Legal Documentation

Privacy Policy

How we collect, use and protect personal information

Last updated: 2 November 2026

1. Who We Are

DomainUI provides domain-management, website-building, parking, marketplace, analytics and monetisation tools. For personal information processed for our own purposes, the data controller is DomainUI, Manchester, United Kingdom. You can contact us at [email protected].

This policy applies to domainui.net, DomainUI control panels and applications, and websites or storefronts hosted through the DomainUI platform where DomainUI determines how personal information is used. A DomainUI customer may be a separate controller for information collected through a site they operate. In that situation, contact the site owner about its use of your information.

2. Information We Collect

Account and contact information

We may collect your name, username, email address, telephone number, organisation, website, domains, account preferences and authentication information when you register, contact us or use the platform.

Service and content information

We process the domains, DNS and site settings, templates, content, files, marketplace listings, enquiries, support messages and integration settings that you submit or generate while using DomainUI.

Subscription and payment information

We collect plan, subscription, invoice and transaction information and identifiers supplied by our payment provider. Card payments are processed by Stripe. DomainUI does not receive or store your full card number or security code.

Technical, usage and security information

We may collect IP address, browser and device information, operating system, dates and times, referring pages, pages and features used, diagnostic logs, security events and approximate country or region. We use this information to operate, secure, troubleshoot and improve the service.

Storefront and affiliate analytics

On participating storefronts we may record page views, product impressions and selections of affiliate or marketplace links. An event may include the storefront or domain, page path, product identifier, displayed price, affiliate tracking ID, event type and server time. Where configured, short-lived or pseudonymous visitor and session identifiers may be used to reduce duplicate activity, measure conversions and prevent abuse.

Affiliate links may include the storefront owner's retailer tracking tag, but DomainUI does not place a visitor identity in the destination URL. Non-essential analytics and affiliate-attribution technologies are used only where the required consent has been obtained. Server security logs may be processed separately where necessary to protect the service.

Information from third parties

We may receive information from services you connect to DomainUI, payment providers, domain and hosting providers, analytics services, Amazon and other affiliate networks, search or advertising services, and publicly available sources. The information received depends on the integration and your settings.

3. How and Why We Use Information

We use personal information for the following purposes and lawful bases:

  • To provide the service and manage your account: necessary to perform our contract with you or to take steps at your request before entering a contract.
  • To process subscriptions and maintain financial records: necessary for our contract and to comply with legal obligations.
  • To secure, troubleshoot and improve DomainUI: necessary for our legitimate interests in operating a safe, reliable and useful service. We balance those interests against your rights.
  • To respond to enquiries and support requests: necessary for our contract, to take requested steps, or for our legitimate interests in supporting users.
  • To measure optional analytics and affiliate attribution: based on consent where consent is required.
  • To send marketing: based on consent or another lawful basis permitted by electronic-marketing law. You can opt out at any time.
  • To prevent fraud, abuse and unlawful activity and establish legal claims: necessary for our legitimate interests or to comply with law.

We do not use solely automated decision-making that produces legal or similarly significant effects on individuals unless we tell you separately and provide the protections required by law.

4. Marketing Communications

Creating an account does not by itself require you to receive unrelated marketing. Where we send marketing, we will do so only where the law permits and will provide an unsubscribe method. Service messages about your account, security, billing or material changes are not marketing and may still be sent when necessary.

5. How We Share Information

We may share information with:

  • hosting, infrastructure, security, communications, support and analytics providers;
  • Stripe and other providers involved in billing and fraud prevention;
  • Amazon, affiliate networks, domain providers and other integrations you choose to use;
  • a DomainUI customer or site owner where needed to provide that customer's reports, enquiries or services;
  • professional advisers, insurers, auditors and prospective purchasers of all or part of the business, subject to appropriate confidentiality protections; and
  • courts, regulators, law-enforcement bodies or other parties where disclosure is required by law or necessary to protect rights, safety or the service.

We do not sell personal information or customer lists.

6. International Transfers

Some providers or integrations may process information outside the United Kingdom. Where UK data-protection law requires it, we rely on an adequacy regulation, approved contractual safeguards or another lawful transfer mechanism. You may contact us for information about the safeguards relevant to your data.

7. How Long We Keep Information

We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements. The period depends on the type of record:

  • account and service records are normally kept while the account is active and, where needed for claims or compliance, for up to six years afterwards;
  • invoice and transaction records are normally kept for six years or any longer period required by tax law;
  • routine security and technical logs are normally kept for up to 12 months unless an incident requires longer retention;
  • marketing details are kept until you opt out or they are no longer needed; we may retain a minimal suppression record so we respect your choice;
  • raw analytics and attribution events are kept for the configured reporting and anti-abuse period and may then be deleted or converted into aggregated statistics; and
  • cookie-consent records are kept for as long as needed to demonstrate and respect the current choice.

We may retain information longer where law requires it, a dispute is active, or deletion would undermine security or the rights of another person.

8. Security

We use proportionate technical and organisational measures designed to protect personal information, including access controls, secure transport, monitoring, backups and service-provider controls. No online service is completely secure, so please use a strong, unique password and tell us promptly if you believe your account has been compromised.

9. Your Data-Protection Rights

Depending on the circumstances, you may have the right to access, correct, erase or restrict personal information, receive portable information, and object to processing based on legitimate interests. You have an absolute right to object to direct marketing. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

To exercise a right, email [email protected]. We may need to verify your identity. Rights are not absolute, and an exemption may apply.

If you are unhappy with our response, you may complain to the UK Information Commissioner's Office through ico.org.uk. We would appreciate the opportunity to address your concern first.

10. Cookies and Similar Technologies

We use cookies and similar technologies for security, authentication, preferences and, with the required consent, analytics. See our Cookie Policy for details and controls.

11. Children

DomainUI is intended for adults and business users. We do not knowingly offer accounts to, or collect account information from, children under 18. If you believe a child has provided information to us, please contact us.

12. Third-Party Sites and Retailers

DomainUI sites may link to Amazon and other third parties. DomainUI does not sell, stock, process or fulfil products displayed in affiliate storefronts. Purchases, payment details, delivery, returns and retailer accounts are handled by the retailer under its own terms and privacy notice.

13. Changes to This Policy

We may update this policy when our services, providers or legal obligations change. We will post the revised version here and update the date above. If a change materially affects registered users, we will take reasonable steps to bring it to their attention.

14. Contact Us

For privacy questions, requests or complaints, email [email protected] or use our contact page.

For a complaint about content or intellectual-property use on a DomainUI-hosted domain, email [email protected] with the domain, the material concerned and evidence of your rights.