PRIVACY POLICY - CPANEL

1. OUR APPROACH TO PRIVACY
   1. cPanel is committed to providing information to its customers about how we use certain information. This Privacy Policy describes the ways in which cPanel, L.L.C. (cPanel, we or our) collects, uses, maintains and discloses information collected from our customers (collectively, you or your) through the use of the cPanel Product and visitors to our websites.
   2. Contacting us about privacy related questions and issues:
      1. General questions: privacy [at] cpanel.net
      2. Requests to know the personal information we collect: click here
      3. Requests to delete personal information we have collected: click here
      4. To opt out of the sale of information: click here
      5. Our toll free number: 844-427-2635
      6. If you are using an agent to make a request under our privacy policy: click here
   3. Our Privacy Policy supplements, but does not replace, any other agreements or policies applicable to you including our Terms of Service (TOS), PartnerNOC Agreement and Acceptable Use Policy (AUP). You may find these policies useful in learning how we handle information.
   4. cPanel complies with the EU-U.S Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. cPanel has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the proessing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles the Principles govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
      
      cPanel complies with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. cPanel has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. cPanel has certified to the U.S.
      
      Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework program Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
2. WHAT OUR PRIVACY POLICY COVERS
   1. This Privacy Policy sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you (Personal Information) and information regarding our use of cookies and similar technologies.
   2. cPanel provides software and services which allows customers to manage their web hosting activities via hosting automation software (cPanel Product) made available via our website located at https://cpanel.net (Website) or through those licensed to distribute the cPanel Product, or those who are legally entitled to use the cPanel Product (Authorized Distributors).
   3. This Privacy Policy applies to the cPanel Product, our Website, and all Corporate Sites [1].
   4. Before accessing our Website or using the cPanel Product, please ensure that you have read and understood this Privacy Policy.
   5. With the exception of individuals who use the cPanel Product as customers of our Authorized Distributors (as described at 3.1 below), cPanel is the controller responsible for the Personal Information we hold about you.
3. PERSONAL INFORMATION WE COLLECT ABOUT YOU AND HOW WE USE IT
   1. We process Personal Information about the following types of individuals:
      1. individuals who are our direct customers;
      2. where our customer is a business or similar entity, individuals who are our customers’ employees, agents and other representatives; and
      3. where the cPanel Product is licensed through an Authorized Distributor, individuals who are customers of our Authorized Distributors.

      Please note that we process information about individuals who are customers of our Authorized Distributors in the same way as individuals who are our direct customers. However, we are not the controller of that information; the relevant Authorized Distributor will have its own privacy policy which will apply and any questions should be directed to that Authorized Distributor.

   2. We collect Personal Information about you when you voluntarily submit information directly to us when you access our Website or use the cPanel Product. This can include information you provide to us when you register for an account, fill in a form, correspond with us via the Website, phone, email or otherwise, subscribe to our mailing lists, newsletters or other forms of marketing communications, respond to surveys, agree to be a beta tester or use some other feature of the cPanel Product as available from time to time.
   3. Schedule 1 describes categories of Personal Information we collect and how we use that Personal Information. When we process Personal Information, the legal basis we rely on for this activity is also set out. If Personal Information is provided to third parties, that fact is stated. Finally, Schedule 1 also sets out information as to how we determine applicable retention periods. This schedule contains categories of Personal Information that we have collected since April 2018.
   4. Regardless of whether you license the cPanel Product directly from us, or through Authorized Distributor, we automatically collect certain Personal Information indirectly about how you access and use the cPanel Product and information about the device you use to access the cPanel Product.
   5. Schedule 2 sets out the categories of Personal Information we collect about you automatically and how we use that information. The schedule also lists the legal basis which we rely on to process the Personal Information, the categories of recipients of the Personal Information and information as to how we determine applicable retention periods.
   6. We may link or combine the Personal Information we collect about you and the information we collect automatically. This allows us to provide you with a personalized experience regardless of how you interact with us.
   7. We may anonymize and aggregate any of the Personal Information we collect (so that it does not directly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the cPanel Product and developing new products and features. We may also share such anonymized information with others.
4. MARKETING AND ADVERTISING
   1. From time to time we may contact you with relevant information about the cPanel Product. Most messages we send will be by email. For some messages, we may use Personal Information we collect about you to help us determine the most relevant information to share with you.
   2. If you do not want to receive such messages from us, you will be able to tell us by selecting certain boxes on forms we use when we first collect your contact details. You can change your marketing preferences by clicking on the unsubscribe link at the bottom of our emails, or following the “update preferences” on these emails.
5. APPLYING FOR A JOB THROUGH OUR SITE

