.

Email address will be shared with email delivery services to deliver both mandatory and opt-in email. Mandatory email is restricted to product operation.

Contact information will be shared with third party vendors when a customer purchases third party products offered by cPanel.

All information in this category will be shared with third party survey providers including Survey Monkey / Alchemer and Typform. The information shared is voluntary and will vary based on the nature of the survey.

All information in this category may be shared with third party ticketing systems, and ZenDesk (“ticketing integration providers”), to provide support. These ticketing integration providers may use third parties to provide computing power and store information.

Payment information. Details such as your bank account number or PayPal account and related information. We use this information to facilitate payment for use of the cPanel Product, any third party products chosen, and to detect and prevent fraud. The processing is necessary for the performance of our contract with you and our legitimate interests, namely the detection and prevention of fraud and to ensure our users get paid for the resources they have provided. Payment information. Details such as your bank account number or PayPal account and any information requested by our payment processors, or those of third parties whose products we provide, to receive payment for services.
Technical and server information. Information required for ongoing web-hosting activities such as: server address/hostname, IP address, domain name; log files; configuration files; service reports; and server-related information which we retrieve from your server where you have requested technical support which may also include usernames and passwords, root directory, affected accounts such as email accounts. We use this information to:
  • operate, maintain and provide to you the features and functionality of the cPanel Product; resolve your technical issues at your request; and facilitate our customer interaction activities and customer forums;
  • where you have had a technical issue, we sometimes use the information to replicate the issue in order to identify weaknesses and make improvements to the cPanel Product. Normally, we will use an anonymized copy of this information though sometimes this is not possible; and
  • authenticate users to our products and systems and those third party products and systems who authenticate using this information.

The processing is necessary for the performance of our contract with you; and administering our ticketing and abuse systems.

Where we collect and use your Personal Information for the purposes of improving the cPanel Product, we will first obtain your consent.

Domain name may be shared with third parties to administer domain functions.

Domain name will be shared with Google in Google Analytics.

Domain name may be shared with customer’s server administrator.

Technical and server information may be shared with third party ticketing systems, and ticketing integration providers, to provide support. These ticketing integration providers may use third parties to provide computing power and store information.

HTTP request of the user; information about the browser, host name, cPanel company ID, browser type and language; reads first party cookies and number of visits to site. Third party code included in the cPanel Product retrieves data from HTTP requests of the user and via first party cookies. This enables a third party to perform analytics and provide aggregated analytical information to cPanel. The processing is necessary for our legitimate interests, namely: to tailor the cPanel Product to the user and to improve the cPanel Product generally; to monitor and resolve issues; and for marketing purposes. Disclosed in conjunction with the description of Google Analytics.
Correspondence and comments. When you contact us directly, e.g., by email, phone, mail, via the Self Service Portal, when you post on message boards, blogs or complete an online form, we will record your comments and opinions. To address your questions, issues and concerns and improve the cPanel Product, to determine products and services that may be of interest to you and to send you news, alerts and marketing communications in accordance with your marketing preferences. The processing is necessary for our legitimate interests, namely communicating with users and for marketing purposes.
Self-identifying information. Where you have applied for a job with us, you may voluntarily provide us with certain self-identifying information. We use this information for regulatory purposes, fulfilling regulatory reporting requirements, responding to information requests and defending against employment related complaints. The processing is necessary for:
  • the compliance with legal and regulatory obligations; and
  • our legitimate interests, namely defending against employment related complaints.
Self-identifying information may be processed by third party HRIS systems.
All Personal Information set out above. We will use all the Personal Information we collect to operate, maintain and provide to you the features and functionality of the cPanel Product, to communicate with you, to monitor and improve the cPanel Product, our Website and business, and to help us develop new products and services. The processing is necessary for our legitimate interest, namely to administer and improve the cPanel Product, our Website, our business and develop new services.
Images and Audio Recordings. Beta Program participants may have screen images of their use of the product captured for analysis; participants may also have audio recordings of their interaction with the product, and comments regarding the product captured by cPanel. Video recordings of such interaction and/or comments are optional at the participant’s discretion. While participating in a video or audio recording, written submissions may also be collected. To evaluate the features, functionality of Beta Products. The processing is necessary for our legitimate interest, namely to administer and improve the cPanel Product, our Website, our business and develop new services. Until the conclusion of the Beta program associated with the Beta Product. None

