Skip to content
Legal

Privacy Policy

What data we process, what for, and how to exercise your rights (Law No. 18,331).

37 views

Last updated: 27 September 2026.

This policy explains what personal data we process, what we use it for and what rights you have, under Uruguay's Personal Data Protection Law No. 18,331 and its Regulatory Decree No. 414/009.

1. Controller

The controller of your data is Ultimate Hosting, in Uruguay. For any privacy matter, write to us through the contact form or open a ticket from your client area.

2. What data we process

  • Account: name, email address and password (stored encrypted, never in plain text). Also phone number, address and company, if you give them to us.
  • Billing: services ordered, invoices and payments (the identifier of each transaction). Your card details are processed by the payment provider: we never receive or store them.
  • Technical data: IP address, browser, active sessions and access and security logs.
  • Communications: tickets, contact messages, quote requests and abuse reports.
  • What you host: your files, databases and servers. We only access them to provide the service, to resolve something you ask us to, or to investigate abuse or comply with a legal requirement.

3. What we use it for

  • Creating and managing your account and your services.
  • Invoicing, collecting payment and meeting our legal, accounting and tax obligations.
  • Emailing you about your account: invoices, due-date reminders, changes to your services and support replies. These notices are part of the service and cannot be turned off while you have active services.
  • Protecting the platform and our customers from fraud, abuse and attacks.
  • Showing recent purchases on the site, only with your first name and the initial of your surname, without amounts. If you would rather not appear, write to us and we will remove you from that list.
  • Measuring how the site is used with Google Analytics, only if you accept it in the cookie notice.
  • Showing the site in your language: from your IP address we infer only your country, without storing it, using IP Geolocation by DB-IP.

4. Who we share it with

We do not sell your data. We only share it with the providers we need to provide the service, and with the authorities when a law or a court order requires us to.

  • Hetzner Online GmbH (Germany): servers where the platform and your services run.
  • Cloudflare, Inc. (United States): DNS, protection and delivery of the site.
  • Brevo (France): sending emails.
  • Payment providers such as PayPal and Tebex: they process your payment under their own privacy policies.
  • Google LLC (United States): Google Analytics, only with your consent.

5. International transfers

Some of these providers are outside Uruguay. For Uruguay, the countries of the European Union offer an adequate level of protection. Where a provider is in a country that does not, such as the United States, the transfer is based on it being necessary to provide the service to you, or on your consent, and on the contractual safeguards the provider offers.

6. How long we keep it

  • Your account data, for as long as you have the account.
  • Invoices and payments, for the period required by accounting and tax rules, even if you close your account.
  • The log of emails sent, 90 days.
  • A service's data, until the service is terminated. Backups that contain it are overwritten in their normal cycle.
  • Security logs, only as long as needed to protect the platform.

7. Cookies

  • Necessary: your session, your cart, site security and your language and currency. They cannot be turned off.
  • Analytics (Google Analytics): only used if you accept them in the cookie notice.

You can change your choice at any time from your client area, under Account → Privacy.

8. Your rights

You have the right to access your data, to ask for it to be corrected, updated, completed or deleted, and to withdraw any consent you have given.

  • In your client area, under Account → Privacy, you can ask for a copy of your data or ask us to delete it.
  • You can also ask through the contact form.
  • We reply within the 5 business days set by law.
  • We cannot delete what the law requires us to keep, such as invoices: in that case, we unlink those records from your identity.

If you are not satisfied with our reply, you can file a complaint with Uruguay's Personal Data Regulatory and Control Unit (URCDP), at gub.uy/urcdp.

9. Security

We protect your data with encrypted connections (HTTPS), encrypted passwords, optional two-step verification, restricted access to our systems and backups.

10. Minors

If you are under 18, you need the permission of a parent or guardian to use our services.

11. Changes to this policy

If we change it significantly, we will email you before the change applies.