Lotin Enterprise Privacy Notice
Effective date: October 24, 2026
This privacy notice describes how Lotin Enterprise (Lotin, we, us, or our) handles personal information for lotin.net and for the operation of our subscription website, hosting, email, content-management, domain-administration, support, and related services (the Services).
This notice covers personal information we handle for lotin.net, accounts, billing, and operation of the Services. It also describes the limited way we handle personal information while hosting a Client Site. The Client’s own privacy notice governs the Client’s relationship with its End Users.
1. Definitions
Agreement means the Terms together with the Service Agreement that applies to a Client.
Clients are persons or entities that sign a proposal, order form, or service agreement for the Services, or that purchase or subscribe to the Services.
Visitors are persons who browse lotin.net, submit a form on lotin.net, or create an account on lotin.net. A Visitor who buys Services is also a Client.
End Users are persons who visit or use a website we host for a Client. An End User’s relationship concerning that site’s content, offers, and privacy practices is with the Client.
Client Content means text, images, video, audio, trademarks, and other materials that a Client provides to us or creates through the Services.
Client Site means a website we host for a Client under a Service Agreement.
Service Agreement means a proposal, order form, statement of work, or other written service agreement that incorporates the Terms and that the Client accepts.
lotin.net means our website at https://www.lotin.net and its subdomains, excluding Client Sites.
2. Information we handle
2.1 Information you or a Client give us
We handle information a person or a Client submits to us, including:
- Account, billing, domain, and contact details, and updates to those details
- Messages sent through a form on lotin.net, or sent to us about the Services
- Client Content, which may include personal information the Client chooses to include
- Registrant and administrative contact details when a Service Agreement says we will administer a domain
You must provide accurate account, billing, domain, and contact information and keep it current.
2.2 Information collected while we operate the Services
We collect usage, technical, and security information as we host and protect lotin.net and the Services. That information includes IP address, browser and device type, date and time, pages or resources requested, and logs from hosting, performance monitoring, and security monitoring.
If you sign in, we may store a session or login record in your browser so the account stays signed in. We use that record to operate the account. We do not use it to advertise to you.
2.3 Client Site forms and mailboxes
Ordinary business contact details and messages sent through a contact form are allowed. The Client is responsible for the lawfulness of the information it chooses to collect.
Email that is part of the Services is subject to the provider’s storage, sending, attachment, security, retention, and acceptable-use limits. We process mailbox contents to provide that mailbox. We do not use a Client’s mailbox contents to market to the people who correspond with the Client, or to train a general-purpose model.
Visitors and End Users should not send sensitive information by email to a Client mailbox and expect Lotin to protect it beyond the provider’s ordinary service.
2.4 Payment cards
When a Service Agreement includes ecommerce, cardholder data entered at checkout is collected by Stripe or by the other payment provider named in that agreement. We do not store that checkout cardholder data.
For fees a Client pays us, we keep billing contact details, invoice records, and payment status. Do not send card numbers to us by email, through the content-management system, or through a form we host. If a payment provider collects card details for those fees, that provider’s notice applies to the card data it collects, and we do not store those full card numbers as part of the Services.
A Service Agreement that does not include ecommerce does not authorize collection of cardholder data. A Service Agreement that only describes the Website-as-a-Service bundle does not authorize us to receive card numbers. Adding a store does not, by itself, authorize us to take card numbers.
3. Information the Services do not accept
The Terms do not authorize the categories below. A Service Agreement or proposal that only describes the Website-as-a-Service bundle does not authorize them either. Unless a separate written agreement names a category and states that we will support it, the Client must not submit or collect through the Services:
- Protected health information
- Personal information of children under 13, or a site directed to children
- Government identity numbers, account passwords, or other sensitive data that is regulated by a law we have not agreed in writing to support
4. How we use information
We use the personal information section 2 describes as needed to:
- Provide, secure, and support the Services
- Administer accounts, domains, and mailboxes
- Process payments and keep billing records
- Respond to forms and other messages
- Monitor performance and investigate abuse, fraud, and security incidents
- Comply with law
- Operate our business
We use Client Content only as reasonably necessary to provide, secure, and support that Client’s Services, to make the Client Site available to End Users, and to comply with law. We do not use Client Content to train a general-purpose model or to provide services to another client. After the applicable Service ends, that use continues only for the retention, backup, deletion, and legal-compliance uses section 7 describes.
Unless the Service Agreement says otherwise, the Client grants us a non-exclusive license to use the Client’s name, logos, and screenshots or short descriptions of the public Client Site in our portfolio, proposals, and marketing. We will not state that the Client endorses us beyond the fact that we provided the Services. The Client may opt out of future portfolio use by saying so in the Service Agreement, or later by email to the contact address in section 13. This use survives the end of the Service until the Client opts out. After an opt-out, we will stop new use and remove the Client from our website and from other materials we control within 30 days. Materials already sent outside our control may remain in circulation.
If a Client, Visitor, or End User voluntarily gives us suggestions or feedback, we may use it without restriction or payment. We will not publicly identify the source without permission.
