Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Client", "you", or "your") and Hostinking FZ-LLC ("Hostinking", "we", "us", or "our"), a global web hosting company incorporated and operating under the laws of the United Arab Emirates, with its registered office in Dubai, United Arab Emirates.Hostinking serves clients in over 100 countries across the Middle East, Africa, Europe, the Americas, and Asia-Pacific. These Terms are designed to be enforceable and fair in all jurisdictions we serve.

By registering an account, purchasing a service, or using any part of our platform at hostinking.com or app.hostinking.com, you acknowledge that you have read, understood, and agree to be bound by these Terms in their entirety. If you are entering into these Terms on behalf of a business or other legal entity, you represent that you have the authority to bind that entity. If you do not have such authority, or if you do not agree with these Terms, you must not use our Services.

Where mandatory consumer protection or data protection laws in your country of residence grant you rights that cannot be excluded by contract, those rights are preserved and nothing in these Terms is intended to override them.

For the purposes of these Terms, the following definitions apply:

• "Services" means all products and services offered by Hostinking, including web hosting, VPS hosting, dedicated servers, domain registration, email hosting, and SSL certificates.
• "Account" means the user account created by you to access and manage our Services.
• "Content" means any data, files, text, images, scripts, code, applications, or other materials you store, transmit, or publish through our Services.
• "Control Panel" means the web-based interface at app.hostinking.com through which you manage your Services.
• "AUP" means our Acceptable Use Policy at hostinking.com/aup, incorporated into these Terms by reference.
• "Personal Data" means any information relating to an identified or identifiable natural person, as defined under applicable data protection law in your jurisdiction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For Personal Data you submit to create your Account, Hostinking is the Data Controller.
• "Data Processor" means the entity that processes Personal Data on behalf of a Data Controller. Where you use our Services to host your customers' data, Hostinking acts as a Data Processor under your instructions.
• "Uptime" means the percentage of time a Service is accessible and operational in a given calendar month.
• "Force Majeure Event" means any event beyond our reasonable control including natural disasters, war, terrorism, government actions, internet backbone failures, or third-party infrastructure outages.
• "EEA" means the European Economic Area, comprising EU Member States plus Iceland, Liechtenstein, and Norway.

Hostinking Services are available worldwide subject to applicable laws and sanctions. To create an Account, you must be at least 18 years of age and legally capable of entering into binding contracts in your jurisdiction. We do not knowingly provide Services to anyone under 18 years of age, in compliance with the US COPPA, EU GDPR Article 8, and equivalent laws globally.

You agree to provide accurate, current, and complete registration information and to update it promptly if it changes. We reserve the right to suspend or terminate any account based on false, misleading, or outdated information.

You are solely responsible for maintaining the confidentiality of your account credentials and for all activities conducted under your Account. Notify us immediately at security@hostinking.com if you suspect any unauthorized access.

We reserve the right to refuse service to anyone located in a country subject to comprehensive international trade sanctions where providing Services would be unlawful.

Hostinking offers the following categories of Services to clients globally:

• Web Hosting (Shared Hosting): Shared server resources for websites and web applications.
• VPS Hosting: Virtual Private Servers with dedicated resources, full root access, and isolated environments.
• Dedicated Servers: Physical servers allocated exclusively to a single client.
• Domain Registration: Registration and management of domain names through ICANN-accredited registrars.
• Email Hosting: Professional email accounts associated with your domain.
• SSL Certificates: Free (Let's Encrypt) and paid encryption certificates for websites.

We reserve the right to add, modify, suspend, or discontinue any Service at any time with reasonable prior notice to affected clients, except in cases of emergency, legal obligation, or abuse.

