Privacy Policy

Last updated: 11 August 2026

This policy explains what personal data Business Domains ("we", "us") collects when you use this website or submit a brokerage or valuation request, why we collect it, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Who is responsible for your data

Business Domains is the data controller for the personal data described here. For any privacy question or request, contact us at privacy@businessdomains.com.

What we collect

• Brokerage requests: your name, email address, the domain name you are interested in, your budget and any remarks you add.
• Valuation requests: your name, email address and the domain name to be appraised.
• Correspondence: messages you send us and our replies.
• Technical data: standard server logs generated when a page is served (IP address, timestamp, user agent), used for security and reliability.

We do not ask for special-category data and we do not use automated decision-making or profiling.

Why we use it, and our legal basis

• To answer your request and deliver the service — legal basis: steps taken at your request prior to entering a contract, and performance of a contract.
• To operate and secure the website — legal basis: our legitimate interest in a working, non-abused service.
• To meet accounting and legal obligations — legal basis: legal obligation.

We do not send marketing email unless you separately ask us to, and we never sell or rent your data.

Confidentiality in brokerage

When we approach a domain owner on your behalf, we do so anonymously. Your identity is not disclosed to the other side unless you instruct us to disclose it, or a signed transfer or escrow process requires it.

Who processes your data

We use a small number of service providers acting as processors under contract: our website and database hosting provider, our email provider, and — only where a transaction proceeds — a licensed escrow service. Providers may process data outside the EEA; in that case transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Inquiries are kept for as long as needed to handle the request and for up to 24 months afterwards so we can pick up a conversation you resume. Records tied to a completed transaction are kept for the statutory accounting period. Records are deleted or anonymised after that, and sooner on request where no legal obligation requires retention.

Security

Data is transmitted over TLS and stored in an access-controlled database. Access to inquiries is restricted to authenticated administrators through a private admin area.

Your GDPR rights

• Access — get a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to pause processing while a question is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing rests on consent, withdraw it at any time.

Write to privacy@businessdomains.com and we will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

Children

This service is intended for businesses and adults; we do not knowingly collect data from children.

Changes

If this policy changes materially we will update the date at the top of this page and, where appropriate, notify you by email.