Hosting that's fair. Safer for everyone.

This Acceptable Use Policy (AUP) explains how LumoHosting services may be used responsibly. It applies to Web Hosting, WordPress Hosting, VPS, dedicated servers, domains, email-related services and other products to the extent LumoHosting controls the relevant service.

This policy works alongside our Terms of Service and Refund & Cancellation Policy. Third-party registries, software vendors and platforms may have additional applicable rules.

Customers must not use LumoHosting services for unlawful conduct, including fraud, identity theft, impersonation, trafficking, distribution of child sexual abuse material, or activities otherwise prohibited by applicable law.

Hosting content does not automatically mean LumoHosting has verified or endorsed it. Customers remain responsible for ensuring they have lawful rights to create, store, publish and distribute their material.

Fake login portals, deceptive payment pages, credential harvesting, fraudulent financial schemes, misleading brand impersonation, and domains or websites created to deceive users are prohibited.

We may review reported pages, associated domain activity, payment and account information, and relevant evidence. A credible, active phishing threat may require prompt isolation while an investigation continues.

Do not knowingly distribute malicious software, botnets, ransomware or exploit kits; run unauthorized vulnerability scanning; launch denial-of-service attacks; attempt to compromise other systems; or operate command-and-control services for abuse.

Security testing is allowed only where you have permission from the affected owner and it is consistent with relevant plan restrictions. Customers should promptly patch vulnerable applications and cooperate in containing compromised websites.

Spam, deceptive sender identities, purchased mailing lists used without valid consent, email bombing, phishing messages and unsolicited bulk messaging that violates applicable laws or provider policies are prohibited.

Customers must maintain consent and unsubscribe practices where required, protect mailing credentials, and promptly address compromised mailboxes. Actual sending limits depend on the purchased plan or third-party email provider; this policy does not invent a universal hourly limit.

Do not use our services to knowingly distribute material in violation of third-party copyright, trademark or other intellectual-property rights. This includes unauthorized copies of software, media and licences.

Reports should identify the affected material, relevant URL or IP address, the right allegedly infringed, supporting information and a reliable way to contact the complainant. We may seek clarification or a response from the customer. We follow applicable legal directions and do not assume every takedown request is valid.

Shared infrastructure is designed for ordinary websites, WordPress installations and similar workloads within purchased plan limits. Customers must not deliberately overload CPU, RAM, storage, I/O, database services, email delivery or network capacity in a way that materially degrades service for others.

Resource allocations and restrictions are those displayed on the relevant product page, order details or plan specification. We may ask customers to optimize scripts, troubleshoot faulty plugins, reduce excessive processes or choose a more suitable plan.

Unless a purchased plan explicitly supports them, shared hosting accounts must not be primarily used as public file dumps, unrelated backup archives, torrent distribution services, open proxies or other workloads that substantially depart from website hosting.

Customers should maintain independent backups of websites, databases and email. Backup frequency and restoration availability depend on actual product commitments; no additional backup or deletion schedule is promised by this policy.

VPS and dedicated-server customers may have wider control over software, ports and server configuration, but remain responsible for complying with law, protecting systems, patching software and preventing abuse originating from their assigned resources.

Running an application on a private server does not grant permission for phishing, unlawful content, unauthorized scanning or attacks. Third-party network policies and any purchased managed-service scope also apply.

Customers must not register or configure domains for fraud, impersonation, malware delivery, spam or other unlawful purposes. Domain registration, transfers, DNS use, SSL certificates and Google Workspace are also subject to relevant registries, certificate authorities and vendors.

LumoHosting may coordinate with those providers or comply with lawful directives where appropriate. We do not promise control over actions taken independently by a registry, issuer or other supplier.

Customers must provide accurate registration and contact information and cooperate with lawful and reasonable security or KYC checks. Impersonation, fabricated identification, multiple accounts created to evade restrictions, and deliberate misrepresentation are prohibited.

Mandatory KYC applies to eligibility for LumoHosting's voluntary 7-day refund guarantee. Requests may remain on hold pending reasonable verification. Identity matching should use reliable evidence and permit review of mistakes; shared addresses, IPs or devices alone do not prove that two accounts belong to one person.

Verification information must be obtained through secure channels and handled under applicable privacy and record-keeping requirements.

We may examine technical indicators, customer explanations, relevant records and legal notices; request remediation; isolate affected applications; limit network access; or suspend or terminate affected services where justified by established serious violations or significant immediate risks.

Where practicable and lawful, customers will receive an explanation and opportunity to respond or fix the problem. Immediate containment can be necessary for active malicious traffic, safety threats, infrastructure integrity or binding legal requirements.

Appropriate reporting, cooperation with competent authorities, log handling and customer-record retention will follow applicable requirements, including CERT-In directions where relevant to our operations.

Customers who believe a report or restriction was mistaken may contact LumoHosting through support with an explanation and supporting information. We will review the available evidence and may revise an action where warranted.

We do not promise a fixed review deadline without an operationally verified support commitment. A review request does not necessarily delay urgent protective measures or legally required actions.

Verified unlawful conduct, fraud or material breaches of this policy can disqualify customers from LumoHosting's voluntary 7-day refund guarantee, after appropriate assessment. A complaint alone is not enough to deny a refund.

Domains, VPS, dedicated servers, email products and SSL certificates are non-refundable under the voluntary policy even though they may be cancelled. For complete conditions, read our Refund & Cancellation Policy.

Statutory rights remain protected. No AUP restriction removes remedies or payment-source refunds required under applicable law.

LumoHosting may update this AUP to reflect service changes, threats or legal obligations, providing any notice required under the applicable agreement or law. The published update date identifies this version.

Related policies: Terms of Service · Refund & Cancellation