   If you apply for a job through the Website, we, or a human resources company assisting us, may ask you to provide certain self-identifying information in conjunction with laws and regulations enforced by federal, state, and local regulatory agencies. Providing self-identifying information is voluntary, but if you do provide us with that information, we may submit it to federal, state, and local regulatory agencies, upon legal compulsion, for business-related purposes, responding to information requests, fulfilling regulatory reporting requirements and defending against employment related complaints.

6. STORING AND TRANSFERRING YOUR PERSONAL INFORMATION
   1. Security. We implement and maintain appropriate technical and organizational measures to protect your Personal Information against accidental or unlawful destruction, loss, change or damage. All Personal Information we collect from the cPanel Product will be stored on secure servers and will be protected by SSL encryption technology. All electronic transactions entered into via our Website will be protected by SSL encryption technology.

      Where you register for an account on the cPanel Product, you are responsible for maintaining your account’s security as explained in our TOS. If you are not a direct cPanel customer, information about your account’s security may be explained in the contract between you and the Authorized Distributor from whom you license the cPanel Product.

   2. International Transfers of your Personal Information. The Personal Information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third party service providers have operations. If you are located in the European Union (EU), your Personal Information will be processed outside of the EU, including in the United States; these international transfers of your Personal Information are made pursuant to appropriate safeguards, such as the EU-US Privacy Framework, or, if applicable, Standard Contractual Clauses. If you wish to inquire further about these safeguards used, please contact us using the details set out at the end of this Privacy Policy.
   3. Disclosure to Government Agencies and Law Enforcement. Our Transparency Report discusses the standards we use to evaluate disclosures to governments and law enforcement agencies. It is incorporated into this Privacy Policy.
7. CERTAIN RIGHTS THAT APPLY IF YOU ARE LOCATED IN THE EU
   1. In accordance with applicable privacy law, you have the following rights regarding Personal Information covered by the GDPR that we hold:
      1. Right of access. The right to obtain access to your Personal Information.
      2. Right to rectification. The right to obtain rectification of your Personal Information without undue delay where that Personal Information is inaccurate or incomplete.
      3. Right to erasure. The right to obtain the erasure of your Personal Information without undue delay in certain circumstances, such as where the Personal Information is no longer necessary in relation to the purposes for which it was collected or processed.
      4. Right to restriction. The right to obtain the restriction of the processing undertaken by us on your Personal Information in certain circumstances, such as where the accuracy of the Personal Information is contested by you, for a period enabling us to verify the accuracy of that Personal Information.
   2. You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.
   3. If you wish to exercise one of these rights, please contact us using the contact details at the end of this Privacy Policy.
   4. For data that is received or transferred pursuant to the Privacy Framework, we have agreed to the Privacy Framework’s principles of Notice, Choice and Onward Transfer. Pursuant to Privacy Framework:
      1. Notice: Schedules 1 and 2 describe the Personal Information we collect about you, how we use it, and the types of third parties with whom we share it.
      2. Choice: Disclosure to third parties of Personal Information covered by Privacy Framework is set out in Schedules 1 and 2. For Personal Information covered by Privacy Framework, and which is not required for the operation of the Product or Services, we will provide you with an opportunity to decline to have us disclose this Personal Information to third parties for a purpose that is different than the one for which it was originally collected. Email marketing is opt-in, lists are segmented by reason for collection, and recipients may remove their names from email lists by unsubscribing.
      3. Onward Transfer: When cPanel discloses information to third parties to provide functions on its behalf, cPanel will take appropriate measures to protect the privacy of the Personal Information it transfers. These measures are set out in paragraph 6.1. This Personal Information will only be shared with third parties to the extent reasonably necessary for them to perform the services contracted for, or when cPanel must comply with applicable law. Third parties will not be authorized by us to process Personal Information in any other way. cPanel is responsible for the processing of Personal Information that it transfers to third parties acting as an agent on its behalf.
      4. If you wish to exercise one of these rights, please contact us using the contact details at the end of this Privacy Policy.
   5. Privacy Framework Jurisdiction and Enforcement
      1. As part of our participation in the Privacy Framework, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
      2. In compliance with the EU-US Data Privacy Framework Principles, cPanel commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles. European Union, Swiss and United Kingdom individuals with DPF inquiries or complaints should first contact cPanel using the contact information at the end of this Policy.
      3. cPanel has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers for more information and to file a complaint. This service is provided free of charge to you.
      4. Finally, and as a last resort, if your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2
8. COOKIES AND SIMILAR TECHNOLOGIES
   1. The cPanel Product and Corporate Sites use cookies and similar technologies to distinguish you from others. This helps us to provide you with a good experience when you use the cPanel Product or browse our Website and also allows us to improve both the cPanel Product and Website.
   2. These items allow for personalization of your experience by saving your information such as user ID and other preferences. A cookie is a small data file that we transfer to your device's hard disk (such as your computer or smartphone) for record-keeping purposes. A list of the cookies we use and other relevant information is set out in Schedule 3.
   3. We use the following types of cookies:
      1. Strictly necessary cookies. These are cookies that are required for the essential operation of our Corporate Site and products such as to authenticate users and prevent fraudulent use.
      2. Analytical/performance cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our Corporate Site and products when they are using it. This helps us to improve the way our Corporate Site and products work, for example, by ensuring that users are finding what they are looking for easily.
      3. Functionality cookies. These are used to recognize you when you return to our Corporate Site and products. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region), and your username.

