This policy sets out what you can't do with HostLuma's services. It applies to everyone with a HostLuma account, across Managed WordPress Hosting, AI App Hosting, and domain registration. It's part of our Terms of Service.
Prohibited content and activity
You may not use HostLuma's services to host, transmit, or facilitate:
- Illegal content, or content that facilitates illegal activity, under the laws of England and Wales
- Malware, viruses, exploit code, or tools designed primarily to attack other systems
- Phishing pages, or sites impersonating another person, brand, or organisation to deceive
- Unsolicited bulk email ("spam"), or infrastructure used to send it
- Content that infringes someone else's intellectual property rights
- Child sexual abuse material — this is reported to the relevant authorities immediately and results in immediate account termination without notice, no exceptions
- Material that is defamatory, harassing, or that unlawfully violates another person's privacy
Platform and resource abuse
- Circumventing plan limits. Each hosting plan has defined resource and feature limits. Attempting to bypass, disable, or work around those limits — technically or by misrepresenting your usage — is a breach of these terms.
- Cryptocurrency mining. Running crypto-mining software on shared hosting infrastructure is not permitted; it degrades performance for other customers on shared resources.
- Abusing the GitHub deployment integration. Access granted to a GitHub repository through AI App Hosting must only be used to deploy the application you've configured. Using that access to exfiltrate, mirror, or act on repository contents outside the deployment pipeline is not permitted.
- Credential stuffing / brute-force activity. Using HostLuma infrastructure to run automated login-guessing or credential-testing tools against third-party services is prohibited.
- Excessive automated load. Deliberately generating traffic or load intended to degrade shared infrastructure, whether targeting HostLuma or a third party, is prohibited.
- Reselling without authorisation. You may not resell HostLuma hosting capacity as your own hosting service without a separate agreement with us.
Domains
Domains registered through HostLuma must be used and renewed in line with the relevant registry's own policies (which sit above and outside our control). Providing false registrant information, or using a registered domain for any activity prohibited elsewhere in this policy, is a breach of these terms.
Security research
If you believe you've found a security vulnerability in HostLuma's own platform, we want to know — email support@hostluma.co.uk. Good-faith reporting done without accessing other customers' data or disrupting service will not be treated as a violation of this policy. Do not test for vulnerabilities against other customers' accounts or content.
How we enforce this
Consistent with our Terms of Service, our default response to a violation is suspension, not deletion — restricting access while we investigate or while you fix the issue, without destroying your data. We'll aim to tell you what triggered the suspension and what's needed to resolve it.
Some violations are severe enough to warrant immediate suspension or termination without prior warning — in particular, illegal content, active attacks on other systems, and anything endangering child safety. For less severe or first-time issues, we'll typically give you the chance to correct the problem.
Reporting abuse
If you believe a site or app hosted on HostLuma is violating this policy, email support@hostluma.co.uk with the domain/URL involved and a description of the issue. We investigate all reports.
See also: Terms of ServicePrivacy Policy
