Terms of Use
WebPros updated its Privacy Policy (used by cPanel) mainly to add stronger promises around how quickly they respond to your data requests and complaints, and to spell out extra protections for sensitive data like biometrics or health-related information. These changes are consumer-friendly clarifications rather than new risks — no new data sharing, collection, or arbitration terms were added.
| 1 | 1 | ## WebPros Privacy Policy |
| 2 | 2 | |
| 3 | v.17 - Updated August 28th, 2026 | |
| 3 | v.17 - Updated September 29th, 2026 | |
± CHANGEDPolicy date updated The 'last updated' date on the policy changed, reflecting these edits. | ||
| 4 | 4 | |
| 5 | 5 | ## 1\. General Note |
| 6 | 6 | |
| 7 | 7 | This Privacy Policy is aimed at worldwide users of WebPros websites and other online services (collectively the "Offerings"). To ensure a proper and secure handling of personal data handed over to us, WebPros has decided to make the principles of the EU General Data Protection Regulation (GDPR) applicable to all its global entities as a common standard in addition to local privacy laws in effect. For Europe, both the provisions of the GDPR and the provisions of the Swiss Data Protection Act (DSG) apply, and the UK General Data Protection Regulation applies in respect of WHMCS Ltd. In the USA, the applicable privacy regulations per state apply. If your locally applicable data protection law grants you a level of data protection that exceeds that of the GDPR, this stricter level will also apply in the relationship between you and WebPros. However, the level of data protection provided by the GDPR will never be undercut. |
| 8 | 8 | |
| 9 | 9 | Insofar as the terms of the GDPR are used (for example "processing" or "personal data"), these are to be understood as having the same meaning in the sense of the Swiss DSG and of your local data protection laws, insofar as this is objectively possible. |
| 37 | 37 | **Supplementary in accordance with data protection laws in the United States :** |
| 38 | 38 | |
| 39 | 39 | WebPros complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. WebPros has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. WebPros has further certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles or the Swiss-U.S. DPF Principles, these DPF Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/). |
| 40 | 40 | |
| 41 | 41 | With respect to personal data received or transferred pursuant to the DPF program, WebPros International L.L.C. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. |
| 42 | 42 | |
| 43 | Pursuant to the DPF program, EU, UK and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. Upon request, WebPros will provide you with access to the personal information that is held about you. You may also correct, amend or delete the personal information held about you. An individual who seeks access, or who seeks to correct, amend or delete inaccurate data transferred to the United States under the DPF program, should direct their query to privacy@webpros.com. If requested to remove data, we will respond within a reasonable timeframe, respecting the given legal boundaries. | |
| 43 | Pursuant to the DPF program, EU, UK and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. Upon request, WebPros will provide you with access to the personal information that is held about you. You may also correct, amend or delete the personal information held about you. An individual who seeks access, or who seeks to correct, amend or delete inaccurate data transferred to the United States under the DPF program, should direct their query to privacy@webpros.com. We will respond to your request within 30 days of receipt or, where a request is complex or numerous, will tell you within that period when we expect to respond, respecting the applicable legal boundaries. | |
± CHANGEDConcrete deadline added for data access/correction requests Previously, WebPros only promised to respond to requests to see, fix, or delete your data within a vague 'reasonable timeframe.' Now they commit to responding within 30 days, or telling you when to expect a response if your request is complex. | ||
| 44 | 44 | |
| 45 | 45 | Before sharing your data with third parties other than our agents, or before using it for a purpose other than the one for which it was originally collected or subsequently authorized, WebPros requires your individual and informed consent, which can be obtained via the consent management platform used by WebPros. To request to limit the use and disclosure of your personal information, please submit a written request to privacy@webpros.com. |
| 46 | 46 | |
| 47 | Where personal data is sensitive, we obtain your affirmative express consent before disclosing it to a third party that is not acting as our agent, or before using it for a purpose other than that for which it was originally collected or subsequently authorized by you. | |
+ ADDEDNew consent requirement before sharing sensitive data WebPros added a commitment to get your explicit, affirmative consent before sharing sensitive personal data (like health, biometric, or sexual orientation data) with third parties, beyond the general consent rule that already applied to other personal data. | ||
| 48 | ||
| 49 | Where an organization transferring personal data to us from the United Kingdom or Gibraltar identifies that data as sensitive, we treat it as sensitive data. This includes genetic data, biometric data used for unique identification, data concerning sexual orientation, and data concerning criminal offences and convictions | |
