Effective Date: April 8, 2026 Company: Bigframe Digital LLC (Arizona, United States)
Bigframe Digital LLC ("Bigframe Digital", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our websites (bigframe.digital, docs.bigframe.digital), use our billing portal (hosting.bigframe.digital), or purchase our web hosting and infrastructure services.
By using our services, you consent to the data practices described in this policy.
1. Information We Collect
We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Information") in the following ways:
- Information You Provide to Us: * Account Creation: When you register for an account via our billing portal, we collect your name, email address, physical address, phone number, and company details.
- Billing Information: To process payments, we collect necessary billing details. Please note that raw credit card numbers are processed directly by our secure third-party payment gateways (e.g., Stripe, Stripe ACH) and are not stored on Bigframe Digital servers.
- Support Interactions: Information you provide when opening support tickets, communicating in our Slack channel, or requesting migrations.
- Information We Collect Automatically:
- Log Data and Telemetry: Our servers automatically record standard log data, including your IP address, browser type, operating system, and the dates/times of your visits to help us monitor server health and prevent abuse.
- Cookies: We use cookies and similar tracking technologies to manage active WHMCS user sessions, remember your preferences, and analyze site traffic.
2. How We Use Your Information
We use your Personal Information strictly to operate our business and provide you with premium hosting services. Specifically, we use it to:
- Provision and manage your bare-metal servers, hosting accounts, and domain registrations.
- Process transactions and send billing notices.
- Provide technical support and respond to your inquiries.
- Monitor server performance, detect fraud, and mitigate security threats (such as DDoS attacks or unauthorized access attempts).
- Communicate updates, maintenance windows, and policy changes.
3. How We Share Your Information
Bigframe Digital does not and will not sell your Personal Information to third parties. We only share your data with trusted partners necessary to deliver our services:
- Payment Processors: Such as Stripe or PayPal, to securely process your subscription payments in compliance with PCI DSS standards.
- Domain Registrars: To register a domain name on your behalf, we must share your contact information with ICANN-accredited registrars to fulfill WHOIS requirements.
- Law Enforcement: We may disclose your information if required by law, subpoena, or court order, or to protect the rights, property, or safety of Bigframe Digital, our clients, or the public.
4. Security and Compliance (HIPAA & PCI)
We implement strict physical, technical, and administrative security measures to protect your data, aligning with standards like NIST, CCPA, and PCI DSS.
- Shared Responsibility: While we secure the underlying hardware and network, you are responsible for securing the data you choose to host on your WordPress instances. If you are hosting Protected Health Information (PHI) subject to HIPAA, or processing credit cards directly on your site, you are solely responsible for ensuring your specific application and data-handling protocols meet those compliance requirements.
5. Your Privacy Rights (CCPA & General Rights)
Depending on your state or country of residence (including California under the CCPA), you may have the following rights regarding your Personal Information:
- The Right to Know: You may request details about the specific pieces of Personal Information we have collected about you.
- The Right to Delete: You may request that we delete your Personal Information, subject to certain legal exceptions (e.g., we must retain some billing records for tax and legal compliance).
- The Right to Correct: You can update or correct your account information at any time directly through your WHMCS client portal.
- The Right to Non-Discrimination: We will not deny you service or provide a different quality of service if you exercise your privacy rights.
6. Data Retention
We retain your Personal Information for as long as your account is active or as needed to provide you services. Upon account termination, we will securely delete or anonymize your data, except for information we are legally required to retain for financial reporting, dispute resolution, and legal compliance.
7. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website and updating the "Effective Date" at the top.
8. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data privacy rights, please contact us by opening a support ticket in your client portal or by emailing our privacy team.
