Hosting security and acceptable use policy.

1. Your site, your responsibility

You are responsible for everything inside your hosting account: your website files, CMS (for example WordPress), plugins, themes, scripts, databases, email accounts, FTP and cPanel passwords and any third-party code you install. This includes keeping software up to date and removing software you no longer use.

Vulnerabilities, hacks and malware in your account are your responsibility to fix, even if you did not cause them.

2. What we provide

Each account runs isolated from other accounts, with resource limits so one site cannot slow down others. We run automatic malware scanning and a web application firewall and may quarantine or remove malicious files automatically.

Backups are taken as a courtesy on a best-effort basis and are not guaranteed. We do not update, repair or clean customer websites as part of standard hosting.

3. Prohibited use

You must not use your account to send spam or bulk unsolicited email, host phishing or malware, run attacks or scans, or consume resources in a way that affects other customers.

Outgoing email is rate-limited, and accounts with a high rate of bounced or failed mail may have sending blocked automatically. Direct outbound SMTP (port 25) from accounts is not permitted. Send mail through the server mail system or an authorised relay service.

4. If your account is compromised

We may notify you by email. You must act within 48 hours of notice to clean the account, update software, change all passwords and close the vulnerability.

If an infected or abusive account threatens server stability or other customers, we may immediately restrict or suspend it without notice. cPanel and file access will normally stay available so you can clean it.

5. Repeat infections

If your account is found infected 2 times within 90 days, we may suspend the website until it is cleaned and verified, charge the cleanup fee below, and require you to move to a managed plan or another provider if the problem continues.

6. Paid cleanup

We can clean an infected account on request for $49 per incident (scan, malware removal, password reset and update of affected software). This does not guarantee reinfection will not occur, and does not cover repair of damaged design, content or functionality.

Restoring from backup is included once in any 12 months, then $15 per restore, and depends on backups being available.

7. Our liability

We are not liable for data loss, downtime, lost revenue or damages caused by vulnerabilities, malware or third-party software in your account, or by actions we take under this policy to protect the server and other customers.

8. Changes

We may update this policy with 30 days notice by email. Continued use after that date means you accept the updated policy. New customers must accept this policy at signup.