      4. Targeting cookies. These cookies record your visit to our Website, the pages you have visited and the links you have followed. We will use this information to make our Website, and the advertising displayed on it, more relevant to your interests. We may also share this information with third parties for this purpose.

      Please be aware that third parties (for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

   4. The items we use that are covered by this paragraph are designed to help you get the most from the Corporate Sites and products but if you do not wish to receive them, most browsers allow you to change your settings. Please note that if you choose to refuse some of these technologies you may not be able to use the full functionality of our Website and Products. Should you configure your browser to block all cookies, you will not be able to access our products. These settings will typically be found in help section of your browser.
9. SELF SERVICE PORTALS

   cPanel may provide blogs, chat features and moderated and unmoderated FAQs on the Website (Self Service Portal). When you interact with a Self Service Portal, the information you provide may be read by cPanel employees. In addition, if you provide information to a Self Service Portal, other than method of contact operated by cPanel, any Personal Information you submit may be seen by third parties outside of cPanel’s control.

10. BETA TESTING

    Some products may be provided to you as “Beta” products. The term “Beta” is defined in our End User License Agreement. The license of Beta Products from cPanel may require providing us with additional Personal Information. The Personal Information we collect from the license of Beta Products is set out in Schedule 1. Should you choose not to provide Personal Information to us, do not license or install the Beta Products.

11. LINKS TO THIRD PARTY SITES

    The cPanel Product may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

12. OUR POLICY TOWARDS CHILDREN

    The cPanel Product is not directed at persons under 16 and we do not knowingly collect Personal Information from children under 16. If you become aware that your child has provided us with Personal Information, without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.

13. HOW TO REQUEST INFORMATION ABOUT THE PERSONAL INFORMATION WE COLLECT
    1. Customers should fill out a request by logging in through their manage2 or store account. Customer’s identity will be verified based on authenticating through manage2 or your store account.
    2. Non-customers may fill out a request form by clicking on this link: https://go.cpanel.net/privacy-request. A non-customer’s identity will be verified based on information provided and transmitted to a credit bureau for verification.
14. HOW TO REQUEST THAT WE DELETE PERSONAL INFORMATION
    1. Customers should fill out a request by logging in through their manage2 or store account. Customer’s identity will be verified based on authenticating through manage2 or your store account. Your request to delete will be confirmed separately.
    2. Non-customers may fill out a request form by clicking on this link: https://go.cpanel.net/privacy-request or by calling our toll free number. A non-customer’s identity will be verified based on information provided and transmitted to a credit bureau for verification. Your request to delete will be confirmed separately.
    3. We may retain and continue to use Personal Information as permitted by this Privacy Policy and applicable law, including, for example, as necessary to complete a transaction you have requested or fulfil our contractual obligations to you, and to detect security incidents, fraud, or illegal activity.
15. INTENTIONALLY RESERVED
16. USING AN AGENT TO MAKE A REQUEST UNDER OUR PRIVACY POLICY

