Terms and conditions

The Services are provided by [Company name] ЕООД, a company registered in the Commercial Register of the Republic of Bulgaria under UIC (EIK) [EIK], with its registered office at [Registered address], Bulgaria and VAT number [BG VAT number] (“we”, “us”, “our”).

You can reach us by email at support@dragon.business. Reports of abuse or illegal content go to info@dragon.business (see Reporting illegal content). We provide support by email only.

“You” means the person or organisation that opens an account or places an order. If you accept these terms for an organisation, you confirm that you are authorised to bind it, and you and the organisation are both responsible under them.

To order, you need an account. You must be at least 18 and legally able to enter into contracts. The information you give us must be true and complete, and you must keep it up to date.

Ordering works like this: you choose a plan or a domain, sign in with a code sent to your email, check your order and accept these terms, then pay at the checkout. Until you pay, you can correct any detail by going back and changing it. The contract is concluded in English or Bulgarian.

The descriptions and prices on our website are an invitation to order, not a binding offer. Your order is your offer to us. A contract is formed when your payment succeeds.

We may refuse or cancel any order without giving a reason, including when our automated checks flag it as a risk, when the plan or capacity is unavailable, or when a price or description was shown in error. We may also ask you to verify your identity or your payment first. If we cancel an order you have paid for, we refund that payment and owe you nothing further.

Ticking the box and paying is an electronic statement within the meaning of the Bulgarian Electronic Document and Electronic Trust Services Act, and binds you in the same way as a signature.

The agreement consists of these terms, the description of your plan as shown when you ordered, and the third-party terms these terms refer to. Your own terms of purchase do not apply, even if you send them to us, unless we agree to them in writing.

We keep a record of every order and of the version of these terms accepted with it. The current version is always on this page, and earlier versions are available on request.

Prices are in euro and are shown excluding VAT. VAT and other indirect taxes are calculated and added at checkout where they apply.

Payments are handled by Link, Stripe’s merchant-of-record service, provided by Stripe and its affiliate Sold through Link, LLC. Link charges you, issues the receipt or invoice and collects the VAT, and your statement shows “LINK.COM*”. Your payment to Link settles what you owe us for that order. Link’s Sold through Link Terms govern the payment; these terms govern the Services.

Hosting plans and email are subscriptions, paid in advance for each billing period. A subscription renews automatically at the end of each billing period, and your payment method is charged, until you cancel it.

Domain registrations, transfers and extensions are one-off payments for the whole term. They do not renew automatically (see Domain names).

Payments are non-refundable, except where these terms expressly provide for a refund, where mandatory law requires one, or where Link grants one under its own policy.

If a payment is refunded, reversed or charged back, for whatever reason and by whoever, the Service it paid for ends at that moment, and we may stop it and delete its data without further notice. Disputing a charge for a Service you received is a breach of these terms, and you must reimburse every fee and cost it causes us.

We may change our prices. A new price applies to a running subscription from the first billing period that starts at least 30 days after we email you about it. If you do not accept it, cancel before then. Domain prices can change at any time; an extension costs what is shown when you pay for it.

If a subscription payment fails, we may suspend the Service at any time from that moment, without further notice.

If the subscription then ends unpaid, the Service ends and is handled as described in When a Service ends. Unpaid amounts remain due.

Email has its own rules for a failed payment, set out in Email.

Most Services are set up automatically after payment. Times given on our website, such as “about ten minutes”, are estimates, not commitments.

Plans, sizes and data-centre locations depend on what our providers have available, which can change at any moment. If we cannot set up a Service you have paid for, we refund that payment in full. That refund is your only remedy for a Service that could not be set up.

We choose the hardware, data centre and provider that run each Service, and may move a Service between them at any time. A move can cause a short interruption and a change of IP address. We currently host the Services in the European Union.

