Privacy Policy

This page serves to inform you of our privacy policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site. While using our site, you may be asked to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information limited to your name, phone number and email address. No information will be knowingly given or sold to third parties. This information can be used to contact you to offer our services. Information is collected when you fill out the “contact me” form on our website. This information allows us to reach out to you to discuss your needs and offer our services

SiteGround, as a web hosting provider, implements several security measures to protect customer data and ensure the integrity of the websites they host. While specifics can vary depending on the hosting plan and additional services a customer subscribes to, here are common security measures that SiteGround typically employs to protect customer data:

1. Server-Level Security
● Proactive Server Monitoring: SiteGround uses advanced server monitoring to detect
and block potential attacks in real time. This includes monitoring for malicious
activities like hacking attempts, DDoS (Distributed Denial of Service) attacks, and
brute force login attempts.
● Web Application Firewall (WAF): SiteGround offers a built-in firewall, which can
block malicious traffic and attacks targeting specific vulnerabilities in web applications.
● Data Encryption in Transit (SSL/TLS): SiteGround provides free SSL certificates for
all websites, ensuring that data transferred between a user’s browser and the server is
encrypted. This is essential for preventing the interception of sensitive customer data
(e.g., passwords, contact form submissions).
2. Website-Level Security
● Daily Backups: Regular backups of customer websites and databases are performed,
so that data can be restored if needed after an incident. This ensures that customer
data is not permanently lost in case of an attack.
● Automatic Updates: SiteGround automatically applies security patches and updates
to the server software and website platforms (such as WordPress or Joomla). These
updates address known vulnerabilities, reducing the risk of exploitation.
● Secure File Permissions: SiteGround ensures proper file permissions to protect
important files and directories from unauthorized access.
3. Database Security
● Data Encryption: Any sensitive customer data stored in databases (such as contact
form submissions) should be encrypted both at rest (when stored) and in transit.
SiteGround employs encryption to ensure data is secured even if an attacker gains
access to the database.
● Database Isolation: SiteGround isolates customer databases on shared hosting
environments, which limits the exposure of one website’s data to other customers on
the same server.
● MySQL Security: SiteGround regularly applies updates and security patches to
MySQL databases, ensuring that known vulnerabilities are addressed.
4. Access Control
● Two-Factor Authentication (2FA): SiteGround provides 2FA for customer accounts,
adding an extra layer of security for logging into your account and accessing sensitive
features like database management or billing.
● Password Policies: SiteGround enforces strong password policies to ensure that
user accounts and databases are protected by complex, hard-to-guess passwords.
● Access Logs: SiteGround maintains detailed access logs for websites, which can be
reviewed to track any unauthorized or suspicious login attempts.
5. Customer-Side Security Tools
● Security Plugins: If you are using a CMS like WordPress, SiteGround provides
access to a variety of security plugins that can help protect your website from threats,
including intrusion attempts and malware.
● Antivirus & Malware Scanning: SiteGround offers malware scanning tools that can
detect and remove malicious code from your website. These scans help ensure that
your website doesn’t become a vehicle for spreading malware.
6. DDoS Protection
● Distributed Denial of Service (DDoS) Protection: SiteGround uses advanced
technologies to protect websites from DDoS attacks that could overwhelm the server
with traffic, causing downtime and potential data exposure.
● Traffic Filtering: Malicious traffic is filtered out using real-time traffic monitoring and
blacklisting of IP addresses known for suspicious activities.
7. Compliance and Legal Measures
● GDPR Compliance: SiteGround is GDPR-compliant, which means they follow strict
guidelines on how to store and process personal data. This ensures that the data
stored from customer contact forms is handled appropriately, with consent, and used
only for its intended purpose.
● Privacy Policy & Terms: SiteGround has a comprehensive privacy policy and terms
of service that outline their commitment to protecting your data.
8. Incident Response Plan
● Security Incident Response: SiteGround has an incident response protocol in place
to quickly respond to any security breaches or data leaks. This includes identifying
and mitigating the breach and notifying affected customers.
9. Server Hardening
● Advanced Security Hardening: SiteGround performs server hardening by disabling
unnecessary services, locking down access to critical files, and limiting remote server
access to prevent unauthorized connections.
10. Regular Security Audits
● Third-Party Audits: SiteGround conducts regular security audits and penetration
testing to identify and mitigate any potential vulnerabilities in their infrastructure or
systems.
Protection provided by GoDaddy.
1. Data Encryption
● Encryption in Transit: GoDaddy uses encryption protocols like TLS (Transport
