[Jyaif]

By that logic you must self-host any landing page, otherwise you are leaking IP addresses to whoever is hosting your website.

[fooblat]

We have a contract with our hosting provider that specifies what data they may collect, the limited purposes for which they can use it, and when it must be deleted.

This is called a Data Processing Agreement and is also part of GDPR compliance.

We have the same thing in place with all 3rd party vendors.