Last updated: May 25, 2026
Pamir Web Host is committed to complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR") for customers and users in the European Economic Area. This page explains how we meet our GDPR obligations and your rights as a data subject.
1. Key Applications of GDPR
The GDPR applies if:
- The company is in the EU and processes personal data, regardless of where data processing takes place
- The company is outside the EU but offers goods or services to EU residents
- The company is outside the EU but monitors the behaviour of EU residents
PAMIRWEBHOST LLC provides services to customers worldwide, including within the EU, and is therefore committed to full GDPR compliance where applicable.
2. What Constitutes Personal Data?
Under GDPR, personal data is any information that relates to an identified or identifiable natural person. This includes:
- Name, email address, phone number, mailing address
- IP addresses and device identifiers
- Billing and payment information
- Login credentials and account activity
- Any data that can directly or indirectly identify an individual
3. Data Controllers, Processors, and the Role of the Data Protection Officer (DPO)
For EU customers, PAMIRWEBHOST LLC acts as a data controller for personal data you provide when creating an account or using our services. For data processed on your behalf (content you host), you are the data controller and we act as a data processor.
PAMIRWEBHOST LLC provides individuals with clear information regarding: who is processing the data and why, the legal basis for processing, and contact details for data protection inquiries. For data protection inquiries, contact us at privacy@pamirwebhost.com.
4. Processing Data for Third Parties and Data Transfers Outside the EU
If you are an EU business using our hosting services to process EU personal data, a Data Processing Agreement (DPA) is available upon request. Some of our service providers are located outside the EEA. In such cases, transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards.
5. Lawful Data Processing
We process personal data on the following lawful bases:
- Contractual necessity — to provide the services you have ordered
- Legal obligation — to comply with ICANN domain registration requirements and applicable laws
- Legitimate interests — to improve our services, prevent fraud, and maintain security
- Consent — for marketing communications (you may withdraw consent at any time)
6. Consent for Data Processing
Where we rely on consent as the lawful basis for processing, we ensure that consent is freely given, specific, informed, and unambiguous. You may withdraw consent at any time by contacting us at privacy@pamirwebhost.com or through your account settings. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.
7. Information Transparency
PAMIRWEBHOST LLC provides individuals with clear information regarding:
- Who is processing the data and why
- The legal basis for processing
- Contact details of the data controller
- How long data will be retained
- Whether data will be transferred outside the EU and the safeguards in place
8. Individual Rights Under GDPR
As an EU/EEA data subject, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — ask us to limit processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, email privacy@pamirwebhost.com. We will respond within 30 days.
9. Specific Rules for Children
Our services are not directed to children under the age of 16 (or the applicable age of digital consent in the relevant EU member state). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly.
10. Data Breaches and Notifications
In the event of a personal data breach that poses a risk to your rights and freedoms, PAMIRWEBHOST LLC will:
- Notify the relevant supervisory authority within 72 hours of becoming aware of the breach
- Notify affected individuals without undue delay where the breach is likely to result in high risk
- Document all breaches, their effects, and the remedial actions taken
11. Responding to Requests
PAMIRWEBHOST LLC is committed to responding to all GDPR-related data subject requests within one month of receipt. In complex or numerous cases, this period may be extended by a further two months, and we will notify you accordingly. Requests can be submitted to privacy@pamirwebhost.com.
12. Record-Keeping and Compliance
PAMIRWEBHOST LLC maintains records of all data processing activities as required by GDPR Article 30. These records include: the categories of data processed, the purposes of processing, data retention periods, and any third-party processors used. These records are available to supervisory authorities upon request.
13. Impact Assessments and High-Risk Processing
Where a type of processing is likely to result in a high risk to individuals' rights and freedoms, PAMIRWEBHOST LLC carries out a Data Protection Impact Assessment (DPIA) before processing commences. DPIAs are reviewed and updated as necessary to reflect changes in processing activities.
14. Data Protection by Design and by Default
PAMIRWEBHOST LLC implements data protection principles from the outset of any new project or system design (privacy by design) and ensures that, by default, only personal data necessary for each specific purpose is processed (privacy by default). Technical and organisational measures are implemented to uphold these principles.
PAMIRWEBHOST LLC — GDPR Compliance Commitment
PAMIRWEBHOST LLC is committed to continuous improvement of its data protection practices. We regularly review and update our policies to ensure ongoing GDPR compliance. You have the right to lodge a complaint with your local EU supervisory authority if you believe we have not handled your personal data in accordance with GDPR.
For any GDPR-related queries, Data Processing Agreements, or to exercise your data rights, contact us at privacy@pamirwebhost.com.