contact
> home / legal / privacy policy

Privacy Policy

How XYL HOST collects, protects, encrypts, and processes personal data across our Bangladesh and European cloud systems.

GDPR Aligned • Enterprise Security • Effective: October 2026

1. Information We Collect

XYL HOST collects information necessary to provision server infrastructure, bill subscriptions, fulfill domain registration requirements, and protect our network against fraudulent activity.

  • Identity Data: Full Name, Company Name, National ID / Passport where required for local ICANN/BTCL domain regulations.
  • Contact Data: Verified Email Address, Phone Number, Billing Address.
  • Technical Data: IP Addresses, browser user-agent, SSH key fingerprints provided for root server provisioning, and WHMCS session tokens.
  • Payment Records: Transaction IDs from SSLCOMMERZ, bKash, or Stripe. XYL HOST never stores raw credit card CVV or full PAN numbers on its own servers.

2. How We Use Your Data

We strictly use collected information for:

  • Automating the provisioning of BDIX VPS, NVMe hosting accounts, and bare-metal nodes.
  • Transmitting automated billing notices, invoice receipts, and scheduled datacenter maintenance alerts.
  • Real-time automated DDoS scrubbing and abuse prevention.
  • Fulfilling ICANN domain registry accreditation agreements.

3. European Union GDPR Compliance

For customers hosted in our Vienna, Austria cloud datacenter or residents of the European Economic Area (EEA), XYL HOST acts as a Data Processor and Controller in strict alignment with Regulation (EU) 2016/679 (GDPR).

You have the right to request access, rectification, portability, or erasure ("Right to be Forgotten") of your personal data by contacting our Data Protection Officer at [email protected].

4. Data Security & Encryption Standards

All communications between your browser, our WHMCS portal, and server nodes are encrypted using Transport Layer Security (TLS 1.3) with 256-bit AES encryption. Our datacenters operate under 24/7 biometric physical access control, redundant N+1 power generators, and enterprise intrusion prevention systems.

5. Third-Party Sharing

We do not sell, rent, or monetize client personal data. Information is shared only with verified domain registrars (for WHOIS domain registration), verified payment gateways (for transaction clearing), or when strictly compelled by law enforcement pursuant to valid judicial subpoenas.

6. Cookies & Analytics

XYL HOST utilizes essential session cookies required for maintaining your authenticated session within the WHMCS client area and admin panel. We do not use third-party cross-site advertising tracking cookies.

7. Data Protection Inquiries

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact our Legal Department:

Email: [email protected]
Headquarters: House #42, Road #11, Sector #4, Uttara, Dhaka 1230, Bangladesh
EU Representative: Rennweg 16, 1030 Vienna, Austria