    If you seek to have an agent make a request under Paragraphs 12, 13, or and 14 above click here: https://go.cpanel.net/privacy-request. Note that customers are prohibited from sharing passwords to Manage2 and all other cPanel operated products and services, and should create a separate account for verified agents to avoid compromising their accounts.

17. CHANGES TO THIS POLICY

    We may update this Privacy Policy from time to time. If no updates have been made to this Privacy Policy for twelve months, it is automatically reviewed. When we change this Privacy Policy in a material way, we will update the "last modified" date at the end of this Privacy Policy and provide notice to you through the cPanel Product. Because the individual who accesses the cPanel Product may be different than the person who has authority to license the cPanel Product from us, it is important that the person with licensing authority review this Privacy Policy regularly. Changes to this Privacy Policy are effective when they are posted on this page.

18. NOTICE TO YOU

    If we need to provide you with information about something, whether for legal, marketing or other business related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this by email, by placing a notice on our Website, as well as contacting the email address provided to us by you, or the Authorized Distributor. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this Privacy Policy.

19. CALIFORNIA RESIDENTS – YOUR CALIFORNIA PRIVACY RIGHTS
    1. Pursuant to California Civil Code Section 1798.83, residents of the State of California have the right to request from companies conducting business in California certain information relating to third parties to which the company has disclosed certain categories of Personal Information during the preceding year for the third parties’ direct marketing purposes. Alternatively, the laws provides that a company may comply, as cPanel does, by disclosing in its Privacy Policy that it provides consumers choice (opt-out or opt-in) regarding sharing Personal Information with third parties for those third parties’ direct marketing purposes, and information on how to exercise that choice. As stated above in this Privacy Policy, cPanel provides you choice prior to sharing your Personal Information with third parties for their direct marketing purposes. If you do not opt-in or if you choose to opt-out at the time cPanel offers that choice, cPanel does not share your information with that identified third party for its direct marketing purposes.
20. SWEEPSTAKES, CONTESTS AND PROMOTIONS

    We may offer sweepstakes, contests, and other promotions (Promotion) that may require registration. By participating in a Promotion, you are agreeing to the official rules that govern that Promotion, which may contain specific requirements of you by, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, your Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion in connection with winner selection, prize fulfilment, and as required by law or permitted by the Promotion’s official rules, such as on a winners list.