The Services are provided “as is” and “as available”. To the fullest extent the law allows, we give no warranty, guarantee or condition of any kind, express or implied, including about availability, uptime, speed, performance, capacity, security, compatibility, fitness for a particular purpose, freedom from errors, interruptions or attacks, or the preservation, integrity or recoverability of data.

We do not offer a service level agreement, and no credits or compensation are due for downtime or slowness.

Descriptions on our website, such as “kept running”, “looked after”, “dedicated”, “guaranteed memory and CPU” or “one-click restore”, describe how a Service is designed and configured. They are not a promise of any particular result. The resource figures for a plan (memory, processor, disk, number of sites) are limits configured for it; on shared plans they are not capacity reserved for you.

We may carry out maintenance, updates, migrations and emergency work at any time, with or without notice, even if it interrupts a Service.

We may change, replace or stop any feature, panel, tool, software or component used to provide the Services.

Where a plan includes backups, we take them on a schedule we choose and keep a limited number for a limited time. We may change the schedule, the number kept and how long they are kept.

Backups are a convenience, not a guarantee. We do not promise that any backup exists, is complete or recent, or can be restored, or that a restore will work.

You must keep your own independent, up-to-date copies of all your Content outside the Services. Within the limits of Limitation of liability, we are not responsible for the loss or corruption of any Content, however it happens.

You are solely responsible for your Content and for everything done through your account and your Services, including by your staff, contractors, customers and visitors.

You must keep passwords, login codes, SSH keys and API tokens secret and secure, and tell us immediately if you suspect someone else has access. We are not responsible for anything done with credentials you shared, lost or failed to protect.

You are responsible for installing, configuring, securing, updating and monitoring everything you put on or run with the Services, including applications, plugins, themes, containers, databases and system settings, and for holding the licences they need.

Where your Content includes personal data, you are responsible for complying with data protection law for it (see Data you host).

You must tell us about problems promptly and help us investigate them. We are not liable for loss you could have avoided by telling us earlier or by taking reasonable steps yourself.

You must answer our questions about an abuse or security complaint promptly, and in any case within 24 hours.

WordPress hosting, dedicated and Economy. We install WordPress for you. We may, but do not have to, update WordPress, PHP and the server software, at times we choose. An update can break themes, plugins or customisations, and keeping them compatible is your responsibility. We do not support, fix or debug your themes, plugins, code or content.

WordPress Economy. Your sites run on a machine shared with other customers, and plan limits are enforced automatically. We may slow down, pause or restrict a site that affects the platform or other customers, and may move sites between machines.

App platform. You receive a dedicated environment and a dashboard for deploying your own applications. Your applications, repositories, builds, dependencies, settings, secrets and databases are your responsibility. We may update the dashboard and the software beneath it, which can change how it works. We do not support, fix or debug your applications.

VPS. A VPS is unmanaged. You have full root access and, with it, full responsibility for the server: its security, operating system, software, updates, firewall rules inside it, users, data and backups. If you lock yourself out, break the system or the server is compromised, recovering it is your job. At most we can rebuild it, which erases everything on it.

Addresses we give you. Any address we assign under our own domains, such as a subdomain for your server or panel, remains ours. We may change or withdraw it, and it ends with the Service.

Mail sent from hosting. Outgoing mail on port 25 is blocked by default on servers, and we do not promise that mail sent from a hosting Service will be delivered or kept out of spam folders. Mailboxes are a separate Service: see Email.

Our access. We may access a Service, including its systems and Content, where reasonably necessary to provide, maintain, secure or investigate the Services, to handle abuse, or where the law requires it.

We are a reseller, not an ICANN-accredited registrar. Domains are registered through our registrar, currently Openprovider (Hosting Concepts B.V., Rotterdam, the Netherlands). By ordering a domain you also agree to the registrar’s Domain Registration Agreement and General Terms and Conditions, to the rules of the registry that runs the extension and, for generic extensions such as .com and .net, to ICANN’s policies, including the Uniform Domain-Name Dispute-Resolution Policy. ICANN summarises your rights and duties as a domain holder in its Registrants’ Benefits and Responsibilities.

