Privacy Policy

1. Information We Collect

We collect information to provide better services to our users. The types of information we collect include:

1.1 Personal Information

When you use our services, we may collect:

• Name and contact information (email, phone number)
• Billing and payment information
• Account credentials and preferences
• Communication preferences and history

1.2 Technical Information

• IP address and device information
• Browser type and version
• Usage patterns and service interactions
• Cookies and similar tracking technologies

1.3 Domain Query Data

• Domain names searched or checked
• Query timestamps and frequency
• API usage and access patterns

2. How We Use Your Information

We use the collected information for the following purposes:

3. Information Sharing and Disclosure

We may share your information in the following limited circumstances:

3.1 Service Providers

We work with trusted third-party service providers who assist us in:

• Payment processing (Stripe, PayPal)
• Email communications (Mailchimp, SendGrid)
• Analytics and monitoring (Google Analytics)
• Customer support tools
• Cloud hosting and infrastructure

3.2 Legal Requirements

We may disclose information when required by law, such as:

• In response to valid legal requests
• To protect our rights and property
• To prevent fraud or illegal activity
• For national security purposes

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

4. Data Security

We implement comprehensive security measures to protect your information:

4.1 Technical Safeguards

• SSL/TLS encryption for data transmission
• AES-256 encryption for data at rest
• Secure cloud infrastructure with redundancy
• Regular security audits and penetration testing
• Multi-factor authentication for staff access

4.2 Organisational Measures

• Staff training on data protection principles
• Access controls and principle of least privilege
• Regular backup and disaster recovery procedures
• Incident response and breach notification protocols

5. Your Rights and Choices

Under UK GDPR, you have the following rights regarding your personal data:

5.1 Data Subject Rights

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing

5.2 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to your request within 30 days.

5.3 Marketing Communications

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in our emails
• Updating your preferences in your account dashboard
• Contacting our support team

6. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

6.1 Types of Cookies

6.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect site functionality.

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

7.1 Retention Periods

• Account Data: For the duration of your account plus 2 years
• Transaction Records: 7 years for tax and accounting purposes
• Support Communications: 3 years for quality assurance
• Analytics Data: 26 months (anonymised after 14 months)
• Marketing Data: Until you withdraw consent

7.2 Data Deletion

When data is no longer needed, we securely delete or anonymise it in accordance with industry standards and legal requirements.

8. International Transfers

While we primarily process data within the UK, some of our service providers may be located outside the UK/EEA. When we transfer data internationally, we ensure:

• Adequate protection through adequacy decisions
• Standard Contractual Clauses where applicable
• Regular assessment of transfer mechanisms
• Additional safeguards as required by law

9. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications where applicable