Your use of our Services is subject to our AUP at hostinking.com/aup. The following activities are strictly prohibited globally:

• Hosting, distributing, or transmitting child sexual abuse material (CSAM) or any content that exploits, harms, or endangers minors.
• Sending unsolicited bulk email (spam), operating open mail relays, or facilitating phishing attacks — violating UAE Federal Law No. 5 of 2012, US CAN-SPAM Act 2003, EU ePrivacy Directive, Egypt Cybercrime Law No. 175 of 2018, and equivalent anti-spam laws globally.
• Hosting malware, ransomware, spyware, viruses, or any malicious code.
• Launching, facilitating, or participating in DDoS attacks or unauthorized network intrusions.
• Engaging in cryptocurrency mining on shared or VPS infrastructure without our explicit written permission.
• Hosting content promoting terrorism, genocide, racial or religious hatred, or incitement to violence.
• Violating any applicable law, including UAE Federal Law No. 5 of 2012, Egypt Law No. 175 of 2018, Saudi Anti-Cybercrime Law, US CFAA, UK Computer Misuse Act 1990, EU NIS2 Directive, or equivalent laws in your jurisdiction.
• Circumventing technical access controls, or reselling our Services without explicit written authorization.
• Storing or distributing pirated software, films, music, or other copyright-infringing material.

Violations may result in immediate suspension or termination without refund. We cooperate fully with law enforcement and regulatory authorities worldwide.

All fees are payable in advance in the currency displayed at checkout (USD by default). You are responsible for all applicable taxes in your jurisdiction, including UAE VAT at 5% (Federal Decree-Law No. 8 of 2017), EU/UK VAT, Egyptian VAT under Law No. 67 of 2016, and equivalent taxes in your country.

Invoices are generated automatically based on your selected billing period (monthly, 12-month, 24-month, or 48-month). Payment is due within 7 days of invoice generation. Failure to pay results in service suspension after a 7-day grace period, followed by termination and permanent data deletion after a further 7 days.

Multi-period discounts are locked in for the committed duration. Early termination does not entitle you to a pro-rated refund except as specified in Section 7.

For billing inquiries, contact billing@hostinking.com.

We offer the following refund terms globally:

• Web Hosting: New accounts are eligible for a full refund within 30 days of the initial purchase date. This is a one-time guarantee per client and does not apply to renewals.
• EU/EEA/UK Consumers: You have a statutory 14-day right of withdrawal under EU Directive 2011/83 and UK Consumer Contracts Regulations 2013. By requesting immediate activation of any Service, you expressly consent to immediate performance and acknowledge that your right of withdrawal is lost upon full performance of the digital service.
• VPS Hosting & Dedicated Servers: Non-refundable once provisioned.
• Email Hosting & SSL Certificates: Non-refundable once activated or issued.
• Domain Registrations: Non-refundable once registered with the registry.
• AUP/Terms Violations: Accounts terminated for policy violations are not eligible for any refund.

To request a refund, contact billing@hostinking.com with your account email and invoice number. Approved refunds are processed within 5–10 business days to the original payment method.

We commit to the following monthly availability targets:

Uptime excludes: scheduled maintenance (24-hour notice); outages caused by your actions; third-party DNS/CDN failures; Force Majeure Events; DDoS attacks targeting your services.

If uptime falls below the guaranteed level, you may request a service credit equal to 1 day per full hour of excess downtime, up to 10 days per month. Credits are the sole remedy for SLA failures and are applied to your account balance, not issued as cash. Requests must be submitted within 14 days of the affected month.

Shared hosting accounts are subject to fair use limits on CPU, memory, disk I/O, and bandwidth. Persistent background processes, cron jobs running more frequently than once every 15 minutes, and scripts consuming disproportionate resources are prohibited.

Shared hosting is intended for standard websites and web applications only. It may not be used as a general-purpose file storage server, video streaming platform, or large binary file distribution network.

We perform automated backups for disaster recovery purposes. These backups are a courtesy and are not guaranteed. You are solely responsible for maintaining your own independent backups of all Content.

VPS and dedicated server services give you exclusive access to allocated computing resources. You have full root/administrator access and are solely responsible for server security, configuration, and software updates.

We perform network-level DDoS mitigation but do not guarantee protection against all attack vectors. We reserve the right to null-route any IP under sustained attack to protect our network and other clients.

