Privacy Policy

Last Updated: 21 August 2026

This Privacy Policy explains how Sonhosting (“Sonhosting”, “we”, “us”, or “our”) collects, uses, stores, protects, and discloses personal data in connection with www.sonhosting.com, our hosting infrastructure, domain services, websites, servers, applications, customer accounts, and other products and services we provide (collectively, the “Services”).

This Privacy Policy applies to our customers, prospective customers, website visitors, account users, and other individuals who interact directly with Sonhosting.

It also explains how we handle personal data that customers may store or process through Sonhosting’s hosting infrastructure.

By accessing our Website or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Our Role as a Hosting and Infrastructure Provider

Sonhosting provides web hosting, server infrastructure, domain-related services, website services, and related technical services.

Our customers may use our infrastructure to operate websites, applications, databases, email systems, online stores, membership platforms, business systems, and other digital services. As a result, personal data belonging to our customers or their users may be stored or processed on our infrastructure.

1.1 Personal Data We Process for Our Own Purposes

When you create an account, purchase a Service, contact us, make a payment, request technical support, or otherwise interact directly with Sonhosting, we may determine the purposes and means of processing your personal data.

In those circumstances, Sonhosting acts as a Data Controller to the extent recognised under applicable Nigerian data-protection law.

1.2 Personal Data Hosted for Our Customers

If you use Sonhosting to host a website, application, database, email system, or other service that collects or processes personal data belonging to your users, customers, employees, members, visitors, students, patients, clients, or other individuals, you generally determine why and how that personal data is collected and used.

In such circumstances, Sonhosting generally provides the infrastructure and technical environment through which that information is processed on your behalf and may act as a Data Processor.

The customer remains responsible for determining the lawful basis for processing, providing appropriate privacy notices, obtaining any required permissions or consents, responding to requests from data subjects, and ensuring that the customer’s website, application, database, content, and data-processing activities comply with applicable laws.

Where appropriate, additional contractual terms or a data-processing agreement may apply.

2. Nigerian Data Protection Law

Sonhosting operates in Nigeria and recognises the importance of protecting personal data in accordance with applicable Nigerian data-protection requirements, including the Nigeria Data Protection Act 2023 (NDP Act) and applicable regulations, guidelines, and directives issued by the Nigeria Data Protection Commission (NDPC).

The NDP Act establishes the framework for regulating the processing of personal data in Nigeria and protecting the rights and interests of data subjects.

Where another law applies to a particular Service, transaction, customer, or category of personal data, we will take that requirement into account where applicable.

Nothing in this Privacy Policy is intended to limit any right or protection that cannot lawfully be excluded under applicable Nigerian law.

3. Personal Data We Collect

We may collect personal data directly from you when you create an account, purchase a Service, register or manage a domain, contact us, make a payment, submit a support request, or otherwise interact with Sonhosting.

Depending on the Services you use, this may include:

Full name
Email address
Telephone number
Business or organisation name
Billing or service address
Domain registration information
Account and login information
Customer identification or verification information where reasonably required
Payment and transaction information
Service configuration information
Support requests and communications
Information you voluntarily provide to us
Information required to secure or recover your account

We seek to collect personal data that is reasonably necessary for providing, managing, securing, and improving our Services.

We do not require you to provide personal data that is unrelated to the Service or purpose for which it is being collected.

4. Technical and Usage Information

When you visit our Website or use our Services, certain technical information may be collected automatically.

This may include:

IP address
Browser type and version
Operating system
Device information
Language and regional settings
Pages visited
Referring pages
Date and time of access
Login and authentication information
Service usage information
Error and diagnostic information
Security and abuse-detection information

We may use this information to operate and secure our Website and Services, monitor performance, troubleshoot technical problems, detect abuse, prevent fraud, maintain security, and understand general usage patterns.

5. Customer-Hosted Data

Customers may store websites, applications, databases, files, emails, documents, images, videos, backups, and other information on Sonhosting infrastructure.

We do not generally inspect customer content for purposes unrelated to providing or securing the Services.