The domain is registered in your name and you are its holder. We are recorded as its administrative, technical and billing contact so that we can manage it for you.

You must give, and keep up to date, accurate and complete details for the domain holder, and answer any verification request from the registrar or registry within the time it sets, usually 15 days. Wrong or missing details, or an unanswered request, can lead to the domain being suspended or deleted, without a refund.

A search showing a name as available is not a promise. A domain is yours only once the registry has registered it. If a registration or transfer cannot be completed, we refund that payment, and that is your only remedy.

Domains are not renewed automatically. Extending a domain before it expires is your responsibility. We send reminder emails before and after expiry as a courtesy; if one does not reach you, that does not make us responsible.

Expiry and deletion. When a domain expires it can stop working immediately, along with any website and email that use it. Depending on the registry, there may then be a short grace period in which it can still be extended at the normal price, followed by a redemption period in which restoring it, where possible, costs the registry’s restore fee plus our handling fee, quoted before you pay. After that the registry deletes the domain and anyone can register it. We are not obliged to restore any domain.

We may limit how far ahead a domain can be paid for, currently 4 years.

Moving a domain away. You may move your domain to another provider. When you ask for it in your panel, we provide the transfer code and unlock the domain within 5 calendar days at the latest. Registry rules may prevent a transfer, for example within 60 days of a registration or an earlier transfer, and we may refuse a transfer of a domain whose payment was refunded or charged back.

Moving a domain to us. A transfer depends on the current registrar, the transfer code and the registry. We do not guarantee that it will complete, or when. If it fails, we refund that payment.

You are responsible for making sure the domain and its use do not infringe anyone’s rights. We, the registrar and the registry will follow decisions of courts, authorities and dispute-resolution providers, which can lead to the domain being suspended, transferred or deleted, without a refund.

We host the DNS for your domains on the registrar’s name servers unless you switch to your own. Records you add, change or remove are your responsibility, and changes take time to spread.

Some extensions have extra eligibility rules; for example, .eu requires a holder in the EU or EEA. Meeting them is your responsibility. We may decline to offer any extension or name.

A registration, transfer or extension cannot be undone once the registry has applied it. If a domain payment is nevertheless refunded or charged back, we may delete the domain, let it expire, or block its extension and transfer until the amount is paid.

Email gives you mailboxes on a domain you own, registered with us or elsewhere, with webmail, calendar and contacts. It is provided through our email provider, currently Openprovider, on its servers. Email on a domain is a Service of its own: it does not come with a domain or a hosting plan, and it keeps working if the domain moves to another registrar, as long as its DNS records stay in place.

Mail reaches and leaves your mailboxes only while your domain has the DNS records we give you. If the domain’s DNS is with us, we add them; ordering email for such a domain moves its mail to us and replaces any other provider’s mail records, which the order form asks you to confirm. If its DNS is elsewhere, adding them is your responsibility, and until they are in place mail may not arrive, or may be refused or treated as spam. Before setting up email on a domain registered elsewhere, we may ask you to prove it is yours with a verification record.

Limits. Each mailbox has 15 GB of storage and may send up to 300 emails a day, and all the mailboxes on a domain together up to 5,000 a day. Attachments may be up to 20 MB. Addresses are on a main domain, not on a subdomain, and a domain can have up to 50 mailboxes. Email is for your own correspondence, not for newsletters, marketing or other bulk sending (see Acceptable use). Our provider enforces these limits, may set others, and may change them.

Passwords. You set each mailbox’s password in your panel. We never email it and do not keep it, and keeping it secret is your responsibility. We may block a mailbox that sends spam or is used by someone else, including after a password has been stolen.