5. Client Sites and End Users
Each party will comply with laws that apply to its own activities.
The Client is responsible for:
- The accuracy and legality of Client Content
- Privacy notices, terms, disclosures, and consent for the Client Site and for the Client’s own marketing
- Deciding whether the Services are appropriate for the information the Client collects
- Responding to individuals who contact the Client about information the Client controls, including End Users
- The content, offers, and claims published on the Client Site
End Users should direct privacy requests about a Client Site to the Client. We will forward a request to the Client when we can tell which Client it concerns and when we are not the right party to answer it.
A privacy policy or other legal-page template we supply is general information for the Client to review. It is not legal advice, and it is not a representation that the Client’s site complies with any law. The Client must review and approve any template before it is published.
6. Who else receives information
We share personal information with:
- Service providers that help us provide the Services, including registrars, hosting providers, certificate authorities, email providers, and payment processors. When a Service Agreement includes ecommerce, Stripe is the usual payment provider. A provider’s own terms and privacy notice apply to information it handles for its own purposes.
- Employees and contractors who need the information to perform the Services. We remain responsible to the Client for the Services those contractors perform for us.
- The Client, when the information relates to that Client’s account, mailbox, domain, or Client Site
- A successor in a merger, reorganization, sale of assets, or transfer of the Services
- A person or authority when we believe disclosure is reasonably necessary to comply with law, protect persons or property, or address fraud or security issues
We may cooperate with lawful government requests and legal process. We may preserve information when we believe that is reasonably necessary for one of those purposes.
lotin.net and a Client Site may rely on or link to video platforms, fonts, plugins, and other third-party services. Those services may collect information under their own notices. A link does not mean we endorse the linked site. End Users deal with the Client, and with any third party the Client chooses, for the Client’s offers.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
7. How long we keep information
We keep account, billing, and related business records while the account is open. After the account closes, we keep those records for as long as tax, accounting, dispute, and other legal duties require.
For 30 days after the Service ends, we may retain Client Content on our systems. During that period we have no obligation to keep the Client Site online or to deliver an export. After that 30-day window we may delete Client Content. We may delete it sooner if the law requires, if the Agreement ended for illegal content, or if the Client asks us in writing to delete it and deletion does not conflict with a legal duty to retain it.
Copies may remain in ordinary backups until those backups are overwritten in the ordinary cycle. Backups are not an archive, are not available for retrieval on request, and are not a backup product the Client can direct.
We do not guarantee that email messages will be retained. The Client must keep its own copies of Client Content and of any messages it needs.
Legal requirements and disputes may require us to keep specific information for longer.
8. Security incidents
We do not guarantee security against every threat. This notice is not a warranty that the Services are secure.
If we discover that Client Content, or personal information collected through a Client Site, has been compromised, we will notify the affected Client without undue delay and no later than 72 hours after that discovery, unless the law requires a different time or forbids notice. Notice to an affected person, the North Carolina Attorney General, or another authority follows the law that applies and is not postponed by the client-notice sentence.
9. Children
lotin.net and the Services are not directed to children under 13. We do not knowingly collect personal information of children under 13 through lotin.net.
A Client must not collect personal information of children under 13 through the Services, and must not operate a site directed to children on the Services, unless a separate written agreement states that we will support that work.
A Visitor or End User must be able to form a contract or must use the site with a parent or guardian who can. The parent or guardian agrees to the Terms on the minor’s behalf.
10. Where we operate
We operate the Services from the United States. We process personal information described in this notice in the United States.
The Client is responsible for deciding whether its Client Site is offered to people in a place with privacy rules beyond those that apply to our own operation, and for the notices and choices that place requires of the Client.
11. Requests
You may ask us to correct account, billing, and contact information we hold about you. Send the request to the contact address in section 13. We will respond as the law that applies to us requires.
A request about a Client Site, or about information the Client collects there, goes to the Client. We forward it when section 5 says we will.
You may ask us to delete personal information we hold about you. Deletion of Client Content follows section 7. We may keep information we are required to keep for tax, accounting, dispute, security, or another legal duty, including copies in ordinary backups until those backups are overwritten.
This notice does not promise a copy of a Client Site, the content-management system, or a structured export of Client Content. We have no obligation to provide that copy or export unless a Service Agreement expressly requires it.
12. Changes to this notice
We may update this notice. We will post the updated notice on lotin.net and change the effective date. We may also email Clients.
For a Client, a material change to the practices the Terms describe follows section 30 of the Terms. It ordinarily takes effect at the Client’s next subscription renewal after notice. It may take effect sooner when law, security, a third-party requirement, or system integrity requires an earlier date. A Client that does not agree may reject the change as section 30 describes.
For a Visitor or an End User, a material change takes effect on the date stated in the updated notice. That date will be at least 15 days after we post the notice, unless an earlier date is required by law, security, a third-party requirement, or system integrity.
13. Contact
Lotin Enterprise
Privacy and legal notices: legal@lotin.net
Website: https://www.lotin.net
Terms: https://www.lotin.net/terms