Privacy Policy

Who we are

domhos IT Ltd. ("we", "us") operates localhost:3000 and provides domain registration, web hosting, VPS, business email and related services. This policy explains what personal data we collect, why, and what you can do about it.

What we collect

Account data. Your name, email address, mobile number, company name and billing address. We need these to create your account, issue invoices, and — for domain registrations — to submit registrant details to the registry, which is a requirement we cannot waive.

Payment data. We never see or store your full card number, bKash PIN or wallet password. Payments are processed by bKash, Nagad, SSLCommerz or Stripe on their own systems. We store only the transaction reference, amount, masked sender number and the result.

Technical data. IP address, browser type, and pages visited. We use this for security (rate limiting, fraud detection), and to understand which parts of the site are actually used.

Support data. The contents of tickets, emails and WhatsApp messages you send us, so we have the history when you write again.

Why we process it

• To provide the service you bought (contract).
• To comply with registry rules and Bangladeshi tax and record-keeping law (legal obligation).
• To prevent fraud and abuse (legitimate interest).
• To send you service notices — renewals, invoices, outages. These are not marketing and you cannot opt out of them while you hold an active service.
• To send offers, only if you opted in. You can turn this off in your dashboard at any time.

Who we share it with

• Domain registries and registrars — registrant details, as required to register a domain. For .bd domains this includes BTCL, and may include your trade licence or NID copy.
• Payment gateways — the amount and reference needed to take payment.
• Infrastructure providers — our data centre and, where you choose it, our upstream hosting supplier.
• Nobody else. We do not sell your data, and we do not share it for advertising.

We disclose data to authorities only where we are legally compelled to, and we will tell you unless the law forbids it.

WHOIS and domain privacy

Domain registration data is published in WHOIS by registry rules. Where the TLD supports it, we enable WHOIS privacy free of charge so your personal details are replaced with a proxy. .bd domains do not support privacy — BTCL publishes registrant details.

How long we keep it

• Account and invoice records: 6 years after your last service ends, for tax and audit purposes.
• Support tickets: 3 years.
• Server and access logs: 90 days.
• Fraud records: 3 years.

Your rights

You can ask us to show you the data we hold, correct it, or delete it. Deletion requests are honoured except where we must keep records by law (invoices) or by registry rule (active domain registrant data). Email support@domhos.com and we will respond within 30 days.

Security

Passwords are hashed with bcrypt. Sensitive fields such as EPP codes and service passwords are encrypted at rest with AES-256-GCM. All traffic is served over TLS. We offer two-factor authentication on every account and strongly recommend you enable it.

Cookies

We use a session cookie to keep you signed in, and local storage to remember your theme, language and cart. We do not use third-party advertising cookies. Analytics, if enabled, is configured to anonymise IP addresses.

Changes

We will post any change here and, for material changes, email you at least 14 days before it takes effect.

Contact

Questions about this policy: support@domhos.com · Level 5, Banani, Dhaka 1213, Bangladesh