Privacy Policy

Last updated: 9th October 2026

Privacy Policy

Introduction

WHMDeskCloud (WHMDC) (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, register for an account, use our services, or use the WHMDC Companion app.

Information We Collect

We may collect and process the following categories of information:

  • Account information - such as name, email address, company name, and login credentials when you register or purchase a licence.
  • Technical information - including IP address, browser type, device information, and operating system.
  • Usage information - limited data relating to how our website, licensing system, or update services are accessed.
  • Support communications - information you provide when contacting us for support or enquiries.

How We Use Your Information

We use personal data for the following purposes:

  • To provide, manage, and maintain licences and related services
  • To respond to enquiries and provide customer support
  • To communicate service-related notices and updates
  • To send marketing communications where you have provided consent
  • To monitor and improve our website and services
  • To comply with legal and regulatory obligations

Legal Basis for Processing

We process personal data in accordance with UK GDPR under one or more of the following legal bases:

  • Performance of a contract
  • Legitimate interests (such as operating and improving our services)
  • Compliance with legal obligations
  • Your consent, where required

Software Data

WHMDC is installed and operated on your own server environment. We do not access, collect, or process the data stored within your WHMDC installation. For licensing and update purposes, the Software may make automated API requests to our licensing servers to validate licence status. These requests are limited to technical and licence-related information and do not include access to, or transmission of, customer content or data stored within your installation.

WHMDC Companion app

The WHMDC Companion app (the “App”) is for staff who use a WHMDC installation. The App connects only to the installation you pair it with. Clients, invoices, quotes, orders, tickets, and other records you view or change in the App stay on that installation. We do not receive that content on WHMDC servers.

When you connect a phone, that installation stores:

  • The device name, platform (iOS or Android), and app version
  • The IP address used while pairing the phone
  • A notification token, if you turn push notifications on

Sign-in tokens are kept in the phone’s secure storage. They are removed from the phone when you disconnect it. An administrator can also revoke the device from the installation, which signs that phone out.

Push notifications are optional. If you allow them, the notification token is sent to your installation and notices are delivered through Apple Push Notification service, Google Firebase Cloud Messaging, and Expo’s push service. You can turn notifications off in the App or in your phone settings. Turning them off removes the token from the installation.

The camera is used only when you choose to scan a pairing code or take a photo. If you choose a photo from your library for your profile picture or a support ticket, that photo is uploaded to your installation. The App does not browse your photo library in the background, and it does not read or upload videos from your library.

Face ID, Touch ID, face unlock, and fingerprint unlock are optional and are checked by your phone. We do not collect or store biometric data. The App only remembers, on the phone, whether you chose to use that unlock method.

The App does not show advertising and does not use a third-party analytics or crash-reporting service.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

Data Protection & Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure.

Third-Party Services

We may use trusted third-party service providers (such as hosting, licensing, analytics, or email providers) to operate parts of our services. These providers process personal data only on our instructions and in compliance with applicable data protection laws.

Your Rights

Under UK GDPR and applicable data protection laws, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent where processing is based on consent

Cookies

We use cookies and similar technologies to enhance user experience and analyse website usage. You can control cookies through your browser settings. For more information, please refer to our Cookie Policy.

Contact

If you have questions about this Privacy Policy or how we handle personal data, please contact us at [email protected].