Privacy Policy

Who we are

Templeton Edge Limited, company number 817727, Dalkey, Dublin, Ireland, A96 A8D5. Under the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988 to 2018, we are the “controller” of the data described here. Our regulator is the Data Protection Commission in Ireland.

What we collect, and how

Most of what we hold comes directly from you: when you make an offer or enquiry, ask us to find or value a domain, or contact us for help. Sometimes it comes from someone acting for you, such as a colleague or broker. If we are trying to buy a domain you already own, we may find your details in the public registry (WHOIS/RDAP) record.

The information itself is ordinary business contact data:

• • Your name, email address, phone number and postal address
• • The registrant details a registrar needs to put a domain in your name, and for .eu names, the country you live in or your business is based in
• • Our correspondence with you, including offers and negotiations
• • Bank details if we are paying you for a domain or sending a refund
• • Technical details such as your IP address and browser, which the website needs to stay secure

If you pay us by card, Stripe handles the payment on a secure form. We never see or store your full card number.

Why we use it

Only to do what you have asked us to do: answer your enquiry, agree a sale, get a domain transferred, invoice a service and provide support. In GDPR terms, that is performing our contract with you (Article 6(1)(b)). We also have a legitimate interest in taking payment, preventing fraud and keeping the website secure (Article 6(1)(f)), and a legal duty to keep tax and accounting records (Article 6(1)(c)).

If you don’t give us the information a registrar needs, we won’t be able to complete a transfer.

Who we share it with

We do not sell your data, and we do not use it for marketing. We share it only where the job requires:

• • Stripe Payments Europe, Limited (Dublin) processes card payments made to us.
• • Registrar marketplaces – currently GoDaddy.com, LLC and Spaceship, Inc. – hold our domains and run the checkout and transfer when you buy. When you follow a checkout link from our site, you are dealing with that company directly under its own terms and privacy policy. Their policies: GoDaddy · Spaceship.
• • Registries – EURid (.eu), the .com registry and Nominet (.uk) – receive registrant details from the registrar, not from us.
• • Our hosting provider stores our website and database on servers in the European Economic Area (Netherlands).
• • Google Ireland Limited sends our transactional emails (Google Workspace) and protects our forms from bots (reCAPTCHA).
• • Our accountants, advisers and public authorities, where the law requires.

Our service providers work for us under written contracts and may use your data only for the job we give them. Because registrar marketplaces are in the United States and Nominet is in the United Kingdom, some data leaves the EEA; those transfers rely on EU adequacy decisions or Standard Contractual Clauses. Ask us if you’d like a copy.

How long we keep it

As long as we need it and no longer. Enquiry details until the matter is closed or you ask us to delete them. Sales, invoices and payment records for six years after the end of the financial year, because Irish tax law requires it.

Your rights

You can ask us to:

• • show you the personal data we hold about you
• • correct anything that is wrong or incomplete
• • delete it, where we no longer have a good reason to keep it
• • stop or restrict how we use it
• • give it to you in a portable format
• • stop processing it on legitimate-interest grounds (we never use it for marketing)

Email [email protected] with the subject Data Request and we will reply within one month. These rights have some legal exceptions; the Data Protection Commission explains them at dataprotection.ie.

Not happy?

Tell us first and we will try to put it right. You can also complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 (dataprotection.ie), or if you are in the UK, to the Information Commissioner’s Office.