Privacy Policy

1. Introduction

TLDTrack is a service operated by Fully Coded Solutions Limited ("we", "us", or "our"). This Privacy Policy explains how we collect, use, store, and share your personal data when you use the TLDTrack platform and services (the "Service").

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Fully Coded Solutions Limited acts as the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office under registration number ZA046393.

2. Information We Collect

Information you provide

• • Account information: name, email address, and password when you register
• • Payment information: billing details processed securely through Stripe, we do not store your full card details
• • Domain data: domain names, purchase prices, renewal costs, and other portfolio information you enter
• • Communications: messages you send to us via email or contact forms

Information collected automatically

• • Usage data: pages visited, features used, and interactions within the Service
• • Device information: browser type, operating system, and screen resolution
• • Log data: IP address, access times, and referring URLs

Information from third parties

• • Google OAuth: if you sign in with Google, we receive your name, email address, and profile picture from your Google account
• • Stripe: payment confirmation and subscription status

3. How We Use Your Information

We use your personal data for the following purposes and lawful bases under UK GDPR:

4. Data Sharing

We do not sell your personal data. We share your information only with the following categories of third parties, and only as necessary to provide and support the Service:

• • Payment processor: Stripe, for processing payments securely
• • Cloud infrastructure: hosting and database providers for storing and serving the application
• • Email service provider: for sending transactional and notification emails
• • AI services: domain data (not personal data) may be sent to AI providers for valuation analysis
• • Legal requirements: we may disclose data if required by law, court order, or government request

5. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service. After account deletion, we will delete or anonymise your personal data within 90 days, except where retention is required for legal, accounting, or regulatory purposes.

Payment records may be retained for up to 7 years in accordance with HMRC requirements.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit (TLS/SSL), secure password hashing, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies to operate the Service, including session cookies for authentication and CSRF protection. These cookies are strictly necessary and do not require consent under UK GDPR.

We may also use analytics cookies to understand how the Service is used. Where these are not strictly necessary, we will obtain your consent before setting them.

8. International Data Transfers

Some of our third-party service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the UK Government, to protect your data in accordance with UK GDPR.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• • Right of access: request a copy of the personal data we hold about you
• • Right to rectification: request correction of inaccurate or incomplete data
• • Right to erasure: request deletion of your personal data in certain circumstances
• • Right to restrict processing: request that we limit how we use your data
• • Right to data portability: receive your data in a structured, machine-readable format
• • Right to object: object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: