Last updated: 6 October 2026

This Privacy Policy explains what personal information MAGMA3C collects when you use this billing portal and the services we provide, why we collect it, who we share it with, and what control you have over it. It applies to this website, your client area, and all hosting, domain and related services we supply.

1. Who We Are

MAGMA3C operates this billing portal and is the party responsible for the personal data described here. Our contact details are in section 15.

2. Information We Collect

2.1 Information you give us

• Account details — name, company name, email address, phone number, postal address, and the country and currency you select.
• Identity details — where required for domain registration, tax compliance or fraud checks, we may ask for a CNIC/NTN number or a copy of an identity document.
• Billing details — invoices, payment history, tax identifiers, and the last four digits and expiry date of a payment card.
• Support content — the contents of support tickets, live chat, email and phone calls with us, including anything you choose to include in them.
• Service configuration — domain names, hostnames, nameservers, DNS records and product options associated with your account.

2.2 Information collected automatically

• Technical data — IP address, browser type and version, operating system, language, referring page, and the pages you visit in the client area.
• Security and audit logs — login attempts, password changes, administrative actions, and the IP address used for each, retained to detect fraud and unauthorised access.
• Server logs — web, mail and FTP access logs generated by the hosting infrastructure.
• Fraud signals — order data may be scored against fraud-prevention checks before a service is activated.

2.3 Information from third parties

We may receive information from payment gateways (payment success or failure, chargeback notices), domain registries (registration status, verification state), and abuse reporting bodies (complaints relating to content hosted on your service).

3. How We Use It

Purpose	What this involves
Providing the service	Creating accounts, provisioning hosting, registering and renewing domains, issuing SSL certificates, configuring DNS.
Billing	Generating and sending invoices, processing payments and refunds, chasing overdue amounts.
Support	Answering tickets, diagnosing faults, and accessing your service when you ask us to.
Security and abuse prevention	Detecting fraudulent orders, blocking attacks, investigating abuse complaints, and protecting other clients on shared infrastructure.
Service notices	Maintenance windows, outage notifications, expiry and renewal reminders, and changes to terms. You cannot opt out of these while you hold an active service.
Marketing	Occasional offers and product news. These are optional and every message includes an unsubscribe link.
Legal compliance	Tax and accounting records, and responding to lawful requests from competent authorities.

We do not sell your personal information, and we do not rent or trade it to advertisers.

4. Payment Information

• Card payments are processed by third-party payment gateways. Your full card number, expiry date and CVV are entered on the gateway side and are transmitted directly to them.
• We do not store full card numbers or CVV codes on our servers. Where you save a card for recurring billing, the gateway stores it and gives us a token that cannot be used elsewhere.
• For bank transfers we retain the transaction reference and the payer details shown on the receipt you submit, as proof of payment.
• Each gateway processes your data under its own privacy policy. We recommend you review the policy of the gateway you choose at checkout.

5. Domain Registration & WHOIS

Registering a domain is different from other services: the registry requires us to pass on your contact details, and some of them may be published.

• When you register, transfer or renew a domain, we send the registrant, administrative, technical and billing contact details to the registrar and to the registry operator — PKNIC for .pk domains, or the relevant gTLD/ccTLD registry otherwise.
• These parties may publish some or all of that data in the public WHOIS/RDAP directory, and may retain or escrow it as required by ICANN or by their own policy. This publication is outside our control and we cannot withdraw it.
• Where the registry supports WHOIS privacy or redaction, you may enable it in your client area. It masks data from the public directory but does not hide it from the registry, the registrar, or authorities making a lawful request.
• Some registries require you to verify your email address. If you do not respond, the registry may suspend the domain. We cannot override this.
• Registry policy, not ours, governs how long this data is retained.

