Data Processing Addendum
Last updated: October 7, 2026
This addendum is part of the agreement between BrenCor Digital Enterprises Inc. ("we", "us") and you, our hosting customer. It applies when you store other people's personal information on your HostMoose hosting account, for example your own website visitors, customers, or the people whose email you handle. It does not cover your own information as our customer; that is in our Privacy Policy.
1. Who does what
You decide what personal information goes on your hosting account and why, and you are responsible for having the right to collect and use it (including any consent you need). We store and handle it for you only to provide the hosting service.
2. What we do with it
We store your website files, databases and email, back them up and keep them available, and we help you if you ask for support. We don't look through your content unless you ask for support, we're investigating a security or abuse problem, or the law requires it. We don't use it for any other purpose.
3. What you shouldn't store
Our hosting provider doesn't allow health information or other sensitive personal information about other people to be stored on its servers. Please don't keep that kind of information on your account. See the Acceptable Use Policy.
4. Where it is stored, and who else handles it
Your hosting data is stored in Canada, on servers in Montreal operated by our hosting provider, CrocWeb, which is our only sub-processor for the content of your hosting account. Daily backups of it are kept by CrocWeb for 30 days. We require our provider to protect your data. If we add or change a provider that handles your hosting data, we'll tell you.
5. Security
We use reasonable technical and organizational safeguards, including encryption in transit, access controls and monitoring, and we limit who at HostMoose can reach your data. You are responsible for keeping your own passwords, software and plugins secure.
6. Requests from your own visitors and customers
If someone asks you for access to, correction of, or deletion of their information, you are responsible for answering. We'll reasonably help you find or remove it. If someone contacts us directly about information on your site, we'll direct them to you.
7. Data breaches
If we learn of a breach of our systems that affects personal information on your account, we'll tell you promptly and give you the information you need to meet your own obligations to notify people and regulators.
8. When service ends
When your service ends for any reason, your website files, databases and email are deleted. Copies in backups are overwritten within about 30 days. Please download what you need first. We keep only what the law requires, and our own records about you as a customer.
9. Law and priority
We both agree to follow the privacy laws that apply, including Canada's PIPEDA and Alberta's PIPA. If this addendum and the Terms & Conditions disagree about how personal information is handled, this addendum applies.