Terms of Service

Agreement

These Terms of Service govern your use of Teal Host LTD websites, TealHost account, hosting, WordPress hosting, VPS, domains, email, support and related services. By placing an order, opening an account, renewing a service or continuing to use a service, you agree to these terms and any product-specific terms shown at checkout, on an invoice or in the TealHost account.

When you accept these Terms for a hosting, email or backup service, you also accept the Data Processing Agreement (version 1.0, 28 September 2026) below for processing carried out on your behalf. Its acceptance provisions govern how it applies to existing services.

Accounts and accurate information

You must provide accurate account, billing and domain registration information and keep it up to date. You are responsible for maintaining the confidentiality of passwords, API keys and account access, and for all activity under your account.

Services and provisioning

We aim to provide fast, secure and reliable hosting services. Provisioning times, features, storage, bandwidth, backup retention and included extras may vary by plan. Services may depend on third-party networks, registries, registrars, software vendors and data centre providers.

Customer responsibilities

• Keep your website software, plugins, themes, passwords and email accounts secure.
• Maintain your own current backup of important content, even when a plan includes backups.
• Use server resources fairly and avoid activity that harms other customers, networks or systems.
• Respond promptly to abuse, security, billing or domain verification notices.
• Make sure your content and use of the services comply with the laws of Mauritius and any other applicable laws.

Acceptable use

You may not use our services for illegal, abusive or harmful activity, including malware, phishing, spam, denial-of-service activity, unauthorised scanning, copyright infringement, fraud, hate or violent content, pornographic content, child exploitation, or any activity that disrupts our infrastructure or other customers. We may suspend or terminate services to protect users, networks, systems or legal compliance.

Domains

Domain registrations, renewals and transfers are subject to the rules of the relevant registrar, registry and domain extension. You are responsible for checking spelling before ordering, maintaining accurate registrant details and renewing domains before expiry. Domain fees are usually non-refundable once submitted to the registrar or registry.

Billing, renewals and suspension

You agree to pay fees by the due date shown in your invoice or TealHost account. Services may renew automatically unless cancelled according to the process shown in the TealHost account. Late or failed payments may lead to suspension, termination, data deletion, late fees or domain expiry. Restoring suspended or expired services may not always be possible and may involve additional fees.

Backups and data

Some hosting plans include backup features, but backups are provided as a convenience and are not a replacement for your own backup process. We do not guarantee that any specific backup will always be available, complete or restorable. VPS backups are not included by default unless specifically purchased or stated on your plan.

Data Processing Agreement

Teal Host LTD | Version 1.0 | 28 September 2026

1. Parties, scope and acceptance

This agreement forms part of the Terms of Service between Teal Host LTD, company number 197976, BRN C23197976, Mauritius ("Teal Host", "we" or "us"), and the customer identified in the service order ("you"). It applies when we process personal data on your behalf in providing TealHost hosting, email and backup services or TealCloud Backup ("Customer Data").

You act as controller where you determine why and how Customer Data is processed. We act as processor for processing carried out on your behalf. If you act for another controller, you must have authority to appoint us as a further processor. The parties' roles depend on their actual activities. This agreement does not remove protections or statutory duties that apply to an individual using the service for personal purposes.

This version takes effect for a service when it is incorporated into the service agreement and accepted by both parties, including through recorded electronic acceptance of Terms of Service that clearly include this agreement. A person accepting for an organisation confirms that they have authority to do so. Publishing this version does not retrospectively record acceptance for existing services.

Our own customer-account, subscription, billing, support and security records are covered by our Privacy Policy. TealCloud accounts, the cloud administration dashboard and billing operate through our WHMCS portal. These records are distinct from the contents of customer-controlled backup files.

2. Your instructions and responsibilities

We will process Customer Data only on your documented instructions. Those instructions include this agreement, your accepted service order, your service settings and authenticated requests for support, backup, restoration or deletion. We will use the data only to provide, protect, support and end the ordered service. We will not sell Customer Data or use its contents for unrelated advertising or profiling.

If law requires processing outside your instructions, we will notify you before that processing unless notification is legally prohibited. If we reasonably consider an instruction unlawful, we will explain the concern and seek clarification. We may decline an unlawful instruction.