SCHEDULE 2 – PERSONAL INFORMATION COLLECTED AUTOMATICALLY

Your personal information may be automatically collected when you use the cPanel & WHM or WP Squared products, beta products, the store, our ticketing system. It may also be collected when registering for an event or for general inquiries.

Category of Personal Information How we use it Legal basis for the processing Categories of recipients Retention period Categories shared with third parties
Information about how you access and use the cPanel Product. For example, the website from which you came and the website to which you are going when you leave our Website, how frequently you access the cPanel Product, the time you access the cPanel Product and how long you use them for, whether you open emails or click the links contained in emails, whether you access the cPanel Product from multiple devices, and other actions you take on the cPanel Product. We use this information to:
  • present the cPanel Product to you on your device;
  • determine news, alerts and other products and services that may be of interest to you for marketing purposes;
  • monitor and improve the cPanel Product and our business, and to help us develop new products and services; and
  • Validate our software and license status.
The processing is necessary for our legitimate interests, namely: to tailor the cPanel Product to the user and to improve the cPanel Product generally; to monitor and resolve issues; for marketing purposes; to communicate with users; to contact users; and for the detection and prevention of fraud.

As required in accordance with how we use it, we will share your Personal Information with the following:

Service providers and advisors. Third party vendors and other service providers that perform services for us, on our behalf, which may include providing mailing or email services, tax and accounting services, payments processing, data enhancement services, fraud prevention, web hosting, or providing analytic services.

Purchasers and third parties in connection with a business transaction. Personal Information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business.

Law enforcement, regulators and other parties for legal reasons. Third parties as required by law or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) enforce our Terms of Use or to protect the security or integrity of our Website; and/or (c) exercise or protect the rights, property, or personal safety of cPanel, our customers or others.

For no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests.

Information may be shared with Google in Google Analytics and Mixpanel Inc in Mixpanel.

Information about your device. We also collect information about the computer, tablet, smartphone or other electronic device you use to connect to the cPanel Product. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to the cPanel Product through the device, information about the server upon which the cPanel Product software log files, configurative files, server reports, your Internet service provider or mobile network, your IP address. We use this information to:
  • enable the cPanel Product to be presented to you on your device;
  • operate, maintain and provide to you the features and functionality of the cPanel Product;
  • monitor and improve the cPanel Product and business, and to help us develop new products and services;
  • Validate our software and license status; and
  • Facilitate our customers interaction activities and customer forums.
The processing is necessary for our legitimate interests, namely: to tailor the cPanel Product to the user and to improve the cPanel Product generally; to monitor and resolve issues; for marketing purposes; to communicate with users; to contact users; and for the detection and prevention of fraud. For no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests.

Information may be shared with Google in Google Analytics and Mixpanel Inc in Mixpanel.

Demographic Information. Information about the geographic location, total order cost, cost breakdown of a customer order, the order details, and the invoice identification of users of the cPanel Store. We use this information to:
  • Determine the general location of direct orders for the cPanel Product; and
  • Correlate it with purchases of the cPanel Product.

The processing is necessary for our legitimate interests, namely: to tailor the cPanel Product to the user, to improve the cPanel Product and cPanel Store generally; and for marketing purposes.

Additional information about the use in Google Analytics is here:

https://support.google.com/analytics/answer/2799357?hl=en

Additional information about the use in Mixpanel is here:

https://docs.mixpanel.com/docs/tracking/how-tos/user-profiles

Purchasers and third parties in connection with a business transaction. Personal Information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business. For no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests.

