Introduction
VMHeaven ("we", "us", "our") takes the protection of your personal data very seriously. This Privacy Policy explains which data we collect, process, and use when you use our services, including our website, WHMCS platform, and digital services.
By using our services, you agree to the processing of your data in accordance with this Privacy Policy.
Data Controller
VMHeaven
Samuel Dierich
c/o IP-Management #8262
Ludwig-Erhard-Straße 18
20459 Hamburg
Germany
Data We Collect
We collect the following personal data:
Account data
Name, email address, billing information, payment details
Service usage data
Login timestamps, resource usage (CPU, RAM, storage)
Technical data
IP address, browser type, device information, cookies, session data
Monitoring data
Usage metrics to ensure service stability and security (no packet content or traffic data are collected)
Purpose of Processing
We use your data for the following purposes:
- Provision, management, and billing of hosting services
- Invoice and payment processing
- Security monitoring, abuse prevention, and service stability
- Compliance with legal obligations
Legal Basis
The legal bases for processing personal data include:
e.g., fraud prevention, abuse detection, service stability
Use of Cloudflare and Third-Party Services
We use Cloudflare as a content delivery network (CDN) and DDoS protection. Your IP address, browser information, and other technical data may be processed by Cloudflare.
Other third-party services (e.g., payment processors, analytics tools) process data only to fulfill contractual obligations or provide services.
Data Retention
- Account and billing data are stored permanently as long as you have an account with VMHeaven.
- If you delete your account or request account deletion, your personal data will be deleted in accordance with statutory retention periods.
- Monitoring and usage data are retained only as long as necessary for operation, abuse prevention, and service security.
- After service expiration (e.g., server provisioning), server data are generally stored for 7 days before deletion, unless legally required otherwise.
Your Rights
Under GDPR, you have the following rights:
Requests should be sent to [email protected]
Security
We implement appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Measures include encryption, access controls, monitoring, and regular security audits.
Monitoring
- VMHeaven monitors server activity and usage metrics to ensure service stability and security.
- No packet content or traffic data is analyzed or stored.
Changes to Privacy Policy
We may update this Privacy Policy from time to time. The effective date will be updated accordingly. Continued use of services constitutes acceptance of the updated policy.
Contact
For questions about this Privacy Policy or to exercise your rights, please contact:
[email protected]