Privacy Policy
Effective 6 September 2026. This policy explains what personal information How2Host may receive through this website and infrastructure services, why it is used, who may process it and how to contact us about it.
This policy covers visitors, prospects, customers and service contacts.
It applies to information submitted through how2.host, quote and support communications, account and billing processes, infrastructure provisioning, security operations and abuse handling. Customer-hosted content is treated separately from ordinary account and contact information.
We collect what is reasonably needed to operate and protect the service.
This may include names, company details, email addresses, billing and transaction records, account and service identifiers, IP addresses, authentication and access records, support messages, technical configuration, server and network logs, abuse reports and identity information required for upstream IP allocation. Payment-card details may be handled directly by a payment provider rather than stored by How2Host.
Information is used for identifiable operational purposes.
We may use information to answer enquiries, create and administer accounts, evaluate and provision infrastructure, bill for services, authenticate users, provide support, monitor reliability and security, investigate abuse, maintain records, enforce agreements and comply with legal obligations. We do not sell personal information for advertising.
Hosting data is not ours.
How2Host does not claim ownership of customer workloads. Access to customer systems or data is limited to what is reasonably required for the contracted service, a customer-authorized support request, security or abuse response, backup or recovery service, or a legal obligation. Customers remain responsible for the legality of personal data they place on their systems.
Some information must pass through companies that help deliver the service.
Relevant information may be processed by billing and payment providers, email providers, network and IP upstreams, monitoring or security services, backup providers and professional advisers where needed. We aim to disclose only what is necessary for the relevant function. Their infrastructure may process data outside Pakistan.
Records are not kept forever without a reason.
Information is retained for the period reasonably needed for the service, accounting, security, dispute handling, abuse prevention and legal obligations. Different records have different retention needs. Where How2Host is legally treated as a service provider for a category of traffic data, statutory retention requirements may apply, including requirements under Pakistan's Prevention of Electronic Crimes Act. When information is no longer reasonably required or legally retained, it may be deleted, anonymized or securely rendered inaccessible.
Reasonable safeguards are used, but no internet service can promise zero risk.
Controls may include restricted physical access, account authentication, out-of-band management controls, logging, network controls and limited administrative access. Customers should use strong credentials, maintain software security and avoid sending secrets through ordinary email unless necessary.
You can ask about personal information associated with you.
You may contact us to request access, correction or deletion of personal information where appropriate and subject to legal, security, accounting and contractual retention requirements. We may need to verify identity before acting on a request.
We avoid claiming a privacy law that has not been enacted.
How2Host operates from Pakistan and handles privacy obligations under applicable Pakistani law and contractual commitments. Pakistan's Ministry of IT currently lists the Personal Data Protection Bill as a draft rather than an enacted comprehensive privacy statute. This policy may be updated as the legal framework changes.
Privacy questions and requests.
Email hello@how2.host. Please do not include unnecessary sensitive information in the first message.