You are responsible for having a lawful basis and the necessary notices and authority for the data you place in the service. This includes any additional requirements for sensitive information and children's data. You determine the files and information to be hosted or backed up. Your responsibilities do not exclude our own obligations under applicable law.

3. Security and confidentiality

For section 31(4)(b)(ii) of the Mauritius Data Protection Act 2017, we agree to be bound by the obligations imposed on a controller by section 31(1) in relation to Customer Data we process on your behalf.

We will maintain appropriate technical and organisational measures to protect Customer Data from unauthorised access, alteration and disclosure, and accidental loss or destruction. We will take account of the data's nature, the foreseeable harm, processing risks and available technology. Our measures will address confidentiality, integrity, availability, recovery and regular evaluation of security effectiveness.

We will restrict staff and administrator access to what is needed for authorised duties; require confidentiality; provide relevant security instructions; and remove access when no longer required. We will protect administrative connections and credentials, maintain security updates, investigate suspected compromise and address material weaknesses. Schedule 2 explains the service-specific arrangements.

You must protect your account, devices, passwords and recovery material, and promptly report suspected compromise. We will assist with service security issues within our control. This agreement does not represent a certification or an unconditional guarantee against loss or attack.

4. TealCloud encryption and recovery

The TealCloud Windows application encrypts selected backup content on your PC before upload to AWS S3 in Stockholm, Sweden. The service is designed so that Teal Host cannot inspect the plaintext contents of those encrypted backups. You choose what is backed up and authorise restoration through the service.

You must retain the recovery material required by the application and follow the recovery instructions supplied with the service. Losing required recovery material may make recovery impossible. We will not promise to decrypt or recover content without the required material.

The encryption description concerns backup file contents. Account information, billing, service-management information and operational metadata are not covered by a promise that all information is invisible to us. Client-side encryption is not asserted for ordinary TealHost websites, mailboxes or their backup copies.

5. Providers and overseas processing

You authorise the infrastructure providers and processing locations described in Schedule 1 for the relevant service. We will assess providers that process Customer Data for us and require written security, confidentiality and processing obligations appropriate to their role. Using a provider does not remove our responsibilities under this agreement.

Before adding or replacing a provider that will process Customer Data, we will give you information about its role and processing locations. You may raise a reasonable data-protection objection. We will address it before the change affects your data, by agreeing a suitable alternative or arrangements to end the affected service.

We will comply with the applicable conditions for overseas transfers, including section 36 of the Mauritius Act. Agreement to a service location is not blanket consent by every person whose information is in your files, and does not replace a required transfer safeguard, assessment, proof or authorisation. We will provide relevant transfer information on request.

6. Breaches, rights and cooperation

We will notify you without undue delay after becoming aware of a personal data breach affecting Customer Data. We will provide available information about the incident, affected data, likely consequences and response measures, with further updates as the investigation develops. We will preserve relevant evidence and reasonably assist you with required notifications.

We will pass requests concerning Customer Data to you and assist with applicable rights requests, investigations and data-protection assessments, taking account of the service's nature and our access to the data. For encrypted TealCloud content, you may need to act through your device and recovery material. We will not claim to identify plaintext that we cannot inspect.

We will provide information reasonably necessary to demonstrate compliance with this agreement and cooperate with proportionate audits and lawful requests from the Data Protection Office. Verification arrangements must preserve system security, confidentiality and other customers' data.

7. Duration, return and deletion

Processing continues for the ordered service and any applicable, disclosed backup-retention period. Backup frequency, version history and retention depend on the purchased plan and service configuration. We will make the relevant retention and cancellation information available to you. This agreement does not create a new fixed retention period or a promise of permanent storage.

You may request return or deletion through your authenticated account or our data-protection contact. When the processing purpose ends or you instruct deletion, we will delete the relevant Customer Data as soon as reasonably practicable, subject to a legal duty to retain it. Where requested, we will provide reasonable assistance to retrieve data through the available service functions before deletion. You should complete necessary downloads or restores before the service ends; account cancellation does not guarantee continuing access.

If remaining backup copies or an agreed retention restriction prevent immediate deletion, we will explain the reason and applicable deletion timetable, protect the retained data, restrict its use and delete it when the restriction ends. We will not introduce undisclosed retention restrictions or keep data indefinitely for convenience. Data retained solely to comply with law will be limited to that purpose.