Information may be shared with Google in Google Analytics.

Information may be shared with Typeform.

Company ID. cPanel Configuration Analytics and cPanel Interface Analytics collect the Company ID associated with a particular installation of cPanel.

Company ID is collected on de-identified user profiles and is governed by end user participation consent.

We use this information to determine how a particular company uses the cPanel interface.

The processing is necessary for our legitimate interests, namely: to tailor the cPanel Product to the user, to improve the cPanel Product and cPanel Store generally; and for marketing purposes.

Additional information about this use is here: https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-analytics-the-data-we-use/#interface-analytics

https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-analytics-the-data-we-use/#configuration-analytics

cPanel account management, customer service and marketing. For no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests. Information may be uploaded to a Salesforce database. It is not shared with Salesforce for their use.
Technical Information when you visit Corporate sites. IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display the particular Corporate site. We use this information to better understand our users’ needs and to optimize our Corporate sites and user’s experience on them. In particular:
  • how much time a user spends on which pages;
  • which links they choose to click; and
  • what users do and do not like on a particular Corporate site.
The processing is necessary for our legitimate interests, namely: to tailor the Corporate Site to the user and to improve the Corporate site generally. Information is sent to third parties to assist with website analytics. It may also be sent to corporate affiliates and contracted data analytics firms for review. For no longer than necessary for the purposes set out and in accordance with our legal obligations and legitimate business interests.

Information may be shared with Hotjar Ltd (HotJar), Google Inc (Google Fonts, Google Tag Manager, Google Ads, Google Analytics, Doubleclick, Youtube, Google Play), AccessiBe Inc (AccessiBe), Splitrock Studio Pty Ltd (BugHerd), UserCentrics (Cookiebot), Hubspot Inc (Hubspot), Microsoft Corporation (LinkedIn, Clarity, Bing), Reddit Inc (Reddit), Meta Platforms Inc (Facebook Connect)

