1. Who We Are

SolaDrive is a managed hosting company based in Buffalo, New York, USA. We provide web hosting services including VPS hosting, dedicated servers, managed cloud solutions, Odoo ERP hosting, and backup services to customers worldwide.

For the purposes of applicable data protection laws, SolaDrive acts as:

• Data Controller: For personal data we collect directly from you (account information, billing details, support communications)
• Data Processor: For data that our customers store on our servers as part of their hosted services

If you are a customer using our hosting services to store your own customers’ data, you are the Data Controller for that data, and we act as your Data Processor in accordance with our service agreements.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information when you:

• Create an account or purchase services (name, email address, phone number, billing address)
• Submit payment information (processed securely through our payment providers)
• Contact our support team (support ticket contents, email communications)
• Complete contact forms or subscribe to newsletters
• Participate in surveys or promotional activities

2.2 Information Collected Automatically

When you visit our website or use our services, we automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device information and operating system
• Pages visited and time spent on our website
• Referring website or source
• Server logs and access logs for hosted services

2.3 Information from Third Parties

We may receive information from:

• Payment processors (transaction confirmations, fraud prevention data)
• Domain registrars (WHOIS information for domain services)
• Business partners and referral sources

3. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve our hosting services
• Process transactions and send related information (invoices, receipts, confirmations)
• Respond to your support requests and communications
• Send technical notices, updates, security alerts, and administrative messages
• Communicate about products, services, offers, and promotions (with your consent)
• Monitor and analyze usage trends to improve our services
• Detect, prevent, and address technical issues, fraud, and security threats
• Comply with legal obligations and protect our legal rights

4. Legal Basis for Processing

Under GDPR and UK GDPR, we process your personal data based on the following legal grounds:

5. How We Share Your Information

We do not sell your personal information. We may share your data with:

5.1 Service Providers

Trusted third parties who assist us in operating our business:

• Payment Processors: PayPal, Stripe, and other payment providers for secure transaction processing
• Data Center Partners: Infrastructure providers who host our servers
• Software Providers: Tools for support ticketing, email delivery, and business operations

All service providers are contractually obligated to protect your data and use it only for the services they provide to us

5.2 Legal Requirements

We may disclose your information when required by law, court order, or government request, or when necessary to protect our rights, safety, or property.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. International Data Transfers

SolaDrive is based in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please note that your personal data may be transferred to and processed in the United States.

We implement appropriate safeguards for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs where applicable
• Ensuring our service providers maintain adequate data protection standards

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website:

You can manage your cookie preferences through your browser settings or our cookie consent banner. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you while your account remains active
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements

When your data is no longer required, we will securely delete or anonymize it. Backup copies may be retained for a limited period for disaster recovery purposes before being permanently removed.

9. Your Data Protection Rights

Depending on your location, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

If you are in the EEA or UK and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority. For UK residents, this is the Information Commissioner’s Office (ICO).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data in transit
• Encrypted storage for sensitive data at rest
• Firewalls and intrusion detection systems
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Staff training on data protection and security practices

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.

11. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any website you visit.

12. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the revised policy on this page and update the “Last Updated” date. For significant changes, we may provide additional notice via email or a prominent notice on our website.

Your continued use of our services after any changes indicates your acceptance of the updated policy.

14. Contact Us