Domain purchase privacy notice

Who is responsible

Serallo Domains Ltd operates DomainSabre and is responsible for the customer information it handles for this service. Company number: 17217704, registered in England and Wales. Registered office: Apt 2, 11a West Cliff Road, Bournemouth, Dorset, BH2 5EP, United Kingdom. For privacy questions or requests, email tom@serallo.co.uk.

What we collect

We handle the domain names you search for or add to a basket; the registrant's legal name, optional organisation and company number, email, telephone number and postal address; acceptance of the registration terms and request for immediate performance; and order, payment, registration and refund references and statuses. We also use essential session and security information to protect forms and control access to private order pages.

Do not put card details into the registration form or send them to us. Stripe collects card information on its own hosted checkout. Our application receives payment references and results, not the full card number or card security code.

Why we use it

We use this information to check availability, keep your basket, process your requested purchase, register the domain to the intended owner, send service messages, handle refunds, provide management and transfer support, and answer enquiries. These activities are necessary to take steps at your request and perform the registration contract.

We also use relevant records to meet accounting and other legal obligations, and to protect the service against fraud, unauthorised access and duplicate payments or registrations. Security and dispute handling rely on our legitimate interest in running a reliable service, balanced against your rights. Optional marketing has a separate choice; purchasing a domain does not subscribe you.

Who receives information

Nominet: we submit the registrant and contact information needed to create and maintain your domain registration. Nominet operates the .UK registry and handles information under its own policies. Its verification, disclosure and registry requirements apply. See Nominet's privacy notice.

Stripe: we send the order information and contact information needed to create the hosted card checkout and process payment or refunds. Stripe handles payment information under its own policies. See Stripe's privacy policy.

Serallo domain manager: after registration is confirmed, we use the supplied registrant contact details, confirmed domain registration and payment references to prepare domain management access. This includes creating an account where appropriate, keeping the registration details needed for support, linking the confirmed domain and sending secure account setup or access instructions. Existing verified customer accounts keep their current login and security settings. A purchase does not automatically verify a new account's email address.

Service providers supporting hosting, essential communications and technical operations may process information as needed to deliver those services. We may also disclose necessary records where required by law, to resolve a dispute or to protect legal rights. We do not sell your registrant information.

Security and private order pages

Registrant contact details are encrypted in application storage. Payment and registry credentials are kept outside public files. Order access is tied to the browser session authorised for the order; the order reference alone does not grant access. Order pages do not display registrant addresses or card details.

Please keep your device and browser session secure. If you lose access to your order page, contact us with your order reference. We will verify your authority before disclosing private information or changing a registration. No online service can promise absolute security.

Retention and international processing

We keep information for as long as needed to administer your registration and support requests, satisfy legal accounting and record-keeping duties, resolve disputes and protect against fraud. Some payment and registry records may need to be retained after a registration ends. Contact us for details of retention relevant to your order.

Payment and infrastructure providers may process information outside the UK under their published transfer arrangements and applicable safeguards. Their linked privacy notices explain their handling of information and international transfers.

Your choices and rights

Subject to applicable law, you can request access to your personal information, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Some information is necessary for a valid domain registration or must be kept to meet legal obligations, so we may not be able to delete it while those requirements apply. Contact tom@serallo.co.uk to make a request. We may ask for information needed to verify your identity and authority.

You can also complain to the UK Information Commissioner's Office. Please contact us if you would like us to investigate a concern.

Essential browser storage

Session storage is used to maintain your basket, protect form submissions and authorise access to your order. These functions are necessary to provide the service you request. Registration checkout does not require an advertising or marketing consent.

For wider website practices, read the main privacy notice. For the service you purchase, read the domain registration terms.