Privacy Policy

1. Who we are

IDCS Atlas is a global VPS platform operating from 16 Nanyang Dr, Singapore 637458. For privacy questions or requests, contact our data protection representative at [email protected].

2. Personal data we collect

• Account and identity data: name, organisation, username, contact details, country, and information used for identity or fraud checks.
• Billing data: billing address, transaction records, tax information, payment status, and limited payment-method details supplied by a payment provider. We do not intend to store full card numbers.
• Service data: orders, assigned resources, IP addresses, operating system selections, account settings, and support history.
• Technical data: device and browser information, login times, IP address, security events, request logs, and website usage data.
• Communications: messages, attachments, and call or ticket records you send to sales, support, privacy, or abuse channels.

3. How we use personal data

We collect, use, and disclose personal data for purposes that are reasonably necessary to:

• process orders, provide VPS and network services, administer accounts, and deliver support;
• authenticate users, prevent fraud, secure infrastructure, investigate abuse, and manage incidents;
• process payments, maintain financial records, collect debts, and meet tax or accounting requirements;
• communicate operational notices, service changes, billing information, and requested marketing communications;
• measure and improve website, service, support, and network performance;
• comply with law, lawful requests, sanctions, court orders, and enforcement obligations; and
• establish, exercise, or defend legal claims.

Where consent is required, you may withdraw it with reasonable notice by contacting us. Withdrawal does not affect processing already carried out lawfully and may prevent us from continuing a Service that requires the relevant data.

4. Cookies and similar technologies

We may use essential cookies or local storage for security, sessions, preferences, and core website functions. If analytics or advertising technologies are introduced, we will provide any notice and consent controls required by applicable law. Browser settings may allow you to block or delete cookies, although essential functions may then be unavailable.

When enabled, we use Cloudflare Turnstile on availability checks to help distinguish legitimate visitors from automated abuse. Cloudflare may process technical signals such as your IP address, browser and device characteristics, and the result of the security check on our behalf. For more information, see Cloudflare's Privacy Policy.

5. When we disclose personal data

We may disclose personal data only as reasonably necessary to:

• data centres, network carriers, payment processors, fraud-prevention providers, support tools, professional advisers, and other vendors acting for us;
• regulators, courts, law-enforcement agencies, rights holders, or other parties when required or permitted by law;
• protect customers, infrastructure, the public, or our legal rights; or
• support a proposed merger, financing, reorganisation, or transfer of the platform, subject to appropriate confidentiality and data protection measures.

We do not sell personal data for monetary consideration.

6. International transfers

Our customers, infrastructure, and service providers may be located outside Singapore. Where personal data is transferred overseas, we use contractual, organisational, and technical measures intended to provide a standard of protection comparable to that required under Singapore's Personal Data Protection Act 2012, where applicable.

7. Retention

We retain personal data only for as long as it is reasonably needed for the purposes described in this Policy or for legal, accounting, security, dispute, and enforcement requirements. Retention periods vary by record type. When data is no longer required, we delete it, anonymise it, or remove the means by which it can be associated with an individual, where reasonably practicable.

8. Security and data incidents

We use reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or loss. No internet service is completely secure. If a data breach is legally notifiable, we will notify the Personal Data Protection Commission and affected individuals as required.

9. Your choices and rights

Subject to applicable law and permitted exceptions, you may ask to:

• access personal data we hold about you and information about its use or disclosure;
• correct inaccurate or incomplete personal data;
• withdraw consent for particular collection, use, or disclosure;
• stop direct marketing communications; or
• exercise other mandatory privacy rights that apply in your location.

Send requests to [email protected]. We may need to verify your identity and may charge a reasonable fee for an access request where permitted by law. We will explain any legal reason that prevents us from fulfilling a request.

10. Children's data

The Services are not directed to children and may not be ordered by anyone who cannot legally enter into a binding contract. If you believe a child has provided personal data without appropriate authorisation, contact us so we can review and address it.

11. Policy updates

We may update this Policy to reflect changes in law, services, technology, or data practices. The current version will be published on this page with the updated date. We will provide additional notice where required for material changes.