Privacy Policy

Last updated: January 2026

Your privacy matters. Privy Domains GmbH ("we", "us", "our") keeps the data you share with us to the minimum needed to register and manage your domains, and handles it in line with the GDPR. This policy explains, in plain terms, what personal data we collect, why we use it, how long we keep it, who we share it with, and the rights you can exercise at any time.

1. Data Controller

Privy Domains GmbH
Landwehrstraße 37
80336 München, Germany
Email: [email protected]

2. Data We Collect

We collect information necessary to provide domain registration services:

  • Account data: Name, email, password (hashed)
  • Billing data: Payment information, billing address
  • Domain data: Registrant contact information as required by ICANN
  • Technical data: IP address, browser type, access logs

3. How We Use Your Data

We use personal data to:

  • Provide and manage domain registration services
  • Process payments and prevent fraud
  • Communicate service updates and support
  • Comply with legal obligations (ICANN, law enforcement)

4. Legal Basis (GDPR)

We process data based on: contractual necessity, legal obligations, legitimate interests, and your consent where applicable.

5. Data Sharing

We share data only with: domain registries (as required), payment processors, and authorities (when legally required). We never sell your data.

6. Data Retention

We retain data for the duration of our business relationship plus 10 years for legal compliance.

7. Your Rights

Under GDPR, you have rights to: access, rectification, erasure, restriction, portability, and objection. Contact [email protected] to exercise these rights.

8. Security

We implement encryption, access controls, and security monitoring to protect your data.

9. Changes

We may update this policy. Material changes will be communicated via email.

Questions or requests

To exercise your data rights or ask how your information is handled, email [email protected] or reach us through our contact page.

Related pages