This policy explains how PremiumDomain.me handles your data.
1. Information We Collect
- Contact data: Name, email, and message when you use our contact form or submit an offer.
- Order data: Name, email, and payment reference when you purchase a domain.
- Usage data: Pages visited, domain views, browser type, and IP address via server logs.
- Newsletter: Email address when you subscribe.
- Cookies: Session identifiers for security (CSRF protection) and consent preferences.
2. How We Use Your Information
- To respond to your domain enquiries and process offers
- To facilitate domain purchases and transfers
- To send transactional emails (order confirmations, transfer updates)
- To send newsletters if you subscribed (unsubscribe any time)
- To protect against spam and fraud (rate limiting, CSRF, honeypot)
- To comply with legal obligations
3. Payment Processing
Card payments are processed by Stripe, a PCI DSS Level 1 certified payment processor. Your card details are entered directly on Stripe's secure page and never touch our servers. Stripe's Privacy Policy applies to payment data.
4. Cookies
We use only strictly necessary cookies:
- Session cookie: Required for CSRF security protection and math anti-spam. Expires when you close your browser.
- Consent cookie: Remembers your cookie preference for 365 days.
We do not use tracking, advertising, or analytics cookies.
5. Third-Party Services
- Stripe: Secure card payment processing.
- Unstoppable Domains: Domain search and checkout links for our direct inventory.
- Google Fonts & Font Awesome (Cloudflare CDN): Fonts and icons. These services may log your IP.
6. Data Sharing
We never sell your data. We share data only when required by law, or with Stripe solely to process a payment you initiated.
7. Data Retention
Contact messages and offer records: 2 years. Order records: 7 years (legal compliance). Newsletter subscriptions: until you unsubscribe.
8. Your Rights
You have the right to access, correct, or delete your data, and to unsubscribe from marketing emails. Contact us at info@premiumdomain.me.
9. Security
We implement HTTPS, CSRF tokens, parameterised SQL queries, bcrypt password hashing, rate limiting, and input sanitisation.
10. Contact