Data Protection & Privacy Commitment

Privacy & Data Governance Policy

OrdeRocket helps agencies and entrepreneurs run white-label hosting and domain infrastructure under their own brand. This policy details what personal information we collect, how it is safeguarded, who we share it with, and your statutory rights.

Global Privacy Standard (GDPR & CCPA Aligned)Last Revised: January 21, 2026Applies to: All Visitors, Resellers & Sub-accounts

Privacy At A Glance

Who We Share Data With

  • order-rocket's own teams and affiliated entities
  • Infrastructure and payment partners who help us deliver the service
  • Vendors and service providers under confidentiality obligations
  • Authorized users within your organization's account
  • Legal or regulatory authorities, where required by law

What Data We Collect

Account information

Name • Email address • Company name • Billing address • Phone number • Payment details

Technical information

IP address • Browser and device information • Pages visited and click activity • Cookies and similar identifiers

Other sources

Publicly available information • Information you share at events or surveys • Information shared by third parties with your consent

How Data Is Utilized

  • Providing and operating our hosting, domain, and SSL services
  • Setting up and managing your account
  • Processing payments and billing
  • Customer and technical support
  • Marketing communications, where you've opted in
  • Product analytics and service improvement
  • Security, fraud prevention, and legal compliance
01

1. Overview

order-rocket provides white-label domain, hosting, and SSL infrastructure for agencies and resellers. This Privacy Policy explains what information we collect through our Site and services, why we collect it, and the choices available to you.

By using the Site, you agree to the practices described here. If you don't agree, please don't use the Site.

02

2. Information we collect

We collect information you provide directly — such as when you register an account, purchase a domain, or contact support — along with technical information collected automatically as you use the Site, and occasionally information from public or third-party sources.

03

3. How we use this information

We use the information we collect to operate the services you've signed up for, keep your account secure, process payments, respond to support requests, and — where you've given us permission — send product updates or marketing communications.

04

4. Who we share information with

We don't sell your personal information. We do share it with the parties who help us run the service, or where the law requires it, as listed above. Any third party we work with is bound by contractual obligations to protect your data and use it only for the purposes we've authorized.

05

5. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Site is used. You can control cookies through your browser settings; disabling them may affect some features of the Site.

Cookie Transparency: We do not sell advertising cookies to cross-site tracking networks. Cookies are utilized strictly for user session persistence, billing cart state, and DDoS defense.
06

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to opt out of marketing communications. To exercise any of these rights, contact us using the details below.

Exercising Your Rights: To exercise your statutory right of erasure ("Right to be Forgotten") or data portability, submit a ticket via your client portal or email our compliance officer. We respond within 30 days.
07

7. How we protect your data

We use administrative, technical, and physical safeguards designed to protect your information from unauthorized access, loss, or misuse. No system is completely secure, so we encourage you to also use strong, unique passwords and enable two-factor authentication where available.

Enterprise Encryption: All stored credentials and database backups are encrypted with AES-256 at rest, and all transit traffic is enforced over TLS 1.3 with HSTS preloading.
08

8. Data retention

We keep personal information for as long as needed to provide the service, meet legal or accounting obligations, and resolve disputes, after which it's securely deleted or anonymized.

09

9. Children's privacy

Our services aren't directed at children, and we don't knowingly collect personal information from anyone under the age required to enter a binding contract in their jurisdiction.

10

10. International transfers

As a global service, information you provide may be processed in countries other than your own. Where required, we put safeguards in place to protect data transferred across borders in line with applicable law.

11

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page, and, where appropriate, through additional notice.

12

12. Contact us

For questions about this policy or to submit a data request, reach out to privacy@order-rocket.com, or write to order-rocket Inc., Attn: Data Protection Officer, [Company Address].

Direct DPO Contact: Email: privacy@orderocket.com • OrdeRocket Inc., Legal & Privacy Dept., 100 Reseller Plaza, Suite 400.
Statutory Compliance & Legal Governance

This privacy statement adheres to the General Data Protection Regulation (GDPR - EU/UK), the California Consumer Privacy Act (CCPA), and global ICANN registrar data escrow policies. Resellers managing third-party sub-accounts remain the data controller for their own clients' end-user data.

Document Reference: OR-PRIVACY-2026-V2Signed & Published: OrdeRocket Inc.