The fine print
How we handle personal information on your hosting service.
THIS AGREEMENT WAS LAST UPDATED ON 7 OCTOBER 2026.
This Client Data Processing Agreement is part of the Terms and Conditions. If you have a hosting, email, or DNS service with Texo Webhosting cc, you agree to it.
You are the responsible party for personal information that you, your staff, or your website collect. That includes your customers, your mailing lists, and the messages in your mailboxes. Texo is the operator when we process that information so we can provide the service.
Texo is the responsible party for our own client records, such as your account, invoices, and support tickets. That processing is described in our Privacy Policy.
We process the personal information on your service only to host it, deliver the email and DNS you asked for, keep it secure, make backups, and give you support. We also process it when you give us an instruction, or when the law requires it.
We do not sell that information. We do not use your customers' information for our own marketing.
We treat personal information that we see while providing the service as confidential. Our staff see it only when they need to, for the work you asked for or for the security of the service.
We keep security measures appropriate to the service, as required by section 19 of the Protection of Personal Information Act. Those measures include access control on the servers, a firewall, malware scanning, separation between hosting accounts, and encrypted connections where the service is configured to use them. You remain responsible for the passwords, plugins, and software you install.
Hosting is provided from South Africa. Our own backups stay on Texo servers. The data centre and its network providers process personal information only so the service can run. We remain responsible to you for that processing under this agreement. A plugin, a content-delivery network, or another mail service that you turn on yourself can send information somewhere else. That is your instruction, not ours.
If we have reasonable grounds to believe that personal information on your service was accessed or acquired by a person who was not allowed to have it, we tell you immediately. We then send you a written incident report within 12 hours of becoming aware of it.
If a person asks you for access to, correction of, or deletion of their personal information, and you need something from the hosting account to answer them, ask us and we will help. The same applies to a lawful request from the Information Regulator about that account.
When you cancel, we delete the live account in the ordinary way. Copies in our backups remain until those backups age out of rotation. Backups are for restoring a service. We do not promise that a backup can be restored, and we do not keep them as an archive for you.
This agreement lasts while you have a service with us, and afterwards only for as long as a backup still contains the information.
The law of South Africa applies. The Protection of Personal Information Act 4 of 2013 applies to the processing this agreement describes.
Questions about this agreement: [email protected].
We move your website and email across for you — at no charge.
Not happy in the first 90 days? We'll refund you, no fuss.
Real people who know hosting — and actually answer your tickets.