Your privacy is very important to us, and we are committed to safeguarding the information you entrust to us. This Privacy Policy explains what personal data Dotyourdomain LLC ("DotYourDomain", "we", "us") collects when you visit our website, create an account or use our domain, hosting and SSL services, how we use it, and the choices and rights you have.
1. Who is responsible for your data
Dotyourdomain LLC is the controller of the personal data described in this policy. You can contact us about privacy at any time by opening a ticket and selecting or mentioning "Privacy".
When you host a website or email with us, you decide what personal data is stored in your hosting account. For that data you are the controller and we act as your processor, handling it only to provide the service.
2. Information we collect
Information you give us
- Account and contact details: name, company, postal address, email address, telephone number and login credentials.
- Order and billing details: the services you order, invoices, payment history and tax information. Card details are handled by our payment processors; we do not store full card numbers.
- Domain registration data: the registrant and contact details required by the registry for the domain you register.
- Certificate data: the organization and contact details required by the certificate authority to validate and issue an SSL certificate.
- Support communications: the content of tickets and other messages you send us.
Information collected automatically
- Usage and log data: IP address, browser type, pages viewed, the site you came from, and the date and time of your visit and of logins to your account.
- Cookies: see Cookies below.
3. How we use information and our legal bases
- To provide the Services – creating your account, registering domains, setting up hosting, issuing certificates, billing and support. Legal basis: performance of our contract with you.
- To send service messages – invoices, renewal and expiry reminders, security and maintenance notices. Legal basis: contract and legitimate interests.
- To keep our systems secure – detecting and preventing fraud, abuse and attacks. Legal basis: legitimate interests.
- To improve our website and services – understanding how they are used, in aggregated form. Legal basis: legitimate interests.
- To tell you about our own products and services – you can opt out at any time, and where the law requires consent we ask for it first. Legal basis: legitimate interests or consent.
- To comply with the law – tax and accounting records, registry and ICANN requirements, and lawful requests from authorities. Legal basis: legal obligation.
We do not use your personal data for automated decisions that have legal or similarly significant effects on you.
4. When we share information
We do not sell your personal data, and we do not sell or rent our customer database for marketing or mailing lists. We share personal data only as follows:
- Domain registries, registrars and ICANN-mandated escrow providers – registration data needed to register and maintain your domain. Depending on the registry's rules, some of this data may be published in the public registration directory (WHOIS/RDAP).
- Certificate authorities – data needed to validate and issue SSL certificates.
- Payment processors – to take payment and prevent fraud.
- Infrastructure and service providers – data centre, email delivery, support and billing software providers who process data on our instructions under contract.
- Authorities and others where the law requires it – when we believe in good faith that disclosure is required by law, or necessary to protect our rights, our customers or the public.
- Business transfers – if our business is merged or sold, subject to the same protections.
We do not give your personal data to other business partners for their own purposes without your prior consent.
5. Cookies
Our website and Client Area use cookies that are necessary for the service to work, for example to keep you logged in, to remember your cart and currency, and to protect forms against misuse. These cannot be switched off in our systems.
If we use analytics or other non-essential cookies, we will ask for your consent first where the law requires it, and you can withdraw consent at any time. You can also block or delete cookies in your browser settings, although parts of the site may then not work.
6. How long we keep information
We keep account and service data for as long as you are a customer. After a service ends, hosting content is deleted as described in the Terms of Service. We keep invoices and transaction records for the period required by tax and accounting law, domain registration records for the period required by registry and ICANN policy, and support and log data for as long as needed for security and to handle disputes. Data is then deleted or anonymized.
7. Security
We use technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access controls, and limiting access to staff who need it. No system is completely secure; if a breach affects your personal data we will notify you and the relevant authority where the law requires. Please use a strong, unique password and keep it confidential.
8. International transfers
We and our providers, including registries and certificate authorities, may process personal data in countries other than the one where you live. Where data is transferred from the European Economic Area, the United Kingdom or Switzerland to a country that is not recognized as providing adequate protection, we rely on appropriate safeguards such as standard contractual clauses.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct data that is inaccurate or incomplete (most account details can be updated in the Client Area);
- ask us to delete your data, or to restrict how we use it;
- object to processing based on legitimate interests, and to direct marketing at any time;
- receive your data in a portable format;
- withdraw consent where we rely on it; and
- lodge a complaint with your local data protection authority.
Residents of some U.S. states, including California, have similar rights to know, delete and correct personal information and not to be discriminated against for exercising them. We do not sell or share personal information for cross-context behavioural advertising.
To exercise your rights, open a ticket. We may need to verify your identity, and we will reply within the time required by law. Some data must be kept despite a deletion request, for example invoices and domain registration records.
10. Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new effective date and, for significant changes, notify customers by email or in the Client Area.
12. Contact
Dotyourdomain LLC – for any privacy question or request, please open a ticket with our support team.