Privacy Policy

1. Introduction

Web.Plus Group ("WEBPLUS") is committed to protecting Personal Data and respecting the privacy of its customers, users, and stakeholders. This Privacy Policy sets out how WEBPLUS collects, uses, discloses, stores, and protects Personal Data in accordance with applicable privacy laws and regulations, including the Singapore Personal Data Protection Act 2012 (PDPA), the Malaysia Personal Data Protection Act 2010, the European Union General Data Protection Regulation (GDPR), where applicable, and other relevant data protection legislation.

2. Scope of this Privacy Policy

This Privacy Policy applies to all Personal Data processed by WEBPLUS in connection with its websites, products, services, platforms, customer portals, reseller services, and business operations.

It applies to Personal Data relating to, but not limited to:

  • Website visitors;
  • Customers and prospective customers;
  • Domain registrants;
  • Administrative, technical, and billing contacts;
  • Resellers and their authorised representatives;
  • End users;
  • Business partners;
  • Vendors and suppliers;
  • Job applicants;
  • Individuals submitting enquiries, complaints, or abuse reports; and
  • Individuals who otherwise communicate or interact with WEBPLUS.

Where WEBPLUS processes Personal Data solely on behalf of a customer as a data processor, such processing may also be governed by a separate Data Processing Agreement (DPA) or other contractual arrangements.

3. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including the collection, recording, organisation, storage, use, disclosure, transmission, retrieval, consultation, alteration, restriction, deletion, or destruction of Personal Data.

Data Subject means the individual to whom the Personal Data relates.

Controller means the individual or organisation that determines the purposes and means of Processing Personal Data.

Processor means the individual or organisation that Processes Personal Data on behalf of a Controller.

Cookies means small text files stored on a user’s device that enable website functionality, improve user experience, analyse website usage, or enhance security.

ICANN means the Internet Corporation for Assigned Names and Numbers.

Registry Operator means the organisation responsible for operating and maintaining a top-level domain registry.

4. Categories of Personal Data We Collect

This section describes the categories of Personal Data collected by WEBPLUS, including information provided directly by individuals and information collected automatically through the use of our websites, customer portals, APIs, products, and services.

Information You Provide

Examples include:

  • Full name;
  • Company name;
  • Job title;
  • Email address;
  • Telephone number;
  • Postal address;
  • Country or region;
  • Billing and payment information;
  • Domain registration information;
  • Support requests and correspondence;
  • Abuse reports;
  • Documents or files voluntarily submitted to WEBPLUS.

Information Collected Automatically

Depending on the services used, WEBPLUS may automatically collect information including:

  • IP address;
  • Browser type and version;
  • Device and operating system information;
  • Referring website and URLs;
  • Session identifiers;
  • Cookie information;
  • Login and authentication records;
  • API usage records;
  • DNS and server logs;
  • Security and audit logs; and
  • Website analytics and usage statistics.

5. How We Collect Personal Data

WEBPLUS may collect Personal Data directly from you, from authorised third parties, or automatically through your use of our websites, systems, and services.

Personal Data may be collected when you:

  • Visit or browse our website;
  • Register an account;
  • Purchase, renew, or transfer services;
  • Register, renew, or transfer domain names;
  • Submit domain registration information;
  • Contact our customer support team;
  • Submit support tickets;
  • Report abuse or security incidents;
  • Access the reseller platform or customer portal;
  • Subscribe to newsletters or marketing communications;
  • Register for webinars, events, or training sessions;
  • Apply for employment opportunities;
  • Communicate with WEBPLUS through email, telephone, live chat, or other communication channels; or
  • Provide information through registries, registrars, business partners, or other authorised third parties.

6. Purposes of Processing

WEBPLUS processes Personal Data only where necessary to provide products and services, fulfil contractual obligations, comply with legal or regulatory requirements, protect the security and integrity of its services, or pursue legitimate business interests.

Depending on the nature of the products or services provided, Personal Data may be processed for one or more of the following purposes:

  • Operating, maintaining, and improving our websites and online services;
  • Responding to enquiries and providing requested information;
  • Managing customer accounts and contractual relationships;
  • Registering, renewing, transferring, and managing domain names;
  • Providing DNS, hosting, SSL certificates, email, cloud, trademark protection, and related services;
  • Processing payments, invoices, and financial transactions;
  • Verifying user identity and authenticating access;
  • Preventing fraud and unauthorised activities;
  • Detecting, investigating, and responding to cybersecurity incidents;
  • Managing abuse reports and security investigations;
  • Complying with ICANN policies and Registry Operator requirements;
  • Resolving disputes and enforcing contractual rights;
  • Providing technical support and customer service;
  • Conducting internal audits, risk assessments, and service improvements; and
  • Complying with applicable legal, regulatory, and contractual obligations.

7. Cookies and Similar Technologies

WEBPLUS uses cookies and similar technologies to improve website functionality, enhance user experience, maintain website security, and analyse website performance. The categories of cookies used by WEBNIC may include:

The categories of cookies used may include:

  • Essential Cookies;
  • Functional Cookies; and
  • Analytics Cookies;

Cookies are small text files stored on your device when you visit our website. You may configure your browser settings to refuse or delete cookies. However, please note that disabling certain cookies may affect the availability or functionality of certain features of the website.

