Privacy Policy
Effective November 3, 2026 · Epic Design & Print Inc.
Who we are
XpandHost is a brand of Epic Design & Print Inc., 13 Commercial Ave, Fairview, NJ 07022, United States. This notice explains how we handle personal information when you visit xpandhost.com, order hosting, use your client account, or contact us. For privacy questions, email support@xpandhost.com with “Privacy” in the subject.
Information we collect
We collect the account and contact information you provide, such as your name, business name, email, phone number, billing address, domain names, and support messages. Our billing system keeps order, invoice, transaction, payment-status, and account records. Hosting systems process the website files, databases, and email content you place on the service. Server and security logs may record IP addresses, access times, requested pages, device/browser information, and account activity.
How we use it
We use information to set up and operate hosting, authenticate account access, process billing and renewals, answer support requests, recover accounts, prevent fraud and abuse, maintain security, and meet accounting and legal obligations. Service notices and invoices are operational communications. Optional promotional messages are separate, and you can unsubscribe or contact us to change your preference.
Payments and service providers
Stripe processes online payments. Payment details entered in Stripe’s payment fields are handled by Stripe; our billing system receives information such as payment status, transaction references, and permitted payment-method details needed to administer your account. Stripe and its optional Link service also process information under their own privacy notice.
We use Hosting.com for hosting infrastructure and WordPress, WHMCS, and related software to operate the website and client portal. Infrastructure, payment, email-delivery, and other service providers may process information needed to perform those services. Support personnel may access relevant records or hosted content when required to provide support, investigate abuse, or maintain the service. We may disclose information when required by law, to protect rights and security, or in connection with a lawful business transfer.
Some page assets load from third-party content delivery networks, including jsDelivr, cdnjs/Cloudflare, and DataTables. When your browser requests those assets, the provider receives connection information such as your IP address and browser details.
Cookies and similar technologies
The website and client portal use cookies and similar storage for functions such as login sessions, shopping carts, preferences, and security. Stripe may use its own technologies for payment functionality and fraud prevention. Blocking cookies in your browser may prevent login or checkout from working. This notice does not authorize optional advertising or analytics tracking: any such tools require appropriate disclosure and choices before use.
Retention and protection
We keep information for as long as reasonably needed to provide the service, maintain required business records, resolve disputes, and meet legal obligations. Retention depends on the record type; account closure does not immediately erase invoices, security logs, or backup copies. Contact us about a specific deletion request. We use access controls and other safeguards appropriate to our services, but no online system can guarantee absolute security. Keep independent copies of your hosted data and protect your login credentials.
Your choices and requests
You can review and update account details through the client area or contact support. Depending on where you live and the law that applies, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or limit certain processing. Send requests to support@xpandhost.com. We may ask for proportionate verification before disclosing or changing account information; do not email passwords or full payment-card details. If a request is declined, reply with “Privacy appeal” so we can review it and explain the outcome. You may also contact your relevant privacy regulator, including the New Jersey Division of Consumer Affairs.
Hosted websites and international processing
This policy describes XpandHost’s handling of information. Customers are responsible for their own websites’ privacy notices and lawful collection of visitor information. If your request concerns a website hosted by a customer, contact that website’s operator first. Our providers may process information in the United States and other countries where they operate; applicable protections and legal rights can differ.
Children and changes
Our services are intended for adults and businesses. If you believe a child has supplied personal information without appropriate authorization, contact us so we can investigate. We will post material updates to this notice with a new effective date and provide additional notice where required.