Privacy policy
How Corporate Domain Registry collects, uses, shares, and retains personal information through its website, orders, support, and domain-management services.
Effective date:
This Privacy Policy explains how Corporate Domain Registry (“CDR,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information through CorporateDomainRegistry.com, customer support, orders, and domain-management services.
1. Information we collect
- Account and contact data, such as name, organization, postal address, email address, telephone number, and login or authentication information.
- Domain and service data, such as requested domains, registrant data required by the applicable top-level domain, nameservers, DNS settings, renewal preferences, transfer information, support communications, and authorization records.
- Transaction data, such as products purchased, invoices, payment status, currency, and fraud-screening results. Full payment-card details are generally processed by our payment provider rather than stored by us.
- Technical and usage data, such as IP address, browser and device information, timestamps, referring pages, site activity, cookies, and security logs.
- Marketing preferences and information you provide when requesting an audit, quotation, or other communication.
2. How we use information
- Create and administer accounts; process registrations, transfers, renewals, DNS changes, and support requests.
- Verify identity and authority; prevent fraud, abuse, unauthorized transfers, and security incidents.
- Process payments, issue records, communicate service notices, and administer renewals.
- Comply with registrar, registry, ICANN, CIRA, legal, tax, and regulatory requirements.
- Operate, secure, troubleshoot, and improve our website and services.
- Send marketing communications where permitted, subject to available consent and opt-out rights.
3. Registrar and registry data sharing
Domain services require us to provide necessary registration data to the applicable accredited registrar, registry operator, escrow provider, verification service, and governing body. The required data varies by top-level domain. Public registration-data services may publish or redact information in accordance with applicable policy and law. We do not promise that all registration data will be public or private in every jurisdiction or extension.
4. Other disclosures
We may disclose personal information to payment processors, hosting and security vendors, communications providers, professional advisers, and other suppliers that help deliver the Services; to a buyer or successor in a bona fide corporate transaction; to protect customers, the public, our rights, or the integrity of the Services; or where required or permitted by law, court order, regulatory process, registrar policy, or registry policy. We do not sell personal information for money.
6. Cross-border processing
Our service providers, registrars, registries, and technical systems may process information in Canada, the United States, or other countries. Information may therefore be subject to lawful access by authorities in those jurisdictions. We use contractual and operational measures appropriate to the nature of the information and applicable requirements.
7. Retention
We retain information for as long as reasonably necessary to provide the Services, maintain registration and transaction records, resolve disputes, prevent fraud and abuse, and satisfy contractual, legal, tax, and compliance obligations. Retention periods vary according to the type of record and applicable registrar or registry requirements.
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including access controls and encrypted transmission where appropriate. No system is completely secure. Customers must protect account credentials, use multifactor authentication when offered, and promptly report suspected unauthorized access.
9. Your choices and privacy rights
Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or information about our handling of your personal information, and to withdraw consent where processing is based on consent. Some requests may be limited by identity-verification, registrar, registry, legal, security, or recordkeeping requirements. You may unsubscribe from marketing messages using the provided mechanism, but operational service communications will continue where necessary.
10. Children
The Services are intended for adults and businesses and are not directed to children under 18. We do not knowingly offer domain-registration accounts directly to children.
11. External links
Our website may link to third-party websites. Their privacy practices are governed by their own notices, and we are not responsible for those practices.
12. Changes and contact
We may revise this policy as our Services, suppliers, or legal obligations change. The current version will be posted with its effective date. Questions or privacy requests may be sent to privacy@corporatedomainregistry.com. We may request information needed to verify identity and authority before fulfilling a request.