Privacy Policy

1. Introduction

TLDTrack is a service operated by Fully Coded Solutions Limited ("we", "us", or "our"). This Privacy Policy explains how we collect, use, store, and share your personal data when you use the TLDTrack platform and services (the "Service").

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Fully Coded Solutions Limited acts as the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office under registration number ZA046393.

2. Information We Collect

Information you provide

• • Account information: name, email address, and password when you register
• • Payment information: billing details processed securely through Stripe, we do not store your full card details
• • Domain data: domain names, purchase prices, renewal costs, and other portfolio information you enter
• • Communications: messages you send to us via email or contact forms

Information collected automatically

• • Usage data: pages visited, features used, and interactions within the Service
• • Device information: browser type, operating system, and screen resolution
• • Log data: IP address, access times, and referring URLs

Information from third parties

• • Google OAuth: if you sign in with Google, we receive your name, email address, and profile picture from your Google account
• • Stripe: payment confirmation and subscription status

3. How We Use Your Information

We use your personal data for the following purposes and lawful bases under UK GDPR:

4. Data Sharing

We do not sell your personal data. We share your information only with the following categories of third parties, and only as necessary to provide and support the Service:

• • Payment processor: Stripe, for processing payments securely
• • Cloud infrastructure: hosting and database providers for storing and serving the application
• • Email service provider: for sending transactional and notification emails
• • SMS provider: Amazon Web Services, only to deliver the text messages you ask for
• • AI services: domain data (not personal data) may be sent to AI providers for valuation analysis
• • Legal requirements: we may disclose data if required by law, court order, or government request

4a. Text Messages (SMS)

If you choose to receive sign-in codes or alerts by text message, we use your mobile number only to send those messages. We do not sell, rent or share mobile numbers or SMS consent with third parties or affiliates for marketing or promotional purposes.

Message frequency varies with how often you sign in and the alerts you set up. Message and data rates may apply. Reply STOP to stop receiving texts, or HELP for help, or contact [email protected]. You can switch sign-in codes back to email at any time in your account settings.

5. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service. After account deletion, we will delete or anonymise your personal data within 90 days, except where retention is required for legal, accounting, or regulatory purposes.

Payment records may be retained for up to 7 years in accordance with HMRC requirements.

5a. Website Reports for Businesses We Contact

Before contacting a business, we sometimes prepare a report on its website to show what TLDTrack would watch for it. To do this we:

• • Check the public website from the outside, the way any visitor's browser would: uptime and response times, the SSL certificate, DNS and email records, page speed, accessibility, the technology the site visibly uses, and a weekly screenshot of the homepage. We do not log in, submit forms or test for vulnerabilities on a site whose owner has not asked us to.
• • Hold the business details needed to send the report: the business name, website, town and county and, where it is published, a business email address, phone number, contact name, and their role or LinkedIn page. We take these from publicly available business listings and websites. We also keep a record of our correspondence with the business.
• • Publish the report at a private link that is not listed anywhere and is hidden from search engines. We record when the report is opened and whether it was opened from the QR code on our letter, with the type of device. We do not record who opened it, and we do not store their IP address with this record.

We rely on legitimate interests (UK GDPR Article 6(1)(f)) for this: showing a business real information about its own website and offering a service that helps with it. Monitoring stops 31 days after we send the report, or sooner if you ask.

You can ask us to stop and to delete the report and the details we hold at any time, using the link on the report or by emailing [email protected]. We will do it within one working day. If you claim the report, it moves into your own TLDTrack account and the rest of this policy applies.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit (TLS/SSL), secure password hashing, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies to operate the Service, including session cookies for authentication and CSRF protection. These cookies are strictly necessary and do not require consent under UK GDPR.

We may also use analytics cookies to understand how the Service is used. Where these are not strictly necessary, we will obtain your consent before setting them.

8. International Data Transfers

Some of our third-party service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the UK Government, to protect your data in accordance with UK GDPR.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• • Right of access: request a copy of the personal data we hold about you
• • Right to rectification: request correction of inaccurate or incomplete data
• • Right to erasure: request deletion of your personal data in certain circumstances
• • Right to restrict processing: request that we limit how we use your data
• • Right to data portability: receive your data in a structured, machine-readable format
• • Right to object: object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: