Privacy Notice

DOTWEN LTD, company number 17372616, is the data controller. Its registered office is 128 City Road, London, United Kingdom, EC1V 2NX. This Notice covers the public website, accounts and authentication, domain registration and management, billing and balance, support, security, abuse handling, and service communications.

• Identity and contact information, including account and domain-contact details.
• Account, sign-in, and account-security information.
• Domain searches, registrations, status, transfers, nameservers, DNS and contact settings, and applicable domain records.
• Transaction, order, balance, billing, payment-status, refund, and accounting records. Dotwen does not receive full payment-card credentials from a payment service.
• Support requests, communications, complaints, privacy requests, and abuse reports.
• Device and connection information such as IP address, user agent, request timestamps, and security or audit events.
• Browser storage used to remember your cart, sign-in, and checkout progress, as described in the Cookie Notice.
• Information used to detect fraud, abuse, account compromise, misuse, or service problems.

We obtain information from you and other authorized account users; companies that provide sign-in, payment, domain, DNS, hosting, email, support, fraud-prevention, and security services; public domain records; and authorities or dispute bodies where applicable.

• Contract: creating and administering accounts, processing orders and payments, registering and managing domains, maintaining balance records, and providing requested support.
• Legal obligation: accounting and tax records, sanctions and regulatory checks, lawful requests, and records required by applicable domain rules.
• Legitimate interests: securing accounts and services, preventing fraud and abuse, fixing problems, defending legal claims, and improving the service. We limit use to what is proportionate and consider individual rights.
• Consent: only for an optional purpose that requires it, such as non-essential analytics or marketing if introduced later. Dotwen does not currently use non-essential analytics or advertising storage.

Account and registrant information is needed to create an account, form and perform the contract, and satisfy domain-registration rules. Payment or balance information is needed to process an order. If required information or verification is not provided, Dotwen may be unable to create the account, accept the order, register or manage the domain, or provide requested support.

We share data only when needed with companies that provide sign-in, domain, DNS, payment, hosting, email, support, security, and fraud-prevention services, as well as professional advisers, dispute-resolution bodies, and authorities. A recipient may process data for Dotwen or for its own legal responsibilities, depending on the service and law.

Domain registration can require data to be disclosed to the sponsoring registrar, registry, escrow service, authoritative domain lookup system, ICANN-related body, or dispute provider. The data and visibility depend on the extension, registrar, registry policy, redaction or privacy service, and applicable law.

Some recipients may process personal data outside the United Kingdom. Where restricted transfers occur, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, or another lawful safeguard or exception. Contact privacy@dotwen.com to request information about the safeguard relevant to your data.

We retain account and domain records while needed to provide the service and for a reasonable period afterward to resolve ownership, transfer, billing, abuse, or legal issues. Transaction, accounting, tax, and contract records are retained for the period required by law. Support, security, and audit records are retained according to sensitivity, the risk addressed, limitation periods, and incident or claim needs. Browser storage lasts as described in the Cookie Notice. Data may be retained longer for a legal hold, dispute, or binding domain rule, then deleted or anonymized when no longer needed.

We use organizational and technical measures intended to protect personal data, including access controls, authentication controls, monitoring, and controlled service-provider access. No storage or transmission method is free of risk, and this Notice does not claim a security certification.

Subject to applicable conditions and exceptions, you may request access, rectification, erasure, restriction, or portability; object to processing based on legitimate interests; and withdraw consent where processing relies on consent. Withdrawal does not affect earlier lawful processing.

Email privacy@dotwen.com. We may request proportionate information to verify identity and protect account or domain data. We will respond within the period required by law and explain if a request is restricted or refused. You may complain to the UK Information Commissioner's Office.

Dotwen may use automated signals to detect fraud, abuse, payment risk, account compromise, or domain misuse. Screening can delay, restrict, or refer an order or account for review. If a decision with legal or similarly significant effect is made solely by automated means, you may contact privacy@dotwen.com to request human review, express your view, and contest the decision where applicable.

Dotwen is not directed to children, and an account holder must be at least 18. We may update this Notice as the platform, law, or data use changes. Material changes will be communicated through an appropriate website, account, or email notice where required.

• Controller: DOTWEN LTD, company number 17372616
• Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
• Privacy requests: privacy@dotwen.com