Unmanaged servers are provided without system administration support; our team handles network connectivity and hardware issues only.

Domain registrations are processed through ICANN-accredited third-party registrars. By registering a domain through Hostinking, you agree to abide by the applicable registrar's terms, ICANN policies, and the relevant country-code registry rules.

You must provide accurate WHOIS contact information. Providing false data may result in immediate cancellation without refund.

Domains are owned by you as the registrant. We will provide the EPP/Auth code upon request for transfers after the 60-day post-registration lock period. Auto-renewal is enabled by default to prevent accidental expiry.

You are responsible for maintaining email account security and for properly configuring SPF, DKIM, and DMARC DNS records. We do not guarantee email delivery due to spam filters and recipient server policies.

Commercial email sent through our Services must comply with all applicable anti-spam laws, including the US CAN-SPAM Act 2003, EU ePrivacy Directive, Canada's CASL, Australia's Spam Act 2003, UAE Federal Law No. 5 of 2012, and Egypt Law No. 175 of 2018.

We may immediately suspend email accounts sending spam or phishing messages without notice and without refund.

Free SSL certificates via Let's Encrypt are subject to Let's Encrypt's Subscriber Agreement. We install and renew them on your behalf automatically. Renewal failures due to DNS misconfiguration or expired domains are your responsibility.

Paid SSL certificates are issued by third-party Certificate Authorities subject to their validation processes. Certificates are non-refundable once issuance has been initiated.

Our shared infrastructure serves clients globally. You agree not to use any Service in a manner that degrades performance for other clients. We reserve the right to throttle, limit, or suspend accounts consuming excessive resources. Resource limits per plan are displayed in the Control Panel and on our pricing page.

Bandwidth limits are measured on a monthly basis. Overage may result in temporary bandwidth throttling or an upgrade prompt. We will always contact you before taking any action on bandwidth limits.

Hostinking is committed to protecting your Personal Data in compliance with applicable data protection laws across all jurisdictions, including but not limited to: UAE PDPL (Federal Decree-Law No. 45 of 2021), EU/EEA GDPR 2016/679, UK GDPR and Data Protection Act 2018, Egypt Personal Data Protection Law No. 151 of 2020, Saudi Arabia PDPL (Royal Decree No. M/19 of 2021), South Africa POPIA No. 4 of 2013, Nigeria NDPA 2023, Kenya Data Protection Act 2019, Singapore PDPA 2012, India DPDPA 2023, US CCPA 2018, Canada PIPEDA, and Australia Privacy Act 1988.

We collect and process your Personal Data as a Data Controller to provide our Services, manage your Account, process payments, and communicate with you. We do not sell your Personal Data to third parties. For more details, see our full Privacy Policy.

You retain all ownership rights to your Content. Where your Content contains Personal Data of third parties, you act as the Data Controller and Hostinking acts as your Data Processor. We will execute a Data Processing Agreement (DPA) upon written request at legal@hostinking.com.

In the event of a data breach, we will notify you within 72 hours for GDPR-subject clients and within timeframes required by applicable law in other jurisdictions. Your data is retained for the duration of your account plus 3 years for billing records, then permanently deleted.

Regardless of your location, you may have the following rights subject to applicable local law:

To exercise any of these rights, contact privacy@hostinking.com. We will respond within 30 days.

All trademarks, logos, service marks, and other intellectual property on our platform belong to Hostinking or their respective owners. Nothing in these Terms grants you the right to use our intellectual property without prior written consent.

You represent and warrant that you own or have all necessary rights to any Content you submit and that it does not infringe any third-party intellectual property rights.

Hostinking complies with the US DMCA, EU Copyright Directive 2019/790, UAE Federal Law No. 38 of 2021 on Copyrights, Egypt Law No. 82 of 2002, and equivalent laws globally. To submit a copyright takedown notice, email legal@hostinking.com with: (a) identification of the copyrighted work; (b) location of the infringing material; (c) your contact information; (d) a good-faith statement that the use is unauthorized; and (e) a statement of accuracy under penalty of perjury. We process valid notices within 72 hours.

