Over a year ago, SiteGround started a major project to prepare for the General Data Protection Regulation (GDPR), a new law designed to protect the personal data and privacy of European citizens. While working on this implementation, we realized that the general principles behind the law are very positive for users.
The new regulation aims to make the processing of personal data more transparent and give citizens control over their data. While the GDPR only applies to citizens of the European Union, we decided to go further and apply the same great policies to all our users, regardless of their citizenship or location. The new rules will be effective from May 25, 2018. The following two documents apply these rules to our services:
Our Privacy Policy, which describes how we collect, use, share and process Customers' personal data.
Our Data Processing Agreement (DPA), which governs our responsibilities as a luxembourg mobile database host, and therefore also allows our Customers to have GDPR compliant websites, if necessary.
Processing of your personal data
In accordance with the GDPR, our new Privacy Policy details what information we receive from you and why. It also explains how we share your personal information and with whom we will share it.
1. Provide the minimum amount of data and you can control it
The first thing you need to know is that we only collect the minimum amount of data necessary to provide you with our exceptional service. When you sign up for SiteGround services, you provide your contact and billing information. We need this information to be able to process your orders, keep you updated on routine maintenance, and send you important information related to the services you use. You can edit this data , download it, and request deletion of your profile through your Client Area.
2. We only share information with trusted partners
In order to provide you with all the services that are the basis of your hosting account, we share some of your data with external providers such as domain registrars, SSL providers, and Content delivery network (CDN) providers. All of these partners are either already GDPR compliant or have signed special agreements with us to comply with our data protection standards.
3. You have control over your email subscription preferences
If you have given us your explicit consent, we will also use your email address to share useful tips, special offers, and to introduce you to new products. This consent can be denied or modified at any time via the My Details section of your Customer Area.
4. We only store aggregated browsing data
Our Privacy Policy also explains how we collect information from you when you interact with our website and services. This information helps us monitor the performance of our website, troubleshoot problems, and identify ways to optimize and improve our products and services. We do not link this information to any information that could identify you personally, except as strictly necessary to prevent fraud or abuse on our website.
These are some of the most important points of the Privacy Policy, but to read everything in detail, we recommend you read the entire document. We have also appointed a Data Protection Officer (DPO) as required by law.