Billing. Email is one subscription per domain, priced per mailbox, monthly or yearly as you choose. Adding a mailbox charges for the rest of the current billing period at once. Removing a mailbox deletes it and all its mail immediately; the unused part of its price is credited against your next payment, not paid out. The last mailbox on a domain goes by cancelling.

A failed payment. Instead of Failed payments: the mailboxes keep working for 14 days, and we email you during that time. If the payment is still outstanding after 14 days, every mailbox on the domain is deleted, with all its mail.

Cancelling. The mailboxes keep working until the end of the billing period you have paid for, and you can undo the cancellation in your panel until then. We remind you 7 days before the end. At the end, every mailbox on the domain is deleted with all its mail. If a payment for email is refunded, the mailboxes it paid for are deleted at once.

No restores. Our provider backs up its servers as a whole for its own recovery, not so that single messages or mailboxes can be restored. A deleted message or mailbox cannot be brought back, by us or by our provider. Keep your own copy of anything you cannot lose (see Backups).

You must not use the Services, or allow anyone else to use them, to:

1. break any law or infringe anyone’s rights, including intellectual property, privacy and personality rights;
2. store, send or link to child sexual abuse material, terrorist content, or content that incites violence or hatred;
3. send spam or other unsolicited bulk messages, or host anything advertised through them;
4. phish, defraud, impersonate others, or distribute malware or other harmful code;
5. attack, scan, probe or break into any system or network without its owner’s permission, including denial-of-service attacks and brute-force attempts;
6. run botnets, command-and-control servers, open proxies, open mail relays or Tor exit nodes;
7. mine cryptocurrency or run similar proof-of-work workloads;
8. host or distribute pirated software, media or other infringing material;
9. use resources in a way that harms the stability or performance of our platform, our providers or other customers;
10. get around plan limits, security measures or our checks;
11. resell the Services as a hosting product, except as part of your own design, web or software services to your clients, for whom you remain fully responsible.

If something you run is hacked or infected, you must clean it up promptly. Until then we may restrict it.

We decide, acting reasonably, whether something breaches this section. We do not monitor Content, but we may investigate any complaint or suspicion.

You must reimburse us for every cost, fee, penalty and loss a breach causes us, including charges from our providers, the cost of getting addresses removed from blocklists, and legal costs.

We are a hosting service provider under the EU Digital Services Act (Regulation (EU) 2022/2065). We store Content on your behalf and do not check it in advance. We are not responsible for it unless, once we know it is illegal, we fail to act.

Anyone can report Content they believe is illegal by email to info@dragon.business. A report should explain why the Content is illegal, give its exact location (such as a URL), include the reporter’s name and email address (not needed for reports of child sexual abuse material), and confirm that it is made in good faith. We confirm receipt and tell the reporter what we decided.

We act on reports, on orders from authorities, and on what we find ourselves. These decisions are made by people. Automated tools are used only to enforce plan limits and to check orders for fraud.

If we remove or disable Content, or suspend or end a Service, because of illegal Content or a breach of these terms, we tell you the reasons at the latest when the measure takes effect, unless the law or an authority prevents us. You can reply to that email to contest the decision and we will review it. You can also go to court.

Authorities and users of the Services can contact us at support@dragon.business, in English or Bulgarian. Where we suspect a criminal offence that threatens someone’s life or safety, we inform the competent authorities.

We may suspend or restrict any Service, in whole or in part, immediately and without notice if:

1. you breach these terms, or we reasonably suspect you have;
2. we receive a complaint about abuse, infringement or illegal Content;
3. a payment fails, or is refunded, reversed or charged back;
4. it is needed to protect the Services, our providers, other customers or anyone else, for example from an attack or a compromised server;
5. a provider, registry, authority or court requires it; or
6. our checks flag your order or account as a risk, or you do not complete a verification we asked for.

We tell you the reasons as described in Reporting illegal content or, in other cases, when reasonably possible. We are not required to warn you in advance or to wait for your reply.

Fees remain payable during a suspension caused by you. We are not liable for any loss caused by a suspension under this section.

