Privacy Policy

This policy explains what personal data HOSTFLORA collects, why we use it, who we share it with and the choices you have. HOSTFLORA (hostflora.com) is a product of Cyfi Digital, a joint venture of BDCM Tech (Cambodia) Co., Limited and GS TRIP (Cambodia) Co., Limited. In this policy "HOSTFLORA", "we" and "us" mean Cyfi Digital.

Contact

Email [email protected] for any privacy question or request. Our office is on Street 144, Daun Penh, Phnom Penh, Cambodia.

Data we collect

• Account data: your name, email address, phone number, password (stored only as a one-way hash) and, if you choose, two-factor authentication settings.
• Billing data: billing name, company, address, country and tax details, plus your orders, invoices and payment status. Card and mobile-wallet details are entered on the payment provider's own page; we do not see or store full card numbers or wallet PINs.
• Domain registrant data: the contact details that domain registries require for every registration (name, organisation, address, email and phone).
• Service data: the hosting accounts, domains and eSIMs you buy, their settings and, for eSIMs, the eSIM identifier (ICCID), activation details and data usage.
• Support data: messages, tickets and attachments you send us.
• Technical data: IP address, browser and device type, pages visited, approximate country, and security logs such as sign-in attempts.

Signing in with Google

If you choose "Sign in with Google", Google shares your Google account ID, name, email address and whether that email is verified. We request only the basic openid, email and profile permissions. We use this information only to create your HOSTFLORA account or sign you in to it, and to contact you about your account and orders. We do not read your Gmail, contacts, files or any other Google data, we do not use Google user data for advertising, and we do not sell it or share it with anyone except as required to run your account or by law.

HOSTFLORA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect HOSTFLORA from your Google account at any time at myaccount.google.com/connections.

Why we use your data

• To create and secure your account and sign you in.
• To process orders and payments, and to set up, renew and support your hosting, domains and eSIMs.
• To send service emails such as invoices, renewal reminders, eSIM QR codes and security alerts.
• To prevent fraud and abuse and to keep our systems secure.
• To understand how the website is used so we can improve it, only if you accept analytics cookies.
• To send offers and news, only if you agree; every marketing email has an unsubscribe link.
• To meet legal, tax and accounting obligations.

Who we share it with

We share personal data only with the service providers we need to deliver what you buy:

• ResellPortal, which provisions our hosting accounts and travel eSIMs.
• ResellerClub and the domain registries, which register and manage domain names.
• Payment providers such as EPS, bKash, Nagad and card processors, which handle your payment.
• Hostinger, which hosts this website and its database, and our email delivery provider.
• Google, for Google sign-in and, if you accept analytics cookies, Google Analytics and Google Tag Manager.
• An AI support provider, where enabled, to help answer the support messages you send.

We may also disclose data when the law requires it or to protect our users and services from fraud or abuse. We do not sell personal data.

Cookies and analytics

Essential cookies keep you signed in, remember your cart and protect forms. Analytics cookies (Google Analytics through Google Tag Manager) are set only after you accept them in the cookie banner, and IP addresses are anonymised. You can change your choice at any time by clearing this site's cookies. See our Cookie Policy for details.

International transfers

We serve customers in Bangladesh, Cambodia and worldwide, so your data may be processed in countries other than your own, including where our providers run their servers. We use providers that protect personal data with appropriate security measures.

How long we keep it

• Account and service data: while your account is active, and up to 12 months after it is closed.
• Invoices and payment records: for as long as tax and accounting laws require.
• Security logs: up to 12 months.
• Support conversations: up to 24 months after the ticket is closed.

Security

Passwords are hashed, connections use HTTPS, integration secrets are encrypted, and staff access is limited and logged. No system is perfectly secure, so please use a strong password and turn on two-factor authentication.

Your choices and rights

You can view and update most of your details in your account. You can also ask us to send you a copy of your data, correct it, delete your account, or stop using your data for marketing. Email [email protected] from the address on your account and we will reply within 30 days. We may need to keep some records, such as invoices, where the law requires it.

Children

Our services are for people aged 18 and over. We do not knowingly collect data from children.

Changes to this policy

If we change this policy we will update the date at the top of this page, and we will tell you by email about important changes.