8. Priority, changes and contact

This agreement takes priority over conflicting general terms on the processing and protection of Customer Data. A general backup disclaimer or liability exclusion does not remove mandatory data-protection obligations. Other commercial terms continue to apply subject to applicable law.

Material changes will be identified by a new version and communicated before being relied on. We will retain the version applicable to the recorded acceptance and obtain any further agreement required by law or the service contract. This agreement is governed by Mauritius law without excluding mandatory rights under other applicable law.

Data protection contact: Xavier Luc Masson, Teal Host LTD, Avenue Black Rock, Tamarin, Black River, Mauritius. Email: xavier@tealhost.host. Telephone: +230 57876313.

Schedule 1. Processing description

TealHost websites and email. We store and serve customer website files and databases, operate mailboxes, transmit messages to the intended recipients and provide instructed technical support. The dedicated hosting server is supplied by Namecheap in Arizona, United States. Website and email backup copies are stored in Amazon Web Services S3 in Stockholm, Sweden.

TealCloud Backup. The Windows application copies and encrypts customer-selected PC files before upload. AWS S3 in Stockholm, Sweden stores the encrypted backup content for retrieval, customer-authorised restoration and deletion. Customers administer the service through the cloud dashboard in Teal Host's WHMCS portal, which also handles accounts and billing.

Data and people concerned. Customer Data can include names, contact details, correspondence, website/database entries, email headers, message contents, attachments and other information in selected files. People concerned can include your customers, website users, contacts, employees, email correspondents and other people identified in your files. Actual categories are determined by your content and instructions. Sensitive information may be present where you lawfully include it; we do not assert that every category is present in every backup.

Frequency and term. Hosting operates during the service term. Backups and restores follow the purchased plan, configured schedules and your instructions. Retention and deletion are governed by section 7 and the relevant service information.

Domain registration, payment processing and our own business administration are described in our general terms and Privacy Policy. Providers involved in those activities are not authorised by this agreement to receive encrypted backup contents for an unrelated purpose. If you send personal data in a support message, the support and communication providers identified in our Privacy Policy may process that message to deliver support. Do not send passwords or encryption recovery material in ordinary support messages.

Schedule 2. Service measures

Hosting environment. The hosting environment uses authenticated WHM/cPanel administration over HTTPS, CloudLinux CageFS account isolation, JetBackup 5 for configured hosting backups, and configured daily cPanel, system-package and spam-rule updates. We will maintain appropriate access restrictions, review security events and respond to vulnerabilities. A running backup service alone is not evidence that a particular customer's backup or restore has succeeded.

TealCloud. Backup content is encrypted on the customer's PC before storage in AWS S3 Stockholm. Account and operational information remain subject to access control and appropriate security measures. We will maintain the documented recovery process, monitor backup failures and evaluate recovery capability using authorised testing. Testing must not expose customer plaintext or involve an unauthorised deletion.

Organisation. We will maintain records of processing and relevant provider arrangements, instruct authorised personnel on confidentiality and security, assess material service changes, and keep an incident and request-handling procedure. We will review the measures and record significant weaknesses and corrective actions. These are service obligations, not a claim that a named certification, penetration test, immutable-storage feature or particular recovery result has already been achieved.

Support

Support is available through the channels advertised on this site and in the TealHost account. We help with hosting, domains, email, WordPress and related setup issues, but custom development, third-party application debugging, malware cleanup, migration work and advanced server administration may be billable or outside normal support scope.

Cancellations and refunds

You may request cancellation through the TealHost account or by contacting support. Refunds, account credits and non-refundable items are governed by the Refund Policy and any product-specific terms shown at checkout or on the invoice.

Limitation of liability

To the fullest extent permitted by law, Teal Host LTD is not liable for indirect, incidental, special, consequential or punitive damages, loss of profit, loss of business, loss of data or service interruption arising from use of the services. Nothing in these terms limits rights that cannot legally be limited.

Changes

We may update these terms, product features, prices or policies when needed. Continued use of the services after changes are posted or notified means you accept the updated terms.

Governing law and contact

These terms are governed by the laws of Mauritius, unless a mandatory law says otherwise.