You may cancel a hosting or email subscription at any time in the billing portal in your panel or in your Link account, and email also on its own page in your panel. The cancellation takes effect at the end of the billing period already paid, and the Service runs until then. The rest of that period is not refunded.

Domains are not cancelled: a domain stays registered until the end of the term paid for. You can move it away at any time, or let it expire.

We may end any Service, or your whole account, with immediate effect by email if you seriously or repeatedly breach these terms, if you breach Acceptable use, or if a reason for suspension under Suspension is not resolved within 7 days. No refund is due in these cases.

We may also end any Service, or stop offering a product, for any other reason by giving 30 days’ notice by email. We then refund the part of any prepaid fee that covers the time after the Service ends, and owe nothing further. For a domain, ending the Service means we stop managing it: the domain remains yours, and we give you its transfer code.

When a Service ends, for whatever reason, your right to use it ends, and we may permanently delete the Service and all its Content, including backups, immediately.

We may, but need not, keep a Service or a copy of it for a time after it ends, and may delete it at any moment.

You are responsible for taking a copy of your Content before a Service ends.

Your Content remains yours. You give us a non-exclusive, worldwide, royalty-free licence to store, copy, back up, transmit, display and otherwise process it as needed to provide the Services, for as long as we do so and as long as backups of it exist.

Our name, brand, website, panel, software and documentation remain ours. While the agreement lasts, you may use the panel and our tools only to use your Services.

You confirm that you hold all the rights needed for your Content and for everything you install and run.

We may use any suggestions or feedback you give us freely and without payment.

For personal data in your Content, you are the controller and we are your processor, or a sub-processor if you are a processor yourself. This section is the data processing agreement required by Article 28 of the General Data Protection Regulation (GDPR).

Subject matter and duration: hosting your Content, for as long as the Service lasts and until it is deleted under When a Service ends. Nature and purpose: storage, hosting, transmission, backup and the other processing needed to provide the Services. Types of personal data and data subjects: whatever you put in your Content, typically about your users, customers, website visitors and staff.

We:

1. process the personal data only on your documented instructions, unless the law requires otherwise. These terms and your use and configuration of the Services are your complete instructions;
2. make sure the people authorised to process it are bound by confidentiality;
3. take security measures appropriate to the Service, including separate machines or isolated accounts for each customer, network firewalls, encrypted administrative access, and access limited to the people who need it;
4. taking into account the nature of the processing, help you, at your cost, with requests from data subjects and with your duties under Articles 32 to 36 of the GDPR;
5. notify you without undue delay after becoming aware of a personal data breach affecting your Content;
6. delete the personal data when the Service ends, as described in When a Service ends, unless the law requires us to keep it;
7. give you the information needed to show compliance with this section, and allow audits by you or an auditor you appoint, at your cost, no more than once a year, with 30 days’ notice and under confidentiality. Written answers to your questions come first.

You give us general authorisation to use sub-processors, such as data-centre, infrastructure, DNS, registrar and email-delivery providers. We bind them to data protection obligations as the GDPR requires. We give you the current list on request and tell you about changes. You may object on reasonable grounds within 14 days; if we cannot address the objection, your remedy is to cancel the Service concerned.

If personal data is transferred outside the European Economic Area, we make sure an appropriate safeguard under Chapter V of the GDPR is in place.

On a VPS and on the app platform you control the system, and the security measures inside it are your responsibility.

How we handle your own personal data as our customer is described in our privacy policy.

We rely on third parties, including data centres, network and infrastructure providers, the registrar and registries, and payment, DNS and email providers, and on third-party software, including open-source software such as WordPress. We do not control them and are not responsible for their acts, failures, outages, changes or terms.

Third-party software comes under its own licence and without any warranty from us.

Nothing in these terms excludes or limits liability that the law does not allow to be excluded or limited, including liability for intent or gross negligence, or for death or personal injury (“mandatory liability”).

