Privacy Policy

Last updated: 12 January 2026

1) Who we are

CPBackup / cpbackup.net is operated by:

• Controller: HostXNow
• Service/brand: CPBackup (a HostXNow service) / cpbackup.net
• Trading address: HostXNow, Old Bank Chambers, 582–586 Kingsbury Road, Erdington, Birmingham, B24 9ND
• Contact Form: Contact Support

If you back up personal data belonging to your customers/users, you are typically the controller for that data and we act as a processor providing the backup service.

2) What we collect

• Account & billing — Name, email address, company (optional), address (optional), invoices/payment status (payment details are usually handled by your payment provider)
• Backup Manager configuration — Domain/hostname, cPanel/WHM username, API token (revocable), schedules, retention, and destination location
• Backup content (Customer Content) — Backups you store may include personal data (emails, databases, files). We process this only to provide the service.
• Metadata & usage — Job status, timestamps, sizes, integrity info (e.g., hashes), and storage usage (including peak usage where used for billing)
• Support — Tickets, messages, and attachments you submit
• Technical data — IP address and basic security logs

3) How we use your data

• Provide the service (account management, backups, downloads/restores)
• Secure access (tokens, session security, secure download links)
• Verify integrity and display verification information
• Measure usage for billing and capacity planning
• Provide support and troubleshooting
• Prevent abuse and comply with legal obligations

4) Legal bases (UK GDPR)

We rely on one or more of the following:

• Contract — processing necessary to provide the Services you've signed up for
• Legitimate interests — security, fraud prevention, service improvement
• Legal obligation — where required by law
• Consent — where we've asked and you've agreed (e.g., marketing)

5) Data retention

We retain personal data for as long as your account is active and for a reasonable period after closure to comply with legal obligations. Backup content is deleted according to your retention settings. Support records may be retained for up to 3 years.

6) Your rights

Under UK GDPR you have the right to: access, correct, or delete your personal data; restrict or object to processing; data portability; and to lodge a complaint with the ICO (ico.org.uk). To exercise your rights, contact us via the support form.

7) Third parties and transfers

We use trusted third-party providers for hosting infrastructure, payment processing, and support tooling. We do not sell your personal data. Where data is transferred outside the UK, we ensure appropriate safeguards are in place.

8) Cookies

We use essential session cookies for the client area. No advertising or tracking cookies are used on this service.

9) Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in your client area.