However, limited access to customer data or systems may be necessary where reasonably required for legitimate operational purposes, including:

Providing technical support requested by the customer
Maintaining or troubleshooting servers
Investigating security incidents
Detecting or preventing abuse
Responding to malware or security threats
Responding to service incidents
Performing backups and restoration
Maintaining infrastructure
Complying with applicable legal obligations
Responding to valid legal or regulatory requests
Protecting Sonhosting, our customers, or third parties from security threats

Any such access will be limited, where reasonably practicable, to what is necessary for the relevant purpose.

Customers remain responsible for the personal data and other content they place on our infrastructure and for ensuring that they have an appropriate lawful basis, permissions, notices, and safeguards for processing that information.

6. How We Use Personal Data

We may use personal data collected by Sonhosting for purposes including:

Creating and managing customer accounts
Providing hosting and related Services
Processing payments and transactions
Registering and managing domains
Providing customer and technical support
Sending service and account notifications
Maintaining and improving our infrastructure
Monitoring system performance
Detecting and preventing fraud, abuse, malware, and security threats
Maintaining account and server security
Troubleshooting technical problems
Performing backups and service restoration
Enforcing our Terms of Service
Complying with legal and regulatory obligations
Resolving disputes
Protecting our rights, property, systems, customers, and users
Sending relevant service-related communications
Improving our products and customer experience

We do not sell customers’ personal data as a business practice.

7. Lawful Basis for Processing

Depending on the circumstances, Sonhosting may process personal data on one or more lawful bases recognised under applicable Nigerian data-protection law.

These may include:

Performance of a contract or steps taken at your request before entering into a contract
Compliance with a legal obligation
Your consent, where consent is required or appropriate
Legitimate interests where permitted by applicable law
Protection of vital interests where applicable
Performance of a task carried out in the public interest or under applicable legal authority, where relevant

The appropriate lawful basis depends on the nature and circumstances of the particular processing activity.

Where we rely on consent, you may withdraw that consent where applicable. Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

8. Customer Communications

We may send communications necessary to operate your account or provide your Services.

These may include:

Account notifications
Payment and billing notices
Domain renewal notices
Password and security notifications
Service announcements
Maintenance notifications
Important changes to our Services or policies
Support responses
Service interruption or incident notifications

Where permitted by applicable law, we may also send information about products, services, offers, or promotions that may be relevant to you.

You may opt out of non-essential marketing communications while continuing to receive communications that are necessary for your account, transactions, security, or Services.

9. Billing and Payments

Payments for Sonhosting Services may be processed through third-party payment providers.

Depending on the payment method used, Sonhosting may receive information necessary to identify and reconcile a transaction, such as:

Customer name
Email address
Transaction reference
Amount paid
Payment status
Payment date
Other transaction-related information

Payment card details and other sensitive payment credentials may be processed directly by the relevant payment provider rather than stored by Sonhosting.

Payment providers process personal data according to their own privacy policies and terms.

Where appropriate, you should review the privacy policy of the payment provider used for your transaction.

10. Domain Registration Information

When you register, transfer, renew, or manage a domain through Sonhosting, we may need to collect and transmit information required by the applicable domain registry, registrar, or registration service.

Depending on the domain extension, this may include:

Registrant name
Organisation
Email address
Telephone number
Address
Administrative contact information
Technical contact information

The information required and the way it is handled may vary depending on the domain extension, registry requirements, registrar requirements, and applicable law.

Certain domain-related information may be subject to disclosure requirements established by domain registries, registrars, or applicable legal authorities.

11. Cookies and Similar Technologies

Sonhosting may use cookies and similar technologies to operate and secure our Website, maintain sessions, remember preferences, analyse Website usage, and improve our Services.

Cookies and similar technologies may be used for:

Authentication
Security
Account functionality
Preferences
Analytics
Website performance

Third-party services integrated into our Website may also use cookies or similar technologies according to their own policies.

You can configure your browser to reject or delete cookies. However, disabling certain cookies may affect the functionality of parts of our Website or Services.

12. Third-Party Service Providers

We may use trusted third-party service providers to help us operate our business and deliver our Services.