Our Services may integrate with or link to third-party tools including payment processors, domain registrars, certificate authorities, and software providers. These are governed by their own terms and policies. We are not responsible for the availability, accuracy, or practices of third-party services.

Our third-party sub-processors include: Contabo GmbH (infrastructure), Namecheap Inc. (domains), Brevo (email delivery), and Groq Inc. (AI services). All sub-processors are bound by data processing agreements and GDPR-equivalent protections.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, OUR SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT.

We do not warrant that the Services will be uninterrupted, error-free, or completely secure, or that they will meet your specific requirements. Nothing in this clause excludes statutory warranties that cannot be waived under mandatory consumer protection laws in your jurisdiction, including the EU Consumer Rights Directive, UK Consumer Rights Act 2015, Australian Consumer Law, or equivalent protections.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, HOSTINKING AND ITS DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, AND PARTNERS SHALL NOT BE LIABLE FOR:

• Any indirect, incidental, special, consequential, exemplary, or punitive damages.
• Loss of profits, revenue, business, data, goodwill, or anticipated savings.
• Loss or corruption of Content, regardless of cause.
• Unauthorized access to or alteration of your data or transmissions.
• Any damages resulting from Force Majeure Events.
• Any damages resulting from your failure to secure your account credentials.

IN ALL CASES, OUR TOTAL AGGREGATE LIABILITY FOR ANY CLAIMS ARISING UNDER OR RELATED TO THESE TERMS SHALL NOT EXCEED THE TOTAL AMOUNT YOU PAID TO HOSTINKING FOR THE AFFECTED SERVICE IN THE THREE (3) MONTHS IMMEDIATELY PRECEDING THE INCIDENT GIVING RISE TO THE CLAIM.

Where mandatory law does not allow certain exclusions, our liability is limited to the maximum extent permitted by that law. This clause does not exclude liability for death or personal injury caused by our negligence, or fraud.

You agree to defend, indemnify, and hold harmless Hostinking and its directors, officers, employees, agents, and partners from and against any claims, damages, losses, costs, and expenses (including reasonable legal fees) arising from:

• Your use of our Services in violation of these Terms or the AUP.
• Your Content infringing any third-party intellectual property rights, privacy rights, or applicable laws.
• Any actions taken by a third party using your account credentials.
• Your violation of any applicable law or regulation in any jurisdiction.
• Any wilful misconduct or gross negligence on your part.

We reserve the right to suspend or terminate your account and all Services immediately without notice if:

• You have violated these Terms, our AUP, or any applicable law in any jurisdiction.
• Your account is the source of network abuse, DDoS attacks, or malicious activity.
• Payment has not been received after the grace period has expired.
• Continuation of your Services poses a risk to the security of our infrastructure or other clients.
• We are required to do so by a competent legal authority, court order, or regulatory directive.

Upon termination for cause, you forfeit any right to a refund for unused prepaid periods.

You may cancel at any time through the Control Panel. We retain your data for 14 daysfollowing cancellation to allow data export, after which all data is permanently deleted. If we terminate a Service voluntarily with 30 days' written notice, we will issue a pro-rated refund for any unused prepaid period.

We will not be liable for any delay or failure to perform caused by a Force Majeure Event, including acts of God, natural disasters, war, terrorism, civil unrest, government actions or sanctions, power outages, internet backbone failures, submarine cable failures, or failures of upstream network or infrastructure providers. We will notify you as soon as reasonably practicable and use commercially reasonable efforts to restore Services.

We reserve the right to modify these Terms at any time. For material changes, we will notify registered clients by email at least 14 days before the changes take effect. For non-material changes, we may update without prior notice.

Your continued use of our Services after the effective date constitutes acceptance of the updated Terms. The current version is always available at hostinking.com/terms.

Severability

If any provision of these Terms is found invalid or unenforceable under applicable law in any jurisdiction, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force.

