Privacy Policy

1. Introduction

Flexiscale Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our domain registration and management services.

We are a data controller under UK GDPR and the Data Protection Act 2018. Our ICO registration number and contact details are available upon request.

2. Information We Collect

2.1 Personal Information

When you register domains or use our services, we collect:

• Name, email address, phone number, and postal address
• Organization details (if applicable)
• Payment information (processed securely by third-party providers)
• Account credentials and authentication data
• Domain registration and contact details

2.2 Technical Information

We automatically collect technical information including:

• IP addresses and device information
• Browser type and version
• Usage patterns and service interactions
• Log files and system performance data
• Cookies and similar tracking technologies

2.3 Communications

We collect information from your communications with us, including support tickets, emails, and feedback.

3. How We Use Your Information

3.1 Service Provision

• Process domain registrations, renewals, and transfers
• Maintain domain registry records and WHOIS information
• Provide DNS and hosting services
• Process payments and manage billing
• Provide customer support and technical assistance

3.2 Legal Requirements

• Comply with Nominet and other registry requirements
• Meet legal and regulatory obligations
• Respond to law enforcement and legal requests
• Prevent fraud and maintain service security

3.3 Service Improvement

• Analyze usage patterns to improve our services
• Send service updates and renewal notifications
• Provide relevant product information and offers
• Conduct security monitoring and threat detection

4. Legal Basis for Processing

We process your personal data based on:

• Contract performance: To provide domain registration services
• Legal obligations: To comply with registry and regulatory requirements
• Legitimate interests: For service improvement and fraud prevention
• Consent: For marketing communications (where required)

5. Information Sharing

5.1 Registry Authorities

We share registration data with domain registries (including Nominet) as required for domain registration and WHOIS publication.

5.2 Service Providers

We work with trusted third-party providers for:

• Payment processing and fraud prevention
• Infrastructure hosting and security services
• Customer support and communication tools
• Analytics and performance monitoring

5.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and the safety of our users.

6. Data Security

We implement comprehensive security measures to protect your data:

• Encryption in transit and at rest
• Access controls and authentication systems
• Regular security audits and monitoring
• Secure data centers with physical protection
• Staff training on data protection practices
• Incident response and breach notification procedures

7. Data Retention

We retain personal data for as long as necessary to:

• Provide ongoing services and support
• Meet legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records as required by law

Domain registration data may be retained as required by registry policies, typically for several years after domain expiration.

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, please contact us using the details below. We will respond within one month of receiving your request.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain user sessions and authentication
• Improve website performance and user experience
• Analyze usage patterns and service performance
• Provide personalized content and recommendations

You can control cookie settings through your browser preferences. Disabling certain cookies may affect service functionality.

10. International Transfers

Some of our service providers may be located outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Adequacy decisions by the UK government
• Certification schemes and codes of conduct

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of significant changes via email or website notification.

12. Contact Information

For privacy-related questions or to exercise your rights, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.