These providers may assist with:

Payment processing
Domain registration
Email delivery
Customer support
Analytics
Infrastructure and server services
Security and monitoring
Backup and storage
Fraud and abuse prevention
Business administration

We seek to provide third-party providers with only the personal data reasonably necessary for them to perform their authorised functions.

Where applicable, third-party providers are expected to process personal data in accordance with their contractual obligations and applicable privacy requirements.

13. International Data Transfers

Some third-party service providers, infrastructure providers, domain services, or other technologies used by Sonhosting may process or store personal data outside Nigeria.

Where personal data is transferred outside Nigeria, Sonhosting will take reasonable steps to ensure that the transfer and subsequent processing are carried out in accordance with applicable Nigerian data-protection requirements.

The NDP Act contains specific provisions concerning transfers of personal data to foreign countries and requires appropriate safeguards where applicable.

Customers who use Sonhosting infrastructure to process personal data remain responsible for considering any international transfers arising from their own websites, applications, integrations, or services.

14. Security

We maintain reasonable administrative, technical, and organisational measures designed to protect personal data within our control against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

Depending on the Service, security measures may include:

Access controls
Authentication mechanisms
Encryption where appropriate
Network and server security measures
Security monitoring and logging
Malware and abuse detection
Regular security maintenance
Backups and recovery procedures
Restricted administrative access

However, no Internet transmission, computer system, server, or storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect personal data, we cannot guarantee absolute security.

Customers are also responsible for securing their own accounts, applications, passwords, databases, websites, plugins, scripts, and other content hosted on our infrastructure.

15. Customer Account Security

You are responsible for maintaining the confidentiality of your account credentials and taking reasonable steps to protect access to your Sonhosting account.

You should notify us promptly if you believe that your account, password, server, API credentials, domain account, or other credentials have been compromised.

We may temporarily restrict, suspend, or otherwise limit access where reasonably necessary to protect an account, server, network, customer, or third party from suspected unauthorised access, fraud, abuse, or security threats.

16. Data Breaches and Security Incidents

If we become aware of a security incident involving personal data within our control, we will take reasonable steps to investigate, contain, and remediate the incident.

Where notification is required under applicable law, we will make the required notifications to the relevant authorities and/or affected individuals within the applicable requirements.

Where a security incident affects personal data hosted by a customer and the customer determines the purposes and means of processing that information, Sonhosting may cooperate with the customer as reasonably necessary to investigate and respond to the incident, subject to applicable law and the circumstances of the incident.

17. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including where necessary for:

Providing Services
Maintaining customer accounts
Meeting contractual obligations
Maintaining financial and business records
Resolving disputes
Preventing fraud and abuse
Maintaining security
Complying with legal obligations
Enforcing our agreements

When personal data is no longer reasonably required, we may delete, anonymise, or securely dispose of it, subject to legal, operational, backup, security, or other legitimate requirements.

Backups may retain information for a limited period after information has been removed from active systems.

18. Customer Data After Service Termination

When a hosting or other Service is cancelled or terminated, customer content may be removed from our active systems in accordance with our Terms of Service and applicable retention procedures.

Customers are responsible for maintaining independent backups of their websites, applications, databases, email accounts, files, and other content.

Where technically and contractually available, customers may request assistance with transferring or recovering their data before termination or deletion.

We do not guarantee indefinite retention of customer data after a Service has been terminated.

19. Data Sharing and Disclosure

We do not routinely sell or disclose personal data for unrelated commercial purposes.

We may disclose personal data where reasonably necessary:

To provide the Services
To trusted service providers
To domain registries or registrars
To payment providers
To security and infrastructure providers
To comply with applicable law
In response to valid legal processes
To prevent fraud, abuse, malware, or security threats
To protect the rights, property, safety, or security of Sonhosting, our customers, users, or others
In connection with a merger, acquisition, restructuring, financing, or sale of some or all of our business or assets

Where permitted by law, we will seek to limit disclosures to personal data reasonably necessary for the relevant purpose.

20. Legal and Regulatory Requests

Sonhosting may be required to disclose personal data in response to valid requests from courts, law-enforcement agencies, regulators, or other authorised governmental authorities.

