1. Introduction
Hostking Nigeria (“we”, “us”, “our”) is committed to protecting the privacy and personal data of our customers, website visitors and users. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use our website at www.hostking.com.ng or any of our services.
This policy is compliant with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). By using our services, you consent to the practices described in this policy.
2. Information We Collect
Information you provide to us:
- Name, email address, phone number and billing address when you register an account
- Payment information — processed securely by Flutterwave (we do not store card details)
- Domain registration details required for ICANN/NiRA compliance
- Support ticket content and communications with our team
- Website content and data you upload to our hosting services
Information collected automatically:
- IP address and browser type when you visit our website
- Pages visited, time spent and referring URLs (via Google Analytics)
- Server logs relating to your hosting activity
- Cookies — see our Cookie section below
3. How We Use Your Information
We use your personal data to:
- Provision and manage your hosting, domain and email services
- Process payments via Flutterwave and issue invoices
- Send service notifications, renewal reminders and important account updates
- Provide customer support via live chat, email and support tickets
- Comply with Nigerian law, including responses to lawful requests from Nigerian authorities
- Improve our website and services through analytics
- Send promotional communications — only where you have opted in, and you may unsubscribe at any time
4. Legal Basis for Processing
Under the NDPA 2023, we process your personal data on the following lawful bases:
- Contract: Processing necessary to provide the services you have purchased
- Legal obligation: Processing required by Nigerian law, including the Cybercrimes Act 2015 and NCC regulations
- Legitimate interests: Security monitoring, fraud prevention and service improvement
- Consent: Marketing communications, where you have explicitly opted in
5. Data Sharing
We do not sell your personal data to third parties. We share your data only in these circumstances:
- Flutterwave: Payment processing for Nigerian customers — governed by Flutterwave's privacy policy
- Domain registries: ICANN-required WHOIS data for domain registrations, and NiRA for .ng/.com.ng domains
- Infrastructure providers: Data centre and server providers who process data on our behalf under data processing agreements
- Legal compliance: Where required by Nigerian law, court order or lawful request from Nigerian regulatory or law enforcement authorities
- Google Analytics: Anonymised website usage data for analytics purposes
- Crisp chat: Live chat support tool — data is subject to Crisp's privacy policy
6. Data Retention
We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations. Specifically:
- Account data: retained for the duration of your account and up to 5 years after closure for legal compliance
- Billing records: retained for 7 years in line with Nigerian financial record-keeping requirements
- Support ticket history: retained for 3 years
- Website access logs: retained for up to 90 days
- Hosting data: deleted within 30 days of account termination after the grace period
7. Your Rights Under the NDPA 2023
As a Nigerian data subject, you have the following rights regarding your personal data:
- Right to access: Request a copy of the personal data we hold about you
- Right to correction: Request correction of inaccurate or incomplete data
- Right to deletion: Request deletion of your personal data, subject to our legal obligations
- Right to object: Object to processing of your data for marketing purposes
- Right to data portability: Request your data in a portable format
- Right to withdraw consent: Withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at info@hostking.host. We will respond within 30 days.
8. Cookies
Our website uses cookies to improve your browsing experience. Cookies we use include:
- Essential cookies: Required for the website to function correctly (login sessions, shopping cart)
- Analytics cookies: Google Analytics — helps us understand how visitors use our site. Data is anonymised
- Support cookies: Crisp live chat — used to maintain your support chat session
- Marketing cookies: Meta Pixel — used to measure the effectiveness of our advertising
You can control cookie settings through your browser settings. Disabling cookies may affect some functionality of our website.
9. Security
We implement industry-standard security measures to protect your personal data, including:
- SSL/TLS encryption for all data transmitted to and from our website
- Secure password hashing in our client portal
- Two-factor authentication (2FA) available and recommended for all accounts
- Regular security audits of our infrastructure
- Access controls limiting staff access to personal data to those who need it
Payment card data is never stored by Hostking — all payment processing is handled entirely by Flutterwave on their PCI-DSS compliant infrastructure.
10. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us at info@hostking.host and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or Nigerian law. When we make material changes, we will notify active customers via email and update the effective date at the top of this page.
12. Contact Us
For any privacy-related questions, requests or complaints, please contact us:
- Email: info@hostking.host
- Support: support@hostking.host
- Website: www.hostking.com.ng
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled: ndpc.gov.ng