8. Legal Basis for Processing

Where required by applicable law, WEBPLUS processes Personal Data on one or more of the following legal bases:

  • Consent;
  • Performance of a contract;
  • Compliance with legal obligations;
  • Legitimate business interests; and
  • Protection of network, system, and information security.

9. Disclosure of Personal Data

WEBPLUS may disclose Personal Data to third parties where such disclosure is necessary for the provision of our products and services, compliance with legal or regulatory obligations, the protection of legitimate business interests, or other purposes permitted by applicable law.

Depending on the nature of the services provided, Personal Data may be disclosed to:

  • Affiliated companies;
  • Registry Operators;
  • ICANN;
  • Certificate Authorities;
  • Cloud and hosting service providers;
  • Payment processors;
  • Professional advisers;
  • External auditors;
  • Regulatory authorities;
  • Law enforcement agencies;
  • Courts and tribunals;
  • Authorised sub-processors; and
  • Other third-party service providers engaged by WEBPLUS.

Where appropriate, WEBPLUS requires such recipients to maintain appropriate confidentiality, privacy, and information security measures.

10. WHOIS, RDAP and ICANN Requirements

This section explains that certain Personal Data associated with domain name registrations may be collected, processed, disclosed, published, or otherwise made available in accordance with:

  • ICANN policies;
  • Registry Operator requirements;
  • Applicable laws;
  • Court orders;
  • UDRP or URS proceedings;
  • Abuse investigations; and
  • Other contractual or regulatory obligations applicable to domain name registration services.

Such processing is necessary to support the operation, security, stability, and integrity of the Domain Name System (DNS) and to fulfil WEBPLUS’s contractual and regulatory obligations.  

11. International Transfers of Personal Data

This section explains that, due to the global nature of Internet infrastructure and domain name services, Personal Data may be transferred to countries outside the jurisdiction in which it was originally collected.

International transfers may occur for purposes including:

  • Domain name registration;
  • DNS services;
  • Cloud infrastructure;
  • SSL certificate issuance;
  • Technical support;
  • Payment processing; and
  • Other services necessary to provide WEBPLUS’s products and services.

Where required by applicable law, WEBPLUS implements appropriate safeguards to protect Personal Data during international transfers.

12. Information Security

This section describes the technical and organisational measures implemented by WEBPLUS to protect Personal Data against unauthorised access, disclosure, alteration, loss, destruction, or misuse.

Security measures may include:

  • Role-based access controls;
  • Multi-factor authentication;
  • Encryption in transit;
  • Encryption at rest where appropriate;
  • Firewall protection;
  • Network monitoring;
  • Vulnerability management;
  • Malware protection;
  • Backup and disaster recovery procedures;
  • Security awareness training; and
  • Periodic security reviews and risk assessments.

13. Data Retention

This section explains that Personal Data is retained only for as long as necessary to:

  • Provide products and services;
  • Fulfil contractual obligations;
  • Comply with applicable legal, tax, accounting, and regulatory requirements;
  • Meet ICANN and Registry Operator obligations;
  • Investigate abuse or security incidents;
  • Resolve disputes; and
  • Protect WEBPLUS’s legal rights and legitimate interests.

Upon expiry of the applicable retention period, Personal Data will be securely deleted, anonymised, or otherwise disposed of in accordance with WEBPLUS’s retention and disposal procedures.

14. Your Privacy Rights

Subject to applicable law, individuals may have the right to:

  • Request access to their Personal Data;
  • Request correction of inaccurate or incomplete Personal Data;
  • Request deletion of Personal Data;
  • Request restriction of processing;
  • Object to certain processing activities;
  • Withdraw consent where processing is based on consent;
  • Request data portability, where applicable; and
  • Lodge a complaint with the relevant supervisory authority.

WEBPLUS may require reasonable verification of identity before processing such requests.

15. Data Subject Access Requests (DSAR)

This section explains how individuals may exercise their privacy rights by submitting a Data Subject Access Request (DSAR) to WEBPLUS’s Privacy Officer.

It also describes WEBPLUS’s identity verification process, expected response timeframes, and the circumstances in which requests relating to customer-controlled Personal Data may be referred to the relevant customer where WEBPLUS acts solely as a data processor.

16. Personal Data Breaches

This section explains WEBPLUS’s procedures for identifying, assessing, containing, investigating, responding to, and remediating Personal Data breaches.

Where required by applicable law, WEBPLUS will notify affected individuals, customers, regulators, or other competent authorities without undue delay following confirmation of a reportable Personal Data breach.

17. Third-Party Websites

This section explains that WEBPLUS’s websites may contain links to third-party websites or services that are not owned or controlled by WEBPLUS.

WEBPLUS is not responsible for the privacy practices, content, or security of such third-party websites and encourages users to review the applicable privacy policies before providing any Personal Data.

18. Children's Privacy

WEBPLUS’s products and services are primarily intended for businesses and are not directed towards children.

WEBPLUS does not knowingly collect Personal Data from children except where permitted by applicable law or with appropriate parental or legal guardian consent where required.

19. Changes to this Privacy Policy

WEBPLUS may update this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, business operations, technology, or industry practices.

The latest version of this Privacy Policy will be published on WEBPLUS’s website together with its effective date, and any material changes will take effect from the date specified in the updated version.

20. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact:

Privacy Officer
Web.Plus Group

Email: support@web.plus
Website: www.web.plus

Scroll to Top