Where legally permitted and reasonably practicable, we may notify the affected customer or individual before making such disclosure.

We may also disclose information where reasonably necessary to investigate or prevent fraud, abuse, security threats, unlawful activity, or harm to Sonhosting, our customers, users, or third parties.

21. Your Data Protection Rights

Subject to applicable law and any lawful limitations, you may have rights concerning personal data that Sonhosting holds about you.

These may include the right to:

Be informed about the processing of your personal data
Request access to your personal data
Request correction or rectification of inaccurate or incomplete personal data
Object to certain processing
Request restriction of processing in appropriate circumstances
Request deletion or erasure where applicable
Request data portability where applicable
Withdraw consent where consent is the lawful basis for processing
Exercise rights relating to certain automated decision-making
Lodge a complaint with the Nigeria Data Protection Commission where appropriate

The NDPC identifies these among the rights available to data subjects under the NDP Act.

Some requests may be subject to legal, contractual, security, or other lawful limitations.

21.1 Making a Privacy Request

If you wish to exercise a privacy right or ask a question about how Sonhosting processes your personal data, contact us using the details provided in the Contact Us section.

We may request sufficient information to verify your identity and protect your account and personal data before processing certain requests.

22. Customer Responsibilities

If you use Sonhosting to host a website, application, database, or other service that collects or processes personal data from users, you are responsible for:

Providing an appropriate privacy notice to your users
Identifying an appropriate lawful basis for processing
Obtaining any required consent or permission
Processing personal data fairly, lawfully, and transparently
Responding appropriately to data-subject requests
Securing your applications and databases
Managing user and administrator access appropriately
Maintaining appropriate backups
Keeping your software and applications reasonably secure
Complying with applicable data-protection and privacy laws
Ensuring that content stored on Sonhosting infrastructure is lawful

Sonhosting provides hosting, infrastructure, and related technical services but generally does not determine the purposes for which customers collect or process personal data through their own websites, applications, or systems.

23. Confidentiality of Customer Information

We treat customer account information and information obtained through the provision of our Services as confidential.

We will not intentionally disclose customer information to unrelated third parties except where:

Disclosure is necessary to provide the Services
Disclosure is authorised by the customer
Disclosure is required by applicable law or valid legal process
Disclosure is necessary to investigate fraud, abuse, or security incidents
Disclosure is reasonably necessary to protect Sonhosting, our customers, users, or third parties

This Privacy Policy does not give Sonhosting ownership of customer websites, applications, files, databases, intellectual property, or other customer content.

Customers retain ownership of their content and intellectual property, subject to the rights and licences reasonably necessary for Sonhosting to provide the Services.

24. Third-Party Websites and Services

Our Website or Services may contain links to websites, applications, payment platforms, registrars, or other services operated by third parties.

Sonhosting is not responsible for the privacy practices, security, availability, or content of third-party websites and services.

We encourage you to review the privacy policy and terms of any third-party service before providing personal data to it.

25. Children’s Privacy

Our Services are intended for general users, businesses, organisations, and other customers and are not specifically directed toward children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal data to Sonhosting in circumstances where it should not have been collected, please contact us so that we can investigate and take appropriate action.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements, regulatory guidance, or business practices.

When we make material changes, we may provide notice through our Website, customer account, email, or another appropriate method.

The updated version will become effective when published unless otherwise stated.

The Last Updated date at the top of this Privacy Policy indicates when it was most recently revised.

27. Contact Us

If you have questions, concerns, requests, or complaints relating to this Privacy Policy or the processing of your personal data by Sonhosting, please contact us.

Sonhosting

Email: [email protected]

Website: www.sonhosting.com

For privacy-related requests, please include sufficient information for us to identify your account or understand the nature of your request.

If you believe your privacy rights have not been adequately addressed, you may also have the right to contact the Nigeria Data Protection Commission (NDPC) through its official channels. The NDPC is the statutory data-protection authority established under the Nigeria Data Protection Act 2023.

28. Effective Date

This Privacy Policy is effective from 21 August 2026.