Privacy Policy
Last updated October 23, 2026
This policy explains what personal data we collect when you use Night Bloom Hosting, why we collect it, and the choices and rights you have.
1.Who we are
Night Bloom Hosting (“Night Bloom”, “we”, “us”) is a hosting provider based in Greece. We are the data controller for the personal data described in this policy, which applies to this website, the billing panel at billing.nightbloom.gr, the control panel at panel.nightbloom.gr and our hosting services.
2.Data we collect
- Account details: your name, email address and password (stored as a secure hash) when you create an account.
- Billing details: your billing address, invoices, orders and payment history. Card and bank details are handled by our payment providers and are never stored on our servers.
- Service data: the code, files, databases and backups you upload, and the settings of your servers.
- Technical data: IP addresses, login times and server logs created when you use the panels or your services. We use these to keep accounts secure and to investigate abuse.
- Support messages: anything you send us in support tickets or on Discord.
- Donations: if you donate, PayPal shares the amount and your payer details with us so we can confirm the payment.
We do not use analytics, advertising or tracking tools on this website.
3.How we use your data
We only use your data when we have a legal basis under the GDPR:
- To provide the Services you ordered, run your servers, manage your account and give support (performance of a contract).
- To keep records such as invoices for as long as tax and accounting laws require (legal obligation).
- To protect our Services, prevent fraud and abuse, and enforce our Terms of Service (legitimate interests).
- To send you service emails, such as invoices, renewal reminders and important notices about your services. We do not send marketing emails.
6.Where your data is stored
Our servers are located in the European Union, in Greece and Germany. Payment providers such as PayPal may process data outside the EU. When they do, they use safeguards approved by the European Commission, such as Standard Contractual Clauses.
7.How long we keep it
- Account data is kept while your account is open and deleted after you ask us to close it.
- Service data and backups are deleted when the service is cancelled or ends, after any suspension period.
- Invoices and payment records are kept for as long as Greek tax law requires.
- Logs are kept for a limited time and then deleted automatically.
8.Security
We protect your data with encrypted connections, hashed passwords, isolated containers for each service and restricted access to our systems. No system is perfectly secure, so please use a strong, unique password and keep your SSH keys safe.
9.Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- have incorrect data corrected;
- have your data deleted, unless we must keep it by law;
- restrict or object to how we use your data;
- receive your data in a portable format.
To use any of these rights, contact us using the details below. We will reply within one month. You can also complain to the Hellenic Data Protection Authority at dpa.gr.
10.Children
Our Services are not intended for children under 15. Ordering Services requires being at least 18 or having the permission of a parent or legal guardian. If you believe a child has given us personal data, contact us and we will delete it.
11.Changes to this policy
We may update this policy from time to time. If we make significant changes, we will announce them on our Discord server or by email. The date at the top of this page shows when it was last changed.
12.Contact
For privacy questions or requests, open a support ticket in the billing panel or contact us on our Discord server.