The details, clearly laid out

Privacy policy

This Privacy Policy explains how Lemon Host, operated by Geometric Hosting (Pty) Ltd (“Lemon Host”, “we”, “us”, “our”), collects, uses, stores, discloses, and protects personal information when you use lemonhost.io, our hosting infrastructure, billing systems, support services, and related offerings (“Services”).

By accessing or using our Services, you consent to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We may collect personal and technical information necessary to provide our Services, including but not limited to:

Personal Information

Full name
Company name
Email address
Contact number
Billing address
VAT/tax details where applicable
Domain registrant details
Identity or company registration information where required for verification or compliance

Billing & Payment Information

Payments may be processed through authorised third-party payment providers.

We may collect:

Billing references
Payment confirmations
Transaction metadata
Limited payment-related information necessary for billing administration

Lemon Host does not intentionally store full credit card or full banking credentials on internal systems unless explicitly required by an approved payment arrangement.

Technical Information

We may collect:

IP addresses
Browser/user-agent data
Login timestamps
Control panel access logs
Email server logs
DNS query records
API usage logs
Support interaction records
System diagnostic data
Security event logs
Abuse monitoring data

Website & Infrastructure Data

Where Services involve hosting or server infrastructure, system-level technical data may be processed as part of normal service delivery, maintenance, abuse prevention, and security monitoring.

2. How We Use Information

We use collected information to:

Provide hosting, email, DNS, cloud, server, and domain services
Provision, maintain, and manage accounts
Process billing and subscriptions
Process debit orders or authorised recurring payments
Detect fraud, abuse, spam, and security threats
Provide support and troubleshooting
Maintain service reliability and infrastructure security
Respond to legal obligations
Enforce contractual terms
Communicate invoices, notices, maintenance alerts, service changes, and account updates
Prevent abuse affecting other clients or infrastructure

We process only information reasonably necessary for legitimate business and service delivery purposes.

3. Payment Processing

Payment processing may be handled by authorised third-party providers.

Lemon Host may receive transaction confirmations and limited billing metadata necessary to manage your account.

We do not assume responsibility for the privacy or security practices of independent payment processors.

Clients should review the privacy policies of those providers directly.

4. Legal Basis for Processing

Where applicable, personal information is processed based on:

Contractual necessity
Legitimate business interests
Legal/regulatory compliance
Fraud prevention
Security monitoring
Client consent where required

For South African clients, processing is intended to align with the Protection of Personal Information Act (POPIA) where applicable.

5. Hosting Environment & Client Responsibility

Lemon Host provides hosting infrastructure services.

Clients remain solely responsible for:

Information collected through their own websites
Compliance with privacy laws applicable to their business
Cookie notices
Consent mechanisms
Website privacy policies
Data collection forms
Third-party integrations
CRM systems
Analytics tools
Marketing scripts
Website application security

Lemon Host is not the data controller or responsible party for personal information independently collected, processed, or stored by client websites, applications, databases, or third-party systems installed by clients.

This includes, but is not limited to:

WordPress websites
WooCommerce stores
Contact forms
Booking systems
CRM integrations
Membership systems
Newsletter platforms
API-connected applications
Custom databases

6. Security Measures

We implement commercially reasonable technical and organisational safeguards to protect data and infrastructure.

These may include:

Access controls
Firewall protections
Abuse monitoring
Malware scanning (where applicable)
Authentication controls
Infrastructure hardening
Logging and incident monitoring

However:

No internet-based system can be guaranteed completely secure.

Lemon Host does not warrant absolute protection against:

Hacking
Malware
Zero-day exploits
Credential theft
Social engineering
Insider abuse
Third-party vulnerabilities
Supply-chain attacks
Client negligence

7. Security Incident Disclaimer

If a breach, compromise, attack, or data incident occurs due to:

Client negligence
Weak credentials
Compromised devices
Outdated website software
Vulnerable plugins/themes
Unsafe code
Insecure third-party applications
Misconfiguration by the client

Lemon Host shall not be held liable for resulting losses, disclosure, corruption, or misuse of information.

Where infrastructure-level incidents occur, Lemon Host may take emergency action to protect systems, including suspension, isolation, credential resets, blocking access, or emergency remediation.

8. Information Sharing & Disclosure

We do not sell personal information.

We may disclose information where reasonably necessary to:

Payment processors
Domain registrars
DNS providers
Infrastructure vendors
Security providers
Data centre providers
Legal authorities
Regulatory bodies
Fraud prevention partners
Abuse mitigation providers
Professional advisers

Information shared is limited to what is reasonably necessary for service delivery, compliance, or infrastructure protection.

9. Data Retention

We retain information only for as long as reasonably necessary for:

Service delivery
Support history
Security investigations
Billing records
Compliance obligations
Contract enforcement
Fraud prevention
Legal recordkeeping

Retention periods may continue after account termination where required by law or operational necessity.

Backup retention policies may differ from active account data.

10. Cookies & Technical Tracking

Lemon Host may use essential cookies or technical session mechanisms necessary for:

Account authentication
Billing portal access
Session management
Security verification
Fraud prevention
Basic website functionality

We do not intentionally use invasive behavioural advertising tracking unless separately disclosed.

Basic analytics or technical telemetry may be used for operational improvement.

11. International Processing

Infrastructure, vendors, registrars, software platforms, and technical providers may process information outside South Africa.

By using our Services, you acknowledge that information may be transferred internationally where necessary for service delivery.

Reasonable safeguards will be applied where commercially practical.

12. Access, Correction & Deletion Requests

Subject to applicable law, clients may request to:

Access their personal information
Correct inaccurate records
Request deletion where legally permissible
Object to certain processing
Request restriction where applicable

Requests may be refused where retention is required for:

Legal obligations
Billing disputes
Fraud prevention
Abuse investigations
Contract enforcement
Security compliance

13. Service Communications

By using our Services, you consent to receiving operational communications, including:

Invoices
Account notices
Service updates
Maintenance notifications
Security alerts
Suspension notices
Legal notices

These are considered necessary service communications and not marketing communications.

14. Third-Party Services

Our Services may integrate with independent third parties.

These providers operate under their own privacy policies.

Lemon Host is not responsible for third-party privacy practices.

15. Limitation of Liability

To the fullest extent permitted by law, Lemon Host shall not be liable for:

Indirect losses
Data breaches caused by client systems
Website privacy non-compliance
Third-party misuse
Infrastructure attacks
Malware incidents
Service interruptions
Data corruption
Data loss
Business interruption
Reputation damage

Use of our Services is at your own risk.

16. Policy Updates

We may update this Privacy Policy at any time.

Continued use of Services after updates constitutes acceptance of the revised policy.

17. Governing Law

This Privacy Policy is governed by the laws of the Republic of South Africa.

18. Contact

For privacy-related requests or questions, please contact Lemon Host through the contact details published on lemonhost.io.