Layer Security) to ensure that emails sent and received are encrypted during
transmission. This helps protect the content of your emails from being intercepted by
unauthorized parties while they travel over the internet.
● Encryption at Rest: For stored emails, GoDaddy employs encryption at rest to
ensure that your email data is protected even when it’s stored on their servers.
2. Two-Factor Authentication (2FA)
● Two-Factor Authentication: GoDaddy provides 2FA for email accounts to add an
extra layer of security when logging in. With 2FA, a user must provide two forms of
identification (such as a password and a code sent to their mobile device) to access
the account, making it more difficult for attackers to gain unauthorized access.
3. Spam and Malware Protection
● Spam Filtering: GoDaddy’s email services come with advanced spam filters to
automatically detect and filter out unwanted emails or potentially harmful content. This
helps protect you from phishing emails and malicious attachments.
● Malware Detection: GoDaddy scans incoming and outgoing emails for malware,
ensuring that email attachments are free from harmful software or viruses that could
harm your device or network.
4. Email Security Policies
● DKIM (DomainKeys Identified Mail): GoDaddy supports DKIM to authenticate
emails. This helps verify that an email is coming from the domain it claims to be from,
reducing the likelihood of spoofing or impersonation.
● SPF (Sender Policy Framework): SPF helps prevent email spoofing by verifying that
emails sent from your domain are coming from authorized mail servers. This reduces
the chances of your email being marked as spam or used for malicious purposes.
● DMARC (Domain-based Message Authentication, Reporting, and Conformance):
DMARC adds an additional layer of email protection by helping email servers identify
fraudulent emails and taking action to protect your email domain from abuse.
5. Email Account Monitoring and Alerts
● Login Activity Monitoring: GoDaddy tracks and logs login attempts and suspicious
activities. If there is a sign of unauthorized access, GoDaddy sends an alert to the
account owner, notifying them of potential security threats.
● Account Locking: After several failed login attempts, GoDaddy may lock the account
temporarily to prevent brute force attacks, which try multiple passwords until they find
the correct one.
6. Secure Access and Connection
● Secure IMAP/POP3/SMTP Connections: GoDaddy supports secure IMAP (for
reading emails), POP3 (for retrieving emails), and SMTP (for sending emails) over
SSL/TLS connections, ensuring that data is encrypted when accessing email accounts
through third-party email clients like Outlook or mobile devices.
● Secure Webmail Access: When accessing email via the webmail interface, GoDaddy
uses HTTPS to ensure the communication is encrypted.
7. Advanced Anti-Phishing Protection
● Phishing Protection: GoDaddy employs phishing detection tools that analyze
incoming emails for signs of phishing attempts. These emails are flagged, and the
user is warned before opening them.
● URL Filtering: GoDaddy also scans URLs in email messages for potential phishing
sites or links to malicious websites, helping users avoid falling victim to scams.
8. Backup and Recovery
● Email Backup: GoDaddy offers email backup solutions to ensure that your email data
is regularly backed up. This helps protect against data loss due to accidental deletion,
server failures, or other issues.
● Email Data Recovery: In case of a server or data loss event, GoDaddy provides
email recovery tools to restore emails from backups.
9. Privacy Policy and Compliance
● GDPR Compliance: GoDaddy is committed to ensuring its services are
GDPR-compliant. This means they take steps to protect customer data and offer
customers control over their personal data.
● Data Retention and Deletion: GoDaddy has policies in place that define how long
data is retained and how it can be deleted, ensuring compliance with data protection
regulations.
10. Anti-DoS and Anti-DDoS Measures
● Denial of Service (DoS) Protection: GoDaddy has protections in place to mitigate
the impact of DoS attacks, which aim to overwhelm servers with traffic, preventing
legitimate users from accessing email services.
● DDoS Protection: GoDaddy also employs Distributed Denial of Service (DDoS)
mitigation tools to prevent massive-scale attacks aimed at overwhelming email
servers.
11. Access Control and Permissions
● Role-Based Access: If you use GoDaddy’s email services for a team or organization,
you can control permissions and access. For example, you can restrict who has
administrative privileges over email accounts or who can access certain features.
● Password Policies: GoDaddy encourages strong password practices, including
recommending complex passwords and regular changes to avoid unauthorized
access.
12. Security Audits and Incident Response
● Regular Security Audits: GoDaddy regularly audits its email infrastructure for
vulnerabilities to ensure that there are no security gaps.
● Incident Response Plan: If a security breach occurs, GoDaddy has a response plan
in place to investigate the issue, mitigate the damage, and notify affected users if
necessary.
Your data will never be shared or sold to a third party.
You have the right to inform us that you would no longer like to be contacted.
You may call 405-921-7776 with any questions or concerns regarding your
privacy.
SMS opt-in and phone numbers collected for SMS communication purposes will not be shared with any third party and affiliates for marketing purposes.