Waiver

Our failure to enforce any right or provision will not constitute a waiver of that right or provision. Any waiver must be in writing and signed by an authorized representative of Hostinking.

Entire Agreement

These Terms, together with our Privacy Policy, Acceptable Use Policy, Refund Policy, and any service-specific agreements, constitute the entire agreement between you and Hostinking regarding your use of our Services and supersede all prior agreements, communications, and understandings.

Hostinking operates globally and you are responsible for ensuring your use of our Services complies with all laws applicable in your country of residence or place of business, including:

• Egypt: Telecommunications Regulation Law, E-Commerce Law No. 15 of 2020, Cybercrime Law No. 175 of 2018, Personal Data Protection Law No. 151 of 2020.
• GCC Countries: Saudi Arabia PDPL and Cybercrime Law M/17; UAE Federal Laws; Bahrain Decree-Law No. 28 of 2002; Qatar Law No. 14 of 2014; Kuwait Law No. 63 of 2015; Oman RD No. 69 of 2008.
• European Union & UK: GDPR, ePrivacy Directive, NIS2 Directive, UK GDPR, Digital Services Act (DSA).
• United States: DMCA, CAN-SPAM Act, CCPA, COPPA, CFAA, applicable state laws.
• Africa: South Africa POPIA; Nigeria NDPA 2023; Kenya Data Protection Act 2019; Ghana Data Protection Act 2012.
• Asia-Pacific: Singapore PDPA; India DPDPA 2023; Japan APPI; Thailand PDPA; Australia Privacy Act.

Lawful Basis for Processing: We process your Personal Data under: (a) performance of a contract; (b) legal obligation; (c) legitimate interests; (d) consent — for marketing communications, which you may withdraw at any time.

You have the right to lodge a complaint with your national data protection authority (e.g., Germany: BfDI; France: CNIL; Netherlands: AP; UK: ICO). For data transfers from the EU/EEA/UK to countries without an EU adequacy decision, we rely on Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914. We will respond to data subject access requests within 30 days. Our GDPR contact is: privacy@hostinking.com.

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California residents have the right to: know what Personal Data is collected; request deletion; request correction; opt-out of sale or sharing (we do not sell or share your data for behavioral advertising); and freedom from discrimination for exercising these rights.

To exercise these rights, contact privacy@hostinking.com.

Egypt (Law No. 151 of 2020)

For Egyptian residents, we comply with Personal Data Protection Law No. 151 of 2020. You have the right to access, correct, and delete your Personal Data. We obtain explicit consent before processing sensitive Personal Data and respond to requests within 15 days as required by law.

Saudi Arabia (PDPL)

For Saudi Arabian residents, we comply with the Saudi PDPL and will not transfer your Personal Data outside the Kingdom without complying with applicable NDMO cross-border transfer requirements.

Other GCC States

For residents of Bahrain, Qatar, Kuwait, Oman, and other GCC states, we comply with applicable national data protection laws. Contact: privacy@hostinking.com.

These Terms are governed by the laws of the United Arab Emirates, including all applicable UAE federal laws and the laws of the Emirate of Dubai, without regard to conflict of law principles. Where the law of your country of residence mandatorily applies certain consumer protection or data protection rules that cannot be excluded by a choice of law clause, those mandatory rules will apply to the extent required by law.

Any dispute shall first be subject to good-faith negotiations for 30 days from written notice. If unresolved, the dispute shall be submitted to binding arbitration under the Dubai International Arbitration Centre (DIAC) Rules, conducted in Dubai, UAE, in English. Either party may seek urgent injunctive or equitable relief from any court of competent jurisdiction to prevent irreparable harm.

To the extent permitted by applicable law, you waive any right to bring or participate in any class action or representative proceeding. Where mandatory law in your jurisdiction does not permit this waiver, it does not apply to you.

For any questions, concerns, or legal matters arising from these Terms, please contact us through the appropriate channel below:

For general support inquiries, please use our contact form or open a support ticket from your dashboard. We support inquiries in English and Arabic.