Privacy Policy
Effective Date: January 15, 2026
Theqah ("we", "us", "our") respects your privacy and is committed to protecting personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Information We Collect
Account Information
- Name
- Email address
- Login credentials
- Language preference (English / Arabic)
Usage & Technical Data
- IP address
- Browser and device information
- Pages visited and actions taken within the dashboard
Managed Website Data
- Website URLs
- WordPress version
- Plugin and theme metadata
- Backup, monitoring, and activity logs
- We do not intentionally collect sensitive personal information.
We do not intentionally collect sensitive personal information.
2. How We Use Information
We use information to:
- Provide and operate the Service
- Authenticate users
- Perform updates, backups, monitoring, and reporting
- Improve performance and reliability
- Communicate service-related notices
3. Legal Basis for Processing
Information is processed based on:
- User consent
- Performance of a contract
- Legal obligations
- Legitimate business interests
4. Data Storage & Location
Data may be stored and processed in Canada or other jurisdictions where our service providers operate.
Appropriate safeguards are used to protect personal information.
5. Third-Party Processors
We may share data with trusted third-party providers, including:
- Hosting and infrastructure providers
- Database services
- Payment processors (e.g., Stripe)
- Email delivery services
These providers are contractually required to protect your data.
6. Cookies & Tracking
We use cookies and similar technologies to:
- Maintain user sessions
- Improve user experience
- Analyze platform usage
You can control cookies through your browser settings.
7. Data Retention
We retain personal information only as long as necessary to:
- Provide the Service
- Comply with legal obligations
- Resolve disputes
You may request deletion of your account data, subject to legal requirements.
8. Your Rights (PIPEDA)
You have the right to:
- Access your personal information
- Request corrections
- Withdraw consent where applicable
- Request deletion of personal data
Requests can be made by contacting us.
9. Security
We implement administrative, technical, and organizational safeguards to protect personal information.
However, no system is completely secure.
10. Children's Privacy
Theqah is not intended for individuals under 18 years of age.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page.
12. Contact
For privacy-related inquiries:
Email: info@theqah.com
Location: Canada
13. Managed Hosting Data Collection
This section applies when you subscribe to Theqah Managed WordPress Hosting. In addition to the data described above, we collect and process the following hosting-specific information.
13a. Server & Access Logs
For hosted sites, we collect:
- Nginx access logs (IP addresses, request URLs, timestamps, user agents)
- PHP error logs and warnings
- Database query logs (for performance monitoring, not query content)
- Server resource usage metrics (CPU, memory, disk I/O)
13b. Site Content & Database
As your hosting provider, we store the following data. We do not review or use your content for advertising, profiling, or any purpose unrelated to providing the hosting service:
- WordPress database (posts, pages, comments, user data, site settings)
- Uploaded media files (images, documents, videos)
- Plugin and theme files installed on your site
We may access hosting files and databases only as necessary to:
- Provide the hosting service (e.g., backups, migrations, restores, performance troubleshooting)
- Respond to your support requests or troubleshoot issues you report
- Maintain security, prevent abuse, and protect infrastructure
- Comply with valid legal process from law enforcement
Such access may be logged and audited for security and compliance purposes.
Retention: Your site data (files, database, uploads) is retained for the duration of your active hosting service plus 30 days after cancellation or termination, after which it is permanently deleted.
Certain records (billing history, security logs, audit events) may be retained longer where required for legal, security, or compliance purposes. Backup retention depends on your plan settings (as shown in your dashboard).
You are the data controller for any personal data collected through your WordPress site. We act as a data processor for this content.
13c. Configuration Data
- PHP configuration settings (memory limits, execution time)
- WordPress configuration (wp-config.php values, excluding database passwords)
- Nginx virtual host configurations
13d. Backup Snapshots
- Daily automated backups of your site files and database
- Backup retention periods: 14 days (Freelancer), 30 days (Agency)
- Backups are encrypted at rest and in transit
13e. Agent Communication Logs
Our hosting agent communicates with your site for management purposes. We log:
- Command execution timestamps and results (success/failure)
- Update, backup, and maintenance operation records
- Health check and monitoring data
13f. SSL Certificate Metadata
- Domain names covered by SSL certificates
- Certificate issuance and expiration dates
- Let's Encrypt verification records
13g. How We Use Hosting Data
Hosting-specific data is used to:
- Provision and maintain your WordPress hosting environment
- Monitor server health and performance
- Perform automated backups and enable restores
- Troubleshoot issues and provide technical support
- Detect and prevent abuse, security threats, and AUP violations