Privacy Policy

1. Who operates the service

RapidNet operates hosting services from Erbil, Kurdistan Region, Iraq. Privacy questions and requests may be sent to [email protected]. Please do not email passwords, private keys, payment secrets, or identity documents unless we specifically request them through an approved secure channel.

2. Information we collect

• Account and contact information, such as name, email address, telephone number, organization, and billing address.
• Order and billing records, including invoices, service history, transaction identifiers, currency, and payment status. Payment providers process payment credentials under their own policies.
• Technical information, such as IP address, device and browser data, authentication events, server identifiers, resource usage, security events, DNS data, and service logs.
• Support communications, abuse reports, attachments, and other information you choose to provide.
• Website interactions and essential cookie or session information used for security, authentication, preferences, and service operation.

3. Why we use information

We use personal information to create and protect accounts; process orders and payments; provision, operate, monitor, support, and secure services; send invoices and operational messages; investigate fraud, abuse, attacks, and policy violations; maintain backups and business records; improve reliability; enforce agreements; and comply with applicable law and valid legal process.

Where a law requires a legal basis, processing may rely on contract performance, legitimate interests in operating and securing the service, legal obligations, protection of people and systems, or consent where specifically requested.

4. Email processing

Shared web-hosting customers may create cPanel mailboxes within their plan limits. Email content, headers, address information, authentication events, delivery status, spam-filtering results, and service logs may be stored or processed on RapidNet hosting systems as necessary to receive, send, filter, secure, and troubleshoot customer mail. Customers control mailbox users and content and should not send passwords, private keys, payment secrets, or other sensitive credentials by email.

RapidNet company and transactional email may separately be routed through Cloudflare Email Routing and sent through Resend. Those providers process message metadata and content as necessary to route, deliver, secure, and troubleshoot those messages.

5. Service providers and disclosures

We may share information with service providers that help us operate hosting, client management, virtualization, content delivery, security, email delivery, monitoring, payment processing, fraud prevention, support, and encrypted backups. These may include Cloudflare, Resend, Nuvabill billing infrastructure, virtualization systems, payment gateways selected at checkout, and backup-storage providers.

We may also disclose information when required by applicable law or valid legal process, to investigate abuse or fraud, to protect rights and safety, in connection with a business reorganization, or with your direction or consent. We do not sell personal information for money.

6. International processing

Internet infrastructure and service providers may process information outside Iraq. When we select providers, we consider security, operational need, and available contractual protections. Laws in another location may differ from those where you live.

7. Retention

We retain information for as long as reasonably necessary to provide and secure services, resolve disputes, enforce agreements, maintain financial and operational records, and meet legal requirements. Retention periods vary by data type. Security logs may be retained for a limited operational period; invoices and transaction records may be retained longer where required; service data may be deleted after termination or expiry.

8. Security

We use administrative, technical, and physical safeguards appropriate to the service, including encrypted transport, access controls, network restrictions, monitoring, service isolation, and backups where configured. No system can guarantee absolute security. You remain responsible for securing your credentials, applications, VPS configuration, and independent backups.

9. Cookies and sessions

Our websites and client portal may use essential cookies or similar technologies for login sessions, fraud prevention, language and currency preferences, shopping-cart operation, and security. Disabling essential cookies may prevent account or checkout features from working.

Optional Google Ads purchase measurement. We load the Google tag only after you accept ad measurement. With your consent, we use it to understand which ads lead to paid purchases. Google receives the purchase value, currency and a randomly generated reference for the paid invoice. The tag may also receive the page URL, your IP address, and browser, device and cookie identifiers. Google may process this information outside Iraq, where privacy laws may differ. See how Google uses information from partner sites.

Our purchase event does not send your name, email address, card details or bank details to Google. We do not use enhanced conversions, personalized advertising or remarketing through this tracking.

You can decline or withdraw consent for future purchase measurement using “Ad privacy settings” in the client portal. Your choice is saved in your browser. Declining or withdrawing consent does not affect checkout, payment or your hosting services. Withdrawal does not erase information already sent; you can contact us about privacy requests.

10. Your choices and rights

Subject to applicable law and necessary identity verification, you may ask to access, correct, or delete personal information, object to or restrict certain processing, or request a portable copy where such a right applies. Some information must be retained for security, billing, dispute resolution, or legal obligations. You may opt out of marketing messages while continuing to receive necessary service and security communications.

11. Children

RapidNet services are not directed to children under 18, and a person under 18 may not open an account. If you believe a child provided personal information, contact us so we can investigate and take appropriate action.

12. Changes

We may update this Policy to reflect service, provider, security, or legal changes. The updated effective date will appear above. Material changes will be communicated through the website, client portal, or account contact where practicable.