21. CONTACTING US
    1. Questions, comments and requests regarding this Privacy Policy are welcome and should be addressed to the General Counsel at privacy [at] cpanel.net.
    2. This Privacy Policy was last modified on October 6, 2023. It was last reviewed on October 6, 2023.
22. ANALYTICS IN GENERAL
    1. The cPanel Product contains a number of analytical tools. This Privacy Policy covers tools that apply to Personal Information.
    2. If you are a customer, you may view all of the analytical tools used by the cPanel Product here (The Data We Use Description): https://go.cpanel.net/analytics
       1. Analytics that record the configuration of the server on which cPanel is used are required to be enabled. Licensees of cPanel software, and their users may not disable this feature. In “The Data We Use Description” this is referred to as “Configuration Analytics.”
       2. (b) Analytics that record the use of the cPanel Interface are optional – but are enabled by default. They may be disabled by the licensee of cPanel software and the end user. In “The Data We Use Description” this is referred to as “Interface Analytics.” Information about how to disable Interface Analytics may be found here https://go.cpanel.net/analytics.
          1. Interface Analytics collects the “company ID” used by the cPanel Software. cPanel may analyze this data to determine how a company uses the cPanel interface.
    3. Analytics Tools and Marketing Services In Use
       1. cPanel & WHM and all Corporate Sites use Analytics tools and Marketing services to understand the performance of our products and sites. Your participation in these tools and services are based on your consent, which you may update at any time.
       2. Google Analytics is enabled based on end user participation consent. Information collected by cPanel using Google Analytics is retained for up to 26 months after your most recent activity.
          1. To understand the information collected by Google Analytics, please follow this link.
       3. Mixpanel is enabled based on end user participation consent. Information collected by cPanel using Mixpanel is retained for 5 years in the case of event tracking, and indefinitely in the case of user profile information.
          1. To understand the information collected by Mixpanel, please follow this link.
       4. The following information is collected by cPanel, retained by cPanel and transmitted to Google Analytics and Mixpanel:
          1. cPanel & WHM
             1. Audience information - This includes de-identified information about you, including your geographic location, preferred interface languages, how often you return, and what devices you use to access cPanel & WHM.
             2. Acquisition information - This includes information about the path you took to arrive at your cPanel & WHM account, if you performed a search in order to find your account, if you clicked an advertisement which took you to your account, or if you participated in any social media or marketing campaigns which enabled you to arrive at your account.
             3. Behavior information - This includes information about what features of your cPanel & WHM you use regularly and which paths through cPanel & WHM you took.
             4. Conversion information - This includes information about what goals you have achieved using cPanel & WHM.
          2. Corporate Sites
             1. Audience information - This includes anonymized information about you, including your geographic location, preferred interface languages, how often you return, and what devices you use to access the corporate sites.
             2. Acquisition information - This includes information about the path you took to arrive at the corporate sites, if you performed a search in order to find the corporate sites, if you clicked an advertisement which took you the corporate sites, or if you participated in any social media or marketing campaigns which enabled you to arrive the corporate sites.
             3. Behavior information - This includes information about what features of the corporate sites you use regularly and which paths through the corporate sites you took.
             4. Conversion information - This includes information about what goals you have achieved using the corporate sites.
          3. Google Remarketing
             1. The corporate sites use Google Remarketing, or re-engagement, tools. These tools use cookies or other similar technologies (Remarketing Cookies) to serve cPanel’s advertising on websites not owned by cPanel. To do that, cPanel and third parties not affiliated with cPanel use Remarketing Cookies to track you across multiple websites and serve you with advertising based on your past visits to our corporate sites.
             2. You can opt-out of Remarketing Cookies by:
                1. visiting Google’s “ad settings” here: https://adssettings.google.com/
                2. Visiting the Network Advertising Initiative’s “opt out page:” here: https://optout.networkadvertising.org/?c=1
                3. Or changing your device settings to block Remarketing Cookies
    4. Disabling your participation in Analytics Tools and Marketing Services
       1. In cPanel & WHM
          1. In cPanel & WHM, you control your participation in Interface Analytics tools and services. To find instructions for how to manage your participation, please click here - https://docs.cpanel.net/knowledge-base/cpanel-product/cpanel-analytics/.
       2. In Corporate Sites
          1. When using our corporate sites, you control your participation in analytics tools and services by locating the "Manage Cookies" preference and allowing or declining cookies. Declining cookies will disable your participation.
    5. Requesting Deletion of Information Transmitted to Google by Google Analytics and to Mixpanel, Inc by Mixpanel
       1. To request the disclosure of your information, deletion of your information, or exercise any other rights afforded to you by the relevant statutes listed in other areas of this Privacy Policy, please refer to Section 1.2.
       2. For the Google Analytics deletion API, please use this link https://developers.google.com/analytics/devguides/config/userdeletion/
       3. For the Mixpanel deletion API, please use this link https://developer.mixpanel.com/reference/delete-profile

SCHEDULE 1 – PERSONAL INFORMATION WE COLLECT

Your personal information may be collected when you use the cPanel & WHM or WP Squared products, beta products, the store, our ticketing system. It may also be collected when registering for an event or for general inquiries.

SCHEDULE 2 – PERSONAL INFORMATION COLLECTED AUTOMATICALLY

Your personal information may be automatically collected when you use the cPanel & WHM or WP Squared products, beta products, the store, our ticketing system. It may also be collected when registering for an event or for general inquiries.

SCHEDULE 3 – INFORMATION REGARDING COOKIES AND OTHER ACTIVITY MONITORING