Except for mandatory liability, we are not liable, whether in contract, tort or otherwise, for:

1. loss of profit, revenue, business, contracts, customers, goodwill or expected savings;
2. loss, corruption or unavailability of data or Content;
3. downtime or business interruption;
4. the cost of replacement services; or
5. any indirect or consequential loss,

even if we were told it might happen.

Except for mandatory liability, our total liability for all claims together, arising from or connected with the Services or these terms, is limited to what you paid us for the Service concerned in the one month before the event that gave rise to the claim. For a Service paid for a longer term, such as a domain, that amount is one twelfth of its yearly price.

Our liability is reduced to the extent that you caused or contributed to the loss, including by not following these terms or not keeping your own backups.

If you are a consumer, Bulgarian and EU consumer law gives you rights that these terms cannot take away, including the right to Services that conform to the contract. Every clause of these terms applies to you only as far as that law allows.

Right of withdrawal. You may withdraw from a contract within 14 days of its conclusion without giving a reason.

1. Hosting and email. By ticking the box before payment, you ask us to start the Service straight away, within the withdrawal period. If you then withdraw, you pay for the Service provided until you told us, in proportion to the full price.
2. Domains. By ticking the box before payment, you ask us to register, transfer or extend the domain straight away, and acknowledge that you lose your right of withdrawal once we have done so. A domain that has been registered, transferred or extended cannot be returned.
3. To withdraw, send us a clear statement by email to support@dragon.business before the 14 days end. You may use the model form below, but you do not have to.
4. We reimburse what is due within 14 days of receiving your statement, through Link, to the payment method you used. You may also make a cooling-off request to Link under its own terms; if Link refunds you more than is due, you still owe us for the Service already provided.

We change the Services only for valid reasons, such as security, legal requirements, changes by our providers and technical development, and at no extra cost to you. If a change affects your access to or use of a Service more than slightly, we tell you in advance, and you may end the contract free of charge within 30 days of the change and get back the prepaid fee for the unused period.

Complaints. Please contact us first at support@dragon.business; we aim to reply within 14 days. You may also contact the Commission for Consumer Protection (1 Vrabcha Street, floors 3–5, 1000 Sofia, kzp.bg), or use alternative dispute resolution, including the general conciliation commissions at the Commission. For cross-border disputes, the European Consumer Centre in your country can help.

Bulgarian law applies to the contract, but you keep the protection of the mandatory consumer law of the country where you live, and you may bring proceedings in the courts there.

We may change these terms for valid reasons, such as changes in the law, in the Services, in our providers’ terms or in our costs, or to make them clearer. We email you and publish the new version at least 14 days before it applies to you. Changes required by law or for security can apply sooner.

If you do not agree with a change, you may cancel before it applies. If you keep using the Services after that, the new version applies.

Each new order is made under the version in force at the time.

We contact you by email at the address on your account, and in your panel. Keep that address working and check it. For business customers, an email counts as received on the day it is sent.

Send notices to us at support@dragon.business.

Service, security and billing emails are part of the Services; you cannot opt out of them while you have a Service.

We may transfer our rights and obligations under these terms to another company, including as part of a reorganisation or a sale of the business, and will tell you if we do. You may not transfer yours without our written consent.

If any part of these terms is found invalid, the rest remains in force, and the invalid part is replaced by a valid one as close as possible to its purpose.

If we do not enforce a right, or enforce it late, we do not waive it.

Clauses that by their nature continue after the agreement ends, including those on payment, liability, indemnity, data and law, continue to apply.

These terms exist in English and Bulgarian with the same meaning. If the two differ, the Bulgarian version prevails.

These terms, and every contract under them, are governed by Bulgarian law. The UN Convention on Contracts for the International Sale of Goods does not apply.

Disputes with business customers are decided by the competent Bulgarian court for the place of our registered office. For consumers, see If you are a consumer.