6. Who We Share With

We share personal data only where it is needed to deliver the service or where the law requires it:

• Domain registrars and registries — as described in section 5.
• Payment gateways and banks — to take payment and handle refunds, disputes and chargebacks.
• Datacentre and infrastructure providers — who host the servers your service runs on and may process technical data and logs on our behalf.
• Certificate authorities — for SSL issuance and domain control validation.
• Email delivery providers — to send invoices, reminders and support replies.
• Software vendors — control panel, licensing and security vendors, limited to what is needed for licensing and support.
• Professional advisers — accountants and lawyers, under a duty of confidentiality.
• Authorities — where we receive a valid legal order, or where disclosure is necessary to investigate abuse, fraud or a threat to safety.
• A successor entity — if the business or part of it is sold or restructured, under equivalent protection.

We do not give any of these parties permission to use your data for their own marketing.

7. Cookies

This portal uses cookies for the following purposes:

• Strictly necessary — your login session, the security token that protects forms against cross-site request forgery, your shopping cart, and your language and currency selection. The portal does not work without these.
• Preference — remembering choices such as a dismissed notice.
• Analytics — where enabled, aggregate statistics about how pages are used, so we can improve the portal.
• Security — our network provider may set cookies to distinguish genuine visitors from automated attacks.

You can block or delete cookies in your browser settings, but blocking the strictly necessary ones will prevent you from logging in or placing an order.

8. How Long We Keep Data

• Account and billing records — retained for the life of the account and then for as long as tax and company law requires us to keep financial records.
• Support tickets — retained while the account is active and for a reasonable period afterwards, so we have the history if you return.
• Security and access logs — retained for a limited period for fraud and abuse investigation, then deleted or aggregated.
• Hosting content and databases — deleted after a terminated service passes its retention window. Take your own backup before cancelling.
• Marketing consent records — retained until you unsubscribe, plus a short record of the unsubscribe itself so we do not contact you again.

9. Security

• Traffic to this portal is encrypted with TLS. Passwords are stored hashed, never in plain text.
• Administrative access is restricted to staff who need it, and administrative actions are logged.
• Servers are patched, firewalled and monitored, and we operate malware scanning and brute-force protection.
• You can and should enable two-factor authentication on your client account in Hello, Your Name → Security Settings.
• No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify affected clients without undue delay and describe what happened and what to do.

10. Your Rights

You may ask us to:

• confirm what personal data we hold about you and give you a copy;
• correct data that is inaccurate or incomplete — most of this you can edit yourself in your client area;
• delete data we no longer have a lawful reason to keep;
• stop sending you marketing email, which you can also do from the unsubscribe link in any such message;
• restrict or object to a particular use of your data.

Send requests to the address in section 15 from the email address registered on the account, or through a support ticket. We will respond within a reasonable period, normally 30 days. We may need to verify your identity first. Some data cannot be deleted while it is required for tax records, for an active service, or by registry rules.

11. Data On Your Hosting

Where you host a website, application or mailbox with us and it processes other people's personal data, you are responsible for that data — for publishing your own privacy notice, for obtaining any consent required, and for responding to requests from your own users. We process it only on your instructions, as part of operating the infrastructure. Our staff access your hosting account only to resolve a fault, to respond to a request from you, or to investigate a security incident or abuse report.

12. Children

Our services are sold to adults and to businesses. We do not knowingly collect personal data from children under 18. If you believe a child has supplied us with personal data, contact us and we will delete it.

13. International Transfers

Our infrastructure and some of our suppliers are located outside Pakistan. Using our services therefore involves transferring your data to other countries, whose data protection laws may differ. We select suppliers that apply appropriate safeguards and contractual protections to data they handle for us.

14. Changes

We may update this policy as our services or the law change. The current version is always published at this URL with the date it was last updated. Material changes will be announced in the client area or by email.

15. Contact

For any privacy question or request:

• Email: [email protected]
• General support: [email protected]
• Phone: +92 330 6246232
• Address: 1st Floor, Awami Complex, Usman Block, Garden Town, Lahore, Pakistan
• Support tickets: Open a ticket

See also our Terms & Conditions and Refund Policy.