The full privacy policy is on the site and is the document that counts. This is the short version, for the questions people actually ask. What we collect Account details you give us: name, email, phone, company, billing address, country. Registration details for domains: the registrant contact information the registrar and registry require by rule. Transaction records: orders, invoices, payment summaries and refunds. We do not store full card numbers; card payments are handled by the payment provider. Technical data: IP address, browser and device information, sign-in times and actions, cookie identifiers. Correspondence: tickets and emails with you. Why we use it To provide the service: open accounts, register and renew domains, bill, support you, and warn you before things expire. To meet legal obligations: ICANN and registrar rules require registrant data to be verified and published in the WHOIS or RDDS record; tax and accounting rules require records to be kept. To keep the service safe: detect fraud and abuse, and investigate incidents. To improve it: aggregate usage statistics. For marketing, but only with consent. You can withdraw at any time, and service messages - invoices, expiry warnings, security alerts - are not marketing and cannot be switched off. Who sees it The registrar and registry, because a domain cannot exist without them. The public WHOIS or RDDS record, limited to the fields the rules require. Payment providers, to process payments. Service providers who act on our instructions under confidentiality. Advisers and authorities, where the law requires it. We do not sell personal data. How long we keep it Account data for the life of the account and seven years after, for legal, accounting and dispute reasons. Domain registration data as the registrar rules require, typically two years after the domain expires or transfers away. Transaction records for seven years. Logs for twelve months. Your rights You can ask to see the data we hold about you, ask for corrections, and ask us to stop using your details for marketing. Requests go to the address in the policy, in writing, and we reply within the period stated there. We may ask you to prove who you are, so that the data does not go to somebody else. If you are in the EU or the UK, the policy explains the equivalent rights and the legal bases we rely on.