Privacy Policy - Widomaker

Introduction

This Privacy Policy explains how Widomaker ("Widomaker," "we," "us," "our") collects, uses, stores, protects, and shares information about you ("Customer," "you," "your") when you use our services. This Policy is incorporated by reference into our main Terms of Service agreement.

By using any of our services, you agree to the collection and use of your information as described in this Privacy Policy.

Scope of This Policy

This Privacy Policy applies to all services offered by Widomaker, with the following exception:

Data Backup Service: The Data Backup service is governed by its own separate Data Backup Terms of Service and Data Backup Privacy Policy.

1. Information We Collect

A. Information You Provide to Us

Account & Billing Information: When you register for any service, we collect personal information necessary to create and maintain your account. This includes your full name, company name, physical address, phone number(s), and email address.
Payment Information: To process payments for services, we collect payment information, including credit card details. This information is collected and stored within our billing system.
Communications: We may retain records of our communications with you. This includes email messages sent to us and our replies, which may be stored indefinitely. Our telephone systems may log call metadata (such as phone numbers and call duration) indefinitely.

B. Information We Collect Automatically

Server Logs and Website Statistics: Our web server automatically generates access and error logs that record information such as your IP address, browser type, and the pages you visit. These raw server logs are retained for a period of time to allow for troubleshooting, performance monitoring, and security incident investigation. We may also use tools like AWStats to process these logs into statistical reports. While the raw logs are deleted, these aggregated statistical reports, which may still contain IP address information, are typically retained for up to 12 months.
Third-Party Support Widgets (Chatwoot): We may use third-party tools, such as the Chatwoot widget, to provide customer support chat. Interacting with this widget may cause it to store cookies in your browser and collect personal data as described in its own policy. This activity is governed by the Chatwoot Privacy Policy.
Google Fonts: Our website may use Google Fonts to display typography. When this service is in use, your web browser sends a request to Google's servers to retrieve the font files. This process may share your IP address with Google. This is necessary to deliver the fonts to your browser and allow our website to render as designed. For more information, please see Google's Privacy Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Manage Services: To set up your account, deliver the services you have purchased, and manage our technical infrastructure.
To Process Payments: To bill you for services and to maintain your billing records.
To Communicate With You: To send you important account notifications, invoices, technical notices, and to respond to your support inquiries.
For Security and Abuse Prevention: To protect the security of our systems, prevent fraud, and enforce our Terms of Service and Acceptable Use Policy.
To Comply with Legal Obligations: To comply with applicable laws, lawful requests, and legal processes.

3. Service-Specific Data Processing

The way we handle your data can vary depending on the specific services you use.

Web Hosting & Reseller Hosting: We store all content you upload to your hosting account, including website files, databases, and application data. We also store server logs associated with your account, such as access logs, error logs, and FTP usage logs. As stated in our Terms of Service, our system administrators may access your files when necessary to diagnose and resolve a system problem. Our hosting infrastructure is managed via the Plesk platform on dedicated servers provided by LiquidWeb.
Email Hosting (Standard, Enhanced, and Personal): We store the contents and metadata (sender, recipient, subject, IP address, timestamps) of emails sent to and from your mailboxes. All incoming and outgoing email is scanned for spam and viruses.
- For Standard Email hosted on our Plesk server, email server logs are rotated regularly, and logs are retained for a period of time to allow for troubleshooting, performance monitoring, and security incident investigation.
- For Enhanced Email and Personal Email, the underlying service provider is OpenSRS. OpenSRS retains logs for a period determined by their policies, and we have limited access to this information. Their privacy practices are separate from our own.
Endpoint Detection & Response (EDR): This service is provided by reselling Malwarebytes (now ThreatDown) software. To provision and manage your service, we share your name, email address, and device identifiers with Malwarebytes. We have access to the security alerts and reports generated by the software on your devices. Your use of the software is subject to the ThreatDown Privacy Policy.
Domain Registration: We act as a reseller for Wild West Domains, LLC (a GoDaddy company). When you register or manage a domain, you interact directly with their website (`secureserver.net`). Widomaker does not collect or pass your registration information to them. Your transaction is governed by the Wild West Domains Privacy Policy.
DSL Internet Service: (Service discontinued as of September 30, 2025) To provide DSL, we shared necessary customer information (such as name, address, and phone number) with our wholesale partner, IKANO Communications, for the purposes of order fulfillment and circuit provisioning.

4. How We Share Your Information

We do not sell your personal information. We only share your information with third parties in the following limited circumstances:

Service Providers: We share information with the third-party companies that are essential to providing our services, as detailed in Section 3 above (e.g., LiquidWeb, OpenSRS, Malwarebytes, IKANO Communications). These providers are only given the information necessary to perform their specific function. We may also share your name and address with a third-party printing service for the sole purpose of printing and mailing physical billing statements.
Law Enforcement: We may disclose your information to law enforcement or in response to a legal process. Our policy is to require a warrant or subpoena before providing private customer information, and we will evaluate each request on a case-by-case basis.
Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement a variety of security measures to protect your data. These include:

Physical Security: Servers under our direct control are located in a secure facility with an alarm system and camera surveillance.
Network Security: We use network firewalls to protect our systems from unauthorized access.
Access Controls: Access to sensitive customer data is restricted to authorized employees who require it to perform their job duties.

While we implement commercially reasonable security measures to protect your information, we cannot guarantee its absolute security. No method of transmission over the Internet or method of electronic storage is 100% secure, and you acknowledge that you provide your personal information at your own risk.

6. Data Retention

We retain your data for different periods depending on its nature and the system where it is stored:

Billing Records: Billing and payment records in our billing system are retained indefinitely for accounting and historical purposes.
Account Information: We retain your personal account information (e.g., name, address, phone number) indefinitely. Retaining this information allows us to maintain historical records and to to verify your identity if you request to reactivate a service or email address in the future.
Service Data on Widomaker Systems: For services hosted on our Plesk-managed servers (such as Web Hosting and Standard Email), upon cancellation, the associated data is typically deleted from our live systems within 7 days. This data may persist in our server backups for a period of time.
Service Data on Third-Party Systems: For services provided by third parties, such as Enhanced and Personal Email (OpenSRS) and our legacy DSL Internet Service (IKANO Communications), data retention is governed by the policies of that third party.
Server Logs on Widomaker Systems: Website and email server logs generated on our Plesk-managed servers are retained for a period of time to allow for troubleshooting, performance monitoring, and security incident investigation.
Communications: Records of email and phone communications may be retained indefinitely.

7. Your Data Rights and the Virginia Consumer Data Protection Act (VCDPA)

The Virginia Consumer Data Protection Act (VCDPA) is a law that provides Virginia residents with specific rights over their personal data. However, these legal obligations apply only to businesses that meet certain data processing thresholds.

As a local business, Widomaker currently operates below these thresholds and is therefore not legally subject to the VCDPA's requirements.

Nevertheless, we believe in the privacy principles underlying the VCDPA. As a matter of goodwill, we will make a reasonable effort to accommodate requests from our customers regarding their data, such as requests for access or deletion, when it is commercially feasible and does not create an undue financial or operational burden on our company.

If you have a request regarding your personal data, please contact us using the information in Section 10.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Widomaker
11860 Fishing Point Drive
Newport News, VA 23606
(757) 253-7621

> Privacy Policy