Data Protection & Privacy Policy

1. Who We Are and Why This Privacy Policy Exists

At APT COM (operated by MTI Trading), protecting your privacy is important to us. This Privacy Policy explains what information we collect when you use our website and hosting-related services, how we use and share that information, how long we keep it, and what rights you have over it.

This Privacy Policy should be read together with our Terms of Service and Backup Policy, which are incorporated here by reference. If there is any conflict between this Privacy Policy and those documents regarding data handling, the more specific provision (e.g., the Backup Policy’s compliance-backup terms) will apply.

APT COM is a web hosting service operated by MTI Trading, based at Hazi Para, Agrabad, Chattogram-4100, Bangladesh. For any questions about this Privacy Policy or your personal data, contact us at support@aptctg.com.

2. Information We Collect

We collect the following categories of information when you interact with our website or services:

2.1 Account and Billing Information

When you register for or purchase a Service, we collect information such as your full name, email address, phone number, billing address, and payment details necessary to process your order (processed via our payment partners — see Section 5).

2.2 Domain Registration Information

If you register or transfer a domain through us, your name, address, email, and phone number may be submitted to the relevant domain registry/registrar (e.g., ICANN-accredited registrars) as required for WHOIS records, subject to that registry’s own privacy rules and any WHOIS privacy service you select.

2.3 Hosting and Technical Data

This includes data related to your hosting account: server/cPanel login activity, IP addresses, resource usage logs, DNS records, and website/email files and databases stored on our servers as part of the Service you purchased.

2.4 Support and Communication Data

When you contact us via HelpDesk ticket, Live Chat, email, or phone, we collect the content of that communication along with your contact details, in order to provide support and maintain a record of past issues.

2.5 Website Usage Data

Like most websites, we may automatically collect your IP address, browser type, device information, and pages visited, through standard server logs and cookies (see Section 8).

2.6 Comments

If you leave a comment on our website (e.g., blog), we collect the name, email, and website you provide, along with your IP address and browser user agent, to help detect spam. An anonymized hash of your email may be checked against the Gravatar service; if matched, your Gravatar profile picture will be publicly visible next to your comment (Automattic’s privacy policy governs that service).

3. How We Use Your Information

We use the information described above to:

• Provide, operate, and maintain the Services you have purchased.
• Process payments, renewals, and refunds accurately.
• Respond to support requests and communicate important account, maintenance, or service notices.
• Detect, prevent, and investigate fraud, abuse, security incidents, or violations of our Terms of Service / Acceptable Use Policy.
• Comply with our legal obligations, including responding to valid requests from government authorities or law enforcement.
• Improve our website and services, and, where you have not opted out, send occasional promotional communications (see Section 20 of our Terms of Service).

4. Legal Basis for Processing

We process your personal data because it is necessary to perform our contract with you (providing the Service), to comply with legal obligations applicable to us in Bangladesh, and/or based on our legitimate business interests (such as fraud prevention, network security, and service improvement), balanced against your rights.

5. How We Share Your Information

We may share limited information strictly as necessary with:

• Payment processors and gateways (such as SSLCommerz, bKash, Nagad, Rocket, PayPal, Payoneer, Skrill, Neteller, or bank transfer partners) solely to process your transactions.
• Domain registries/registrars as required to register, renew, or manage a domain on your behalf.
• Third-party infrastructure and service providers (e.g., data center operators, spam-detection services such as Akismet/SpamExperts) who help us deliver and secure the Services, under confidentiality obligations.
• Government authorities, law enforcement, or regulatory bodies, where required by applicable Bangladeshi law, a valid legal request, or to protect the rights, property, or safety of APT COM, our customers, or the public. This includes disclosures made in connection with the monthly internal compliance backup described in our Backup Policy.
• Successors, in the event of a merger, acquisition, or sale of business assets, subject to the same privacy commitments described here.

6. Data Retention Schedule

We retain personal and account data only as long as necessary for the purposes described in this policy:

• Active accounts: Data is retained for as long as your account remains active.
• Cancelled or terminated accounts: Hosting data (files, databases, email) is handled according to our Backup Policy — generally deleted after 7 days (shared/reseller) or 30 days (VPS/dedicated) following cancellation or termination, unless a longer period is required by law.
• Billing and transaction records: Retained for as long as required under applicable Bangladeshi tax, accounting, and financial regulations.
• Compliance backup: As described in our Backup Policy, a monthly internal snapshot of website files/databases is retained solely for potential lawful government or law-enforcement requests, and is not accessible to the customer.
• Comments: Retained indefinitely to support comment moderation, unless you request deletion.

7. Data Security & Limitation of Liability

We take reasonable technical and organizational measures (including Imunify360 WAF, CloudLinux CageFS isolation, and TLS encryption) to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential (see our Terms of Service, Section 5).

To the fullest extent permitted by law, and consistent with Section 14 of our Terms of Service, APT COM’s liability for any data breach, unauthorized access, or loss of personal data — except where caused by our gross negligence or willful misconduct — is limited to the amount you paid for the affected Service, and APT COM shall not be liable for any indirect, incidental, or consequential damages arising from such an event.

8. Cookies & Session Management

We use cookies to operate core site functionality (such as client portal login sessions and shopping cart state) and, where you opt in, to remember your comment details for future visits. Login cookies last up to two days (two weeks if “Remember Me” is selected); comment cookies last one year. You can disable cookies in your browser, though some site features may not work correctly without them.

9. Embedded Content & External Links

Pages on our site may include embedded content (videos, images, or other media) from other websites. Such embedded content behaves exactly as if you visited the other website directly, and that third party may collect data about you, use cookies, and track your interaction with the embedded content according to its own privacy policy, which we do not control.

10. Children’s Privacy (18+ Requirement)

Our Services are not directed to, and may not be used by, anyone under the age of 18, consistent with Section 22.7 of our Terms of Service. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete it.

11. International Data Transfers

Because our global server nodes operate in Germany, Singapore, the USA, and Bangladesh, and some of our service providers (such as payment gateways, domain registries, or spam-detection services) operate internationally, your data may be processed outside Bangladesh. Where this occurs, we rely on those providers’ compliance with recognized data protection and security standards.

12. Your Rights Over Your Personal Data

Subject to applicable law and our legal/operational retention needs, you may:

• Request access to, or an exported copy of, the personal data we hold about you.
• Request correction of inaccurate or outdated account data.
• Request deletion of your personal data, except where we are required or permitted to retain it (e.g., billing records, compliance backups, or data needed to resolve a dispute or investigation).

To exercise any of these rights, contact us at support@aptctg.com. We may need to verify your identity before processing your request.

13. No Liability for Third-Party Hosted Content

APT COM is a hosting infrastructure provider. We do not control, and are not responsible for, the privacy practices or content of websites operated by our customers on our infrastructure. Any personal data collected by a customer’s website is governed by that customer’s own privacy policy, not this one.

14. Changes to This Policy & 15. Contact Us

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the top of this page will always reflect the most recent revision. Continued use of our Services after a change constitutes your acceptance of the updated policy.