At Search.Initiative Registrar, protecting your privacy is one of our highest priorities. We understand that registering and managing domains requires sharing personal information, and we are committed to ensuring that your data is handled with integrity, security, and full transparency. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, register a domain, or use our related services. By accessing or using our platform, you agree to this Privacy Policy and our commitment to data protection under GDPR and other applicable regulations.

Purpose of This Policy

The purpose of this Privacy Policy is to clearly explain:

• What information we collect from you.
• How we use and protect that information.
• Your rights and choices regarding your data.
• How to contact us about privacy concerns.
  We believe that data privacy is a shared responsibility. This document outlines how we fulfill our obligations and how you can exercise your rights as a customer.

Information We Collect

When you register a domain or use any of our services, we may collect the following types of information:

Personal Information

• Name, company name, and contact person.
• Email address, phone number, and physical address.
• Payment details and billing information (processed through secure third-party gateways).

Technical Data

• IP address, browser type, device information, and cookies (used to improve performance and security).

Domain Registration Data

• Registrant name, admin contact, and technical contact information, as required by ICANN and local registries.
  We only collect the minimum data necessary to provide reliable and secure services.

How We Use Your Information

Your personal data is used exclusively for legitimate business purposes, including:

• Processing domain registrations, renewals, and transfers.
• Providing customer support and account management.
• Complying with legal and registry requirements (ICANN, Nominet, etc.).
• Preventing fraud, abuse, and unauthorized access.
• Sending essential notifications (renewal reminders, policy updates, or security alerts).
  We do not sell, rent, or share your data with advertisers or unrelated third parties.

Legal Basis for Data Processing

Search.Initiative Registrar processes data based on:

• Contractual necessity – data required to provide domain registration and support services.
• Legal obligations – compliance with registry and governmental rules.
• Legitimate interests – improving security, detecting abuse, and enhancing service performance.
• Consent – for optional communications such as newsletters or promotional updates.
  You can withdraw your consent for non-essential communications at any time.

Data Retention

We retain your information only for as long as necessary:

• Account and registration data are stored while your domains remain active.
• After closure or expiry, data may be retained for a limited period (typically 2 years) to comply with legal, financial, or audit requirements.
• Once the retention period ends, data is securely deleted or anonymized.

Sharing and Disclosure of Data

To deliver our services effectively, certain information must be shared with trusted third parties, such as:

• Registry operators (e.g., ICANN, Nominet, Verisign, EURid) — for domain registration and compliance.
• Payment processors — for secure billing transactions.
• Data centers and infrastructure providers — for hosting and system security.
• Legal authorities — only when required by law or court order.
  All third parties are contractually bound to handle your data responsibly and comply with privacy laws.

Data Security

We take data security seriously and use advanced technologies to protect your information.
Our security measures include:

• Encryption: All personal and payment data transmitted via HTTPS.
• Access controls: Strict internal permissions for authorized staff only.
• Monitoring: 24/7 system tracking for suspicious activity.
• Regular audits: Periodic security reviews and vulnerability assessments.
  If a data breach occurs, affected users will be notified promptly in accordance with GDPR requirements.

Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and improve functionality.
Cookies allow us to:

• Remember login details and language preferences.
• Analyze website performance and user behavior.
• Maintain session security during your visit.
  You can manage or disable cookies in your browser settings. However, doing so may limit some site features. For detailed information, please refer to our Cookie Policy.

Your Rights Under GDPR

As a customer, you have the following rights regarding your personal data:

• Access: Request a copy of your data.
• Correction: Update inaccurate or incomplete details.
• Deletion: Request removal of data where legally permissible.
• Restriction: Limit processing in certain cases.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Refuse certain types of processing, such as marketing.
  To exercise these rights, contact our Data Protection Officer (DPO) via the details below. We respond to all privacy requests within 30 days, as required by GDPR.

International Data Transfers

Search.Initiative Registrar operates globally and may store data on servers located in different jurisdictions. Whenever data is transferred outside the UK or EU, we ensure that:

• Transfers comply with the UK GDPR and EU Standard Contractual Clauses (SCCs).
• Partners maintain equivalent privacy and security standards.
• No cross-border transfer occurs without adequate protection.

Children’s Privacy

Our services are intended for individuals aged 18 and older. We do not knowingly collect or process data from minors. If we become aware of such activity, the information will be deleted immediately.

Third-Party Links

Our website may contain links to external resources. Search.Initiative Registrar is not responsible for the privacy practices or content of third-party websites. We encourage you to review their privacy statements before sharing any information.