Privacy Policy

1. Who we are

FourSys Cloud Hosting ("FourSys," "we," "us," or "our") operates foursyscloud.com and provides web hosting, domain services, DNS and email management tools, customer support, and an affiliate program. For information collected to manage our customer accounts and orders, FourSys determines the purposes and methods of processing.

You can contact FourSys about privacy at [email protected] or through our contact page. We apply the principles of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and other privacy laws that apply to the particular processing activity.

2. Personal information we collect

Depending on how you use our platform, information we may process includes:

• Account and contact details: name, email address, optional contact number, account identifiers, verification status, the version and date of Terms acceptance, and password credentials stored in protected form.
• Purchases and subscriptions: ordered plans, prices, selected billing periods, invoice or order references, payment and renewal statuses, refunds, and service history.
• Domain registration details: registrant name, contact details, address, country, requested domains, and verification records when necessary for registration or transfers.
• Hosting and support information: domains, DNS configuration, hosting account identifiers, support requests, submitted messages, mail and website configuration, and technical troubleshooting information.
• Affiliate program details: voucher and referral codes, eligible purchases, commission ledger entries, payout requests, selected bank or e-wallet, account holder, and payout account number.
• Technical and security information: IP address, device and browser information, timestamps, login attempts, system activity, cookies, and other records required to secure and operate the service.

Some information is provided directly by you; other information arises when you use the service or is supplied by a payment processor, registrar, or platform provider in connection with a transaction.

3. Why we process information and the applicable basis

We use personal information for legitimate and defined service purposes, including:

• Registering and authenticating accounts, sending email verification codes, and handling recovery requests.
• Creating orders, provisioning and maintaining hosting services, domains, DNS, websites, SSL certificates, and email functionality.
• Processing and reconciling payments, refunds, affiliate commissions, and manual withdrawal requests.
• Replying to support and contact requests and investigating technical or service incidents.
• Preventing fraud, abuse, unauthorized access, spam, and threats to shared infrastructure.
• Meeting applicable accounting, tax, dispute-resolution, security, and other legal obligations.
• Providing optional product announcements or offers, subject to applicable requirements and your communication preferences.

Depending on the activity, processing may be necessary to perform a contract or requested service, comply with a legal obligation, pursue a legitimate interest that is not overridden by your rights, or rely on consent where required by law. We do not treat the publication of this privacy notice itself as consent.

4. Payments and affiliate payout details

Checkout payments may be processed through PayMongo and its supported financial networks. The payment provider processes payment credentials in accordance with its own notices and obligations. FourSys uses transaction references, amounts, status updates, and related information to fulfill and reconcile purchases, address disputes, and maintain necessary financial records.

Affiliates can provide GCash, Maya, or supported bank account details for manual payouts. We store the payout destination in encrypted form and generally display only a masked account number to customers and administrators. Authorized access to full payout details is restricted to account verification or payout processing. We retain records of commission and payout decisions as needed for reconciliation, financial compliance, and disputes.

5. Domain registration and third-party registries

When you request a domain, relevant registrant information may be shared with the domain registrar, the applicable domain registry, and verification providers to register, manage, transfer, renew, or validate the domain.

Domain registrars and registries may have independent legal requirements and privacy notices, including requirements concerning registration records or disclosure of certain information. Privacy/proxy services, where offered, may have separate conditions. See the terms of the registrar and registry associated with your particular domain.

6. Information hosted by our customers

Your websites, databases, uploaded files, and email services can contain personal information about your own users, employees, or customers. For that information, the hosting customer generally decides which data to collect and why, while FourSys supplies infrastructure and technical services subject to instructions, operational requirements, and applicable law.

Customers are responsible for their own privacy notices, lawful bases, permissions, and security practices for data they collect through hosted websites or applications. If you wish to exercise rights concerning information collected by a website hosted on FourSys, contact that website's owner first. We will assist with legitimate requests in accordance with our applicable duties.

7. Who may receive information

We share relevant information only when needed for service delivery, compliance, security, support, or another lawful purpose. Recipient categories may include:

• Payment providers: PayMongo and participating financial institutions for payment or refund processing.
• Domain providers: applicable domain registrars, registries, DNS partners, and verification services.
• Infrastructure and security providers: hosting or network operators, DNS and traffic-security providers such as Cloudflare, and supporting technical systems.
• Authorized personnel and contractors: those who need appropriate access for technical support, account management, security, or manual affiliate payouts.
• Regulators or legal authorities: when disclosure is required or otherwise permitted by applicable law.

Some service providers may process or store information in locations outside the Philippines. Where such transfers occur, we remain accountable for appropriate safeguards and arrangements as required by applicable privacy law.

8. Cookies, sessions, and fraud prevention

Our website uses session and security-related technologies to keep users signed in, preserve selections such as referral vouchers, prevent misuse, and maintain the security of our pages and forms. Some forms use anti-bot services such as Cloudflare Turnstile, which may process technical request data to help distinguish legitimate activity from abuse.

Browser controls may allow you to remove or block cookies, although blocking essential session cookies can prevent sign-in, checkout, and other core functions. If we introduce additional analytics or advertising tracking that requires a separate notice or consent, we will update our disclosures and controls as appropriate.

9. How long information is kept and how it is protected

We retain active account and service information for as long as needed to provide the services you use. Following cancellation, some records may be kept for a limited additional period to handle backups, fraud prevention, support history, disputes, legitimate business purposes, and mandatory accounting or legal retention. Financial and commission transaction records may need to be retained for applicable statutory periods. Security records and temporary session information are kept according to their operational purpose rather than indefinitely.

Retention depends on the category of information, the status of your services, backup cycles, the need to establish or defend legal claims, and applicable recordkeeping requirements. You can ask us about retention relevant to your particular records using the contact details below.

We use measures intended to protect information, including access controls, protected authentication, encrypted storage for sensitive payout details, and technical security and monitoring. No online system is completely risk-free. If a security incident affecting personal information occurs, we will assess and respond in accordance with applicable legal requirements.

10. Your privacy rights

Depending on applicable law and the circumstances, you may request information about our processing, access your personal data, ask for correction of inaccurate data, object to certain processing, request erasure or blocking when legally available, and request data portability in appropriate circumstances. You may also have rights to seek damages or lodge a complaint with the National Privacy Commission.

Send requests to [email protected]. We may verify your identity before responding to prevent unauthorized disclosure. Some requests may be limited by ongoing contractual commitments, security needs, another person's rights, or laws requiring particular records to be retained. We will explain relevant limitations when applicable.

11. Service communications, marketing, and updates

We send operational messages such as verification codes, payment and renewal updates, and service notifications where necessary to manage your account. We may also provide information about products, plans, features, or promotions. Where applicable, you may opt out of promotional communications by following an available opt-out method or contacting us. Essential service notices may continue while the account or relevant records remain active.

We may revise this Policy when our systems, vendors, data practices, or legal duties change. Material changes will be communicated in an appropriate manner, and the revision date will be updated here.

12. Privacy questions and contact

For privacy inquiries, personal-information requests, concerns about misuse, or information about the responsible privacy contact, reach:

Please avoid including passwords, full card credentials, or complete bank account numbers in an ordinary email or public support message.