+ ADDEDSensitive data categories defined for UK/Gibraltar and Switzerland The policy now specifically lists what counts as 'sensitive' data for people in the UK, Gibraltar, and Switzerland — including genetic and biometric data, sexual orientation, criminal records, union activity, and social security information — so these get extra protection. | ||
| 50 | ||
| 51 | In respect of personal data received from Switzerland, we additionally treat as sensitive information on ideological or trade union related views or activities, information on social security measures or benefits, and information on administrative or criminal proceedings and sanctions other than in the context of pending proceedings. | |
| 52 | ||
| 47 | 53 | In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Each such request is evaluated and assessed by the WebPros Legal Department prior to making a decision about any data release. WebPros will only provide requested data if it is legally obligated to do so. |
| 48 | 54 | |
| 49 | 55 | Our accountability for personal data that we receive in the United States under the DPF program and subsequently transfer to a third party is described in the DPF program principles. The categories of third parties that could be involved in the transfer or processing of your data can be viewed in section 13 of this Privacy Policy. These include, without limitation, online advertising and retargeting providers, website visitor analytics providers, session and interaction analytics providers, marketing automation and customer relationship management providers, company identification and sales intent data providers, payment and subscription billing providers, support and community platform providers, and cloud infrastructure providers. Each third party which is entrusted with personal data is bound by a data processing agreement in accordance with the data protection laws in effect. In particular, we remain responsible and liable under the DPF program Principles if third party agents we engage to process personal data on our behalf do so in a manner inconsistent with the principles, unless we prove that we are not responsible for the event giving rise to the damage. |
| 50 | 56 | |
| 51 | 57 | In compliance with the DPF principles, we commit to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF program. European Union, United Kingdom and Swiss individuals with DPF program inquiries or complaints should first contact us by email at privacy@webpros.com or via post at: |
| 52 | 58 | |
| 53 | 59 | WebPros International, LLC |
| 54 | 60 | 1100 W 23rd St |
| 55 | 61 | Suite 153 |
| 56 | 62 | Houston TX, 77008 |
| 57 | 63 | legal@webpros.com |
| 58 | 64 | |
| 59 | We have further committed to refer unresolved privacy complaints under the Data Privacy Framework (DPF) program Principles to an independent dispute resolution mechanism, Better Business Bureau ("BBB") National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit [https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers](https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers) for more information and to file a complaint. This service is provided free of charge to you. | |
| 65 | We will acknowledge your complaint promptly and will respond substantively within 45 days of receipt. With respect to personal data transferred in reliance on the DPF program in the context of the employment relationship, WebPros commits to cooperate and comply with the advice of the panel established by the EU data protection authorities, the UK Information Commissioner's Office and the Gibraltar Regulatory Authority, and the Swiss Federal Data Protection and Information Commissioner. | |
+ ADDEDFaster complaint acknowledgment promised WebPros now promises to acknowledge your privacy complaint quickly and give a substantive response within 45 days, rather than leaving the timeline unstated before directing you to the BBB dispute process. | ||
| 60 | 66 | |
| 67 | For personal data other than human resources data, we have further committed to refer unresolved privacy complaints under the Data Privacy Framework (DPF) program Principles to an independent dispute resolution mechanism, Better Business Bureau ("BBB") National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit [https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers](https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers) for more information and to file a complaint. This service is provided free of charge to you. For human resources data, please see the paragraph above concerning cooperation with the competent data protection authorities. | |
± CHANGEDEmployment-related data complaints routed differently Complaints about data collected in an employment relationship (i.e., if you were a WebPros employee/job applicant) are now handled through cooperation with European and Swiss data protection regulators instead of the BBB complaint process. The BBB free dispute-resolution option is now explicitly limited to non-HR personal data, though this likely does not affect typical cPanel customers. | ||
| 68 | ||
| 61 | 69 | If your complaint cannot be resolved through the above channels, under certain conditions you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See [https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction) |
| 62 | 70 | |
| 63 | 71 | ## 4\. Joint Data Processing within the WebPros Group |
| 64 | 72 | |
| 65 | 73 | ### 4.1. Joint Data Processing |
| 66 | 74 | |