SCHEDULE 3 – INFORMATION REGARDING COOKIES AND OTHER ACTIVITY MONITORING

Information collected Categories of recipients How we use it Retention period Creator Information about item Website and product uses
Google analytics: HTTP request of the user: information about the browser, host name, browser type and language. cPanel and Google The cookie retrieves data from HTTP requests of the user and via first party cookies. This enables Google to perform analytics and provide aggregated analytical information to cPanel. Persistent: cookie remains on visiting computer until deleted by visitor. cPanel retains aggregate information from Google analytics perpetually. No personal data is conveyed by Google to cPanel. Google https://developers.google.com/analytics/resources/concepts/gaConceptsTrackingOverview Product and all Corporate sites.1
Google analytics: Reads first party cookies. cPanel and Google Persistent: cookie remains on visiting computer until deleted by visitor. cPanel retains aggregate information from Google analytics perpetually. No personal data is conveyed by Google to cPanel. Google https://developers.google.com/analytics/resources/concepts/gaConceptsTrackingOverview Product and all corporate sites.
Google Tag Manager. cPanel, Google and other third parties whose tags are shipped. Manages tags placed on interfaces by cPanel. Google https://support.google.com/tagmanager/answer/6102821?hl=en All corporate sites
Google Ads cPanel, Google and other third parties who use Google Remarketing To place advertising on third parties sites. Persistent: cookie remains on visiting computer until deleted by visitor. Google https://adssettings.google.com/authenticated All corporate sites
IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display the particular Corporate site. cPanel and Hotjar We use this information to better understand our users’ needs and to optimize our Corporate sites and user’s experience on them. In particular:
  • how much time a user spends on which pages,
  • which links they choose to click, and
  • what users do and do not like on a particular Corporate site.
Persistent: cookie remains on visiting computer until deleted by visitor. Hotjar Ltd. https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies All Corporate sites.
Reddit Tracking Pixel cPanel and Reddit We use this information to understand how our users interact with our sites and the Reddit site. In particular: to track site engagement and response to ads, personalize product marketing based on website activity and interests. Up to two years Reddit https://www.reddit.com/personalization/ All corporate sites
Twitter Tracking Pixel cPanel and Twitter We use this information to understand how our users interact with our sites and Twitter. In particular: to track site engagement and response to ads, personalize product marketing based on website activity and interests. 18 months Twitter https://help.twitter.com/en/safety-and-security/privacy-controls-for-tailored-ads All corporate sites
Facebook Tracking Pixel cPanel and Facebook We use this information to understand how our users interact with our sites and Facebook. In particular: (i) to track site engagement and response to ads, personalize product marketing based on website activity and interests; and (ii) target jobs ads to people who have interacted with a corporate site respond to that ad. Until account is deleted Facebook https://www.facebook.com/policies/cookies/ All corporate sites
LinkedIN Tracking Pixel cPanel and LinkedIN We use this information to understand how our users interact with our sites and LinkedIN. In particular: (i) to track site engagement and response to ads, personalize product marketing based on website activity and interests; and (ii) target jobs ads to people who have interacted with a corporate site respond to that ad. Until account is closed LinkedIN https://www.linkedin.com/legal/cookie-policy All corporate sites
Typeform cPanel and Typeform We use this information to collect surveys and associate survey responses with individual customers Up to two years following account closure Typeform https://admin.typeform.com and https://www.typeform.com/help/a/what-other-companies-do-we-share-data-with-360029617191/ All corporate sites
Mixpanel: HTTP request of the user: information about the browser, host name, browser type and language. Cpanel and Mixpanel The cookie retrieves data from HTTP requests of the user and via first party cookies. This enables Mixpanel to perform analytics and provide aggregated analytical information to cPanel. Persistent: cookie remains on visiting computer until deleted by visitor. cPanel retains aggregate information from Mixpanel analytics perpetually. Mixpanel https://mixpanel.com/legal/privacy-policy#:~:text=Cookies%20and%20Tracking%20Technologies Product
AccessiBe: HTTP request of the user: information about the browser, host name, browser type and language, device type, operating system and version, screen resolution cPanel and AccessiBe The cookie retrieves data from HTTP requests of the user and via first party cookies. This enables AccessiBe to perform remediations of the site to make it more accessible Persistent: cookie remains on visiting computer until deleted by visitor. AccessiBe https://accessibe.com/accesswidget/security All corporate sites
BugHerd cPanel and BugHerd The cookie retrieves data from HTTP requests of the user and via first party cookies. This enables BugHerd to identify website bugs and gather feedback from you when you choose to participate. Persistent: cookie remains on visiting computer until the end of the browser session, either by logging out or closing your browser. SplitRock Studio Pty Ltd https://bugherd.com/privacy All corporate sites
CookieBot cPanel and Cookiebot The cookie retrieves data from HTTP requests of the user and via first party cookies. This enables Cookiebot to seek your consent preferences for various cookies. Persistent: cookie remains on visiting computer until deleted by visitor. UserCentrics https://www.cookiebot.com/en/privacy-policy/ All corporate sites
Hubspot cPanel and Hubspot The cookie retrieves data from HTTP requests of the user and via first party cookies. This enables Hubspot to perform analytics and provide aggregated analytics to cPanel. Persistent: cookie remains on visiting computer until deleted by visitor. Hubspot, Inc https://legal.hubspot.com/privacy-policy All corporate sites
Microsoft: Microsoft Clarity, Microsoft Bing Ads cPanel and Microsoft Corporation The cookie retrieves data from HTTP requests of the user and via first party cookies. This enables Microsoft to perform analytics and provide aggregated analytics to cPanel. Persistent: cookie remains on visiting computer until deleted by visitor. Microsoft Corporation https://privacy.microsoft.com/en-us/privacystatement All corporate sites