Privacy Policy

cPanel's parent company WebPros updated its Privacy Policy mainly to add clearer, more consumer-protective rules: a firm 30-day deadline to respond to data access/deletion requests, a new requirement to get your explicit consent before sharing 'sensitive' personal data (like biometric or health-related data) with third parties, new definitions of what counts as sensitive data, and a 45-day deadline for responding to privacy complaints. One narrower change splits the complaint process so that employee (HR) data complaints go through a different path than the general BBB dispute process — this doesn't affect typical hosting customers. No changes reduce your rights.

20261002_rev01 → 20261006_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 ## WebPros Privacy Policy
+v.17 - Updated August 28th, 2026
+v.17 - Updated September 29th, 2026
 ## 1\. General Note
 This Privacy Policy is aimed at worldwide users of WebPros websites and other online services (collectively the "Offerings"). To ensure a proper and secure handling of personal data handed over to us, WebPros has decided to make the principles of the EU General Data Protection Regulation (GDPR) applicable to all its global entities as a common standard in addition to local privacy laws in effect. For Europe, both the provisions of the GDPR and the provisions of the Swiss Data Protection Act (DSG) apply, and the UK General Data Protection Regulation applies in respect of WHMCS Ltd. In the USA, the applicable privacy regulations per state apply. If your locally applicable data protection law grants you a level of data protection that exceeds that of the GDPR, this stricter level will also apply in the relationship between you and WebPros. However, the level of data protection provided by the GDPR will never be undercut.
 Insofar as the terms of the GDPR are used (for example "processing" or "personal data"), these are to be understood as having the same meaning in the sense of the Swiss DSG and of your local data protection laws, insofar as this is objectively possible.
 **Supplementary in accordance with data protection laws in the United States :**
 WebPros complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. WebPros has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. WebPros has further certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles or the Swiss-U.S. DPF Principles, these DPF Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/).
 With respect to personal data received or transferred pursuant to the DPF program, WebPros International L.L.C. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
+Pursuant to the DPF program, EU, UK and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. Upon request, WebPros will provide you with access to the personal information that is held about you. You may also correct, amend or delete the personal information held about you. An individual who seeks access, or who seeks to correct, amend or delete inaccurate data transferred to the United States under the DPF program, should direct their query to privacy@webpros.com. If requested to remove data, we will respond within a reasonable timeframe, respecting the given legal boundaries.
+Pursuant to the DPF program, EU, UK and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. Upon request, WebPros will provide you with access to the personal information that is held about you. You may also correct, amend or delete the personal information held about you. An individual who seeks access, or who seeks to correct, amend or delete inaccurate data transferred to the United States under the DPF program, should direct their query to privacy@webpros.com. We will respond to your request within 30 days of receipt or, where a request is complex or numerous, will tell you within that period when we expect to respond, respecting the applicable legal boundaries.
 Before sharing your data with third parties other than our agents, or before using it for a purpose other than the one for which it was originally collected or subsequently authorized, WebPros requires your individual and informed consent, which can be obtained via the consent management platform used by WebPros. To request to limit the use and disclosure of your personal information, please submit a written request to privacy@webpros.com.
+Where personal data is sensitive, we obtain your affirmative express consent before disclosing it to a third party that is not acting as our agent, or before using it for a purpose other than that for which it was originally collected or subsequently authorized by you.
+Where an organization transferring personal data to us from the United Kingdom or Gibraltar identifies that data as sensitive, we treat it as sensitive data. This includes genetic data, biometric data used for unique identification, data concerning sexual orientation, and data concerning criminal offences and convictions
+In respect of personal data received from Switzerland, we additionally treat as sensitive information on ideological or trade union related views or activities, information on social security measures or benefits, and information on administrative or criminal proceedings and sanctions other than in the context of pending proceedings.
 In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Each such request is evaluated and assessed by the WebPros Legal Department prior to making a decision about any data release. WebPros will only provide requested data if it is legally obligated to do so.
 Our accountability for personal data that we receive in the United States under the DPF program and subsequently transfer to a third party is described in the DPF program principles. The categories of third parties that could be involved in the transfer or processing of your data can be viewed in section 13 of this Privacy Policy. These include, without limitation, online advertising and retargeting providers, website visitor analytics providers, session and interaction analytics providers, marketing automation and customer relationship management providers, company identification and sales intent data providers, payment and subscription billing providers, support and community platform providers, and cloud infrastructure providers. Each third party which is entrusted with personal data is bound by a data processing agreement in accordance with the data protection laws in effect. In particular, we remain responsible and liable under the DPF program Principles if third party agents we engage to process personal data on our behalf do so in a manner inconsistent with the principles, unless we prove that we are not responsible for the event giving rise to the damage.
 In compliance with the DPF principles, we commit to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF program. European Union, United Kingdom and Swiss individuals with DPF program inquiries or complaints should first contact us by email at privacy@webpros.com or via post at:
 WebPros International, LLC
 W 23rd St
 Suite 153
 Houston TX, 77008
 legal@webpros.com
+We have further committed to refer unresolved privacy complaints under the Data Privacy Framework (DPF) program Principles to an independent dispute resolution mechanism, Better Business Bureau ("BBB") National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit [https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers](https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers) for more information and to file a complaint. This service is provided free of charge to you.
+We will acknowledge your complaint promptly and will respond substantively within 45 days of receipt. With respect to personal data transferred in reliance on the DPF program in the context of the employment relationship, WebPros commits to cooperate and comply with the advice of the panel established by the EU data protection authorities, the UK Information Commissioner's Office and the Gibraltar Regulatory Authority, and the Swiss Federal Data Protection and Information Commissioner.
+For personal data other than human resources data, we have further committed to refer unresolved privacy complaints under the Data Privacy Framework (DPF) program Principles to an independent dispute resolution mechanism, Better Business Bureau ("BBB") National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit [https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers](https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers) for more information and to file a complaint. This service is provided free of charge to you. For human resources data, please see the paragraph above concerning cooperation with the competent data protection authorities.
 If your complaint cannot be resolved through the above channels, under certain conditions you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See [https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction)
 ## 4\. Joint Data Processing within the WebPros Group
 ### 4.1. Joint Data Processing