Last updated: March 24, 2026
WPCloud Inc. (“WPCloud,” “we,” “us,” or “our”) is committed to protecting the privacy of our customers and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (wpcloud.ca) and our managed WordPress hosting services.
WPCloud is a Canadian company. All personal information collected through our services is stored and processed exclusively within Canada, in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including the Personal Health Information Protection Act (PHIPA).
1. Information We Collect
Information You Provide
We collect information that you provide directly to us, including:
- Account information: name, email address, mailing address, phone number, and payment information when you create an account or purchase a plan
- Communication data: information you provide when you contact our support team, submit a form on our website, or otherwise communicate with us
- Domain and site information: domain names, DNS records, and WordPress configuration details associated with your hosting account
Information Collected Automatically
When you visit our website or use our services, we automatically collect certain information, including:
- Log data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps
- Device information: device type, screen resolution, and language preferences
- Usage data: hosting resource consumption, bandwidth usage, storage utilisation, and server performance metrics
Information from Third Parties
We may receive information from third-party services that you authorise to interact with your WPCloud account, such as domain registrars or DNS providers.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our managed WordPress hosting services
- To process transactions and send related billing information
- To respond to your support requests, comments, and questions
- To send you service-related notices, including maintenance alerts, security advisories, and account notifications
- To monitor and analyse usage patterns to improve the performance, reliability, and security of our infrastructure
- To detect, prevent, and address fraud, abuse, and security incidents
- To comply with legal obligations and enforce our Terms of Service
We do not use your personal information for automated decision-making or profiling. We do not sell your personal information to third parties.
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:
- Service providers: We share information with trusted third-party service providers who assist us in operating our infrastructure, processing payments, and delivering support. These providers are contractually obligated to protect your information and may only use it for the purposes we specify. A list of our sub-processors is available in our Data Processor Agreement.
- Legal compliance: We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
- With your consent: We may share information with third parties when you have given us explicit consent to do so.
4. Data Storage and Canadian Residency
All personal information and hosting data is stored exclusively within Canada. Our data centres are located in:
- Montreal, Quebec (primary data centre)
- Toronto, Ontario (failover and backup)
- Coquitlam, British Columbia (Western Canada and provincial compliance)
Your data does not leave Canadian borders. There is no US routing and no offshore data processing. This ensures compliance with Canadian federal and provincial privacy legislation, including PIPEDA and PHIPA.
Some third-party services integrated with our infrastructure (such as CDN providers) may process data outside of Canada. Where this occurs, we ensure appropriate contractual safeguards are in place. Details are provided in our Data Processor Agreement.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. After account cancellation, we retain your information for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Account data: retained for 90 days after account closure, then permanently deleted
- Backup data: retained for 30 days after account closure, then permanently deleted
- Billing records: retained for seven years to comply with Canadian tax and financial reporting requirements
- Support correspondence: retained for two years after the last interaction
You may request deletion of your personal information at any time by contacting us at privacy@wpcloud.ca.
6. Security
We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Server-level firewalls and intrusion detection systems
- Imunify360 malware scanning and web application firewalls
- CloudLinux account isolation to prevent cross-account access
- Role-based access controls for all staff
- Regular security audits and vulnerability assessments
While we take reasonable precautions to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
7. Your Privacy Rights
Under Canadian privacy law, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Withdrawal of consent: Withdraw your consent to the processing of your personal information at any time
- Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated
To exercise any of these rights, contact us at privacy@wpcloud.ca. We will respond to your request within 30 days.
8. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@wpcloud.ca.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website prior to the change becoming effective. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
10. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
WPCloud Inc.
41 John Street #10
Port Hope, Ontario L1A 2Z3
Canada
Email: privacy@wpcloud.ca