Privacy Policy

Last updated: 28 July 2026

1. Who are we?

DomainDock is a website on which domain names are offered for sale. DomainDock is operated by Depositado.

Depositado is the data controller for the personal data processed through DomainDock. This privacy policy explains which personal data we process, why we process it and which rights you have.

2. Which personal data do we process?

When you contact us through DomainDock, by email or by telephone, we may process the following personal data:

• your name;
• your email address;
• your telephone number;
• the domain name in which you are interested;
• an offer or other proposal you submit;
• the contents of your message or enquiry;
• further correspondence concerning your enquiry or a potential domain sale.

Please do not send us special categories of personal data, such as medical information, religious beliefs, national identification numbers or copies of identity documents, through the contact form.

3. Why do we process personal data?

We process personal data for the following purposes:

• responding to questions and enquiries;
• communicating with interested parties;
• reviewing and discussing offers;
• negotiating the sale of a domain name;
• preparing and performing a purchase or transfer agreement;
• performing the technical and administrative domain transfer;
• maintaining our business and financial records;
• complying with legal obligations;
• handling complaints, disputes or legal claims.

4. What are our legal bases for processing?

We only process personal data where a valid legal basis applies. Depending on the circumstances, we rely on the following legal bases:

• Taking steps before entering into or performing a contract: when you request information, submit an offer, negotiate with us or purchase a domain name.
• Legal obligation: when we are required to retain or disclose information under tax, administrative or other legal obligations.
• Legitimate interests: for handling business correspondence, protecting our services, preventing misuse and establishing, exercising or defending legal claims.

5. Are you required to provide personal data?

You are not legally required to provide personal data to us. Without a valid email address or telephone number, however, we may be unable to respond to your enquiry.

Additional personal data may be required to complete the sale and transfer of a domain name.

6. Who do we share personal data with?

We do not sell or rent your personal data to third parties. We may share personal data with parties required to provide our services, including:

• our hosting provider;
• our email provider;
• IT and security service providers;
• accountants, administrators and legal advisers;
• domain registrars and registries;
• escrow and payment service providers;
• other parties required to complete the sale or transfer of a domain name.

Where a service provider processes personal data on our behalf, we enter into a data-processing agreement where required. These agreements contain provisions concerning confidentiality and data security.

We may also disclose personal data when we are legally required to do so or when a competent public authority makes a valid legal request.

7. Processing outside the European Economic Area

We aim to have personal data processed within the European Economic Area.

Where a service provider processes personal data outside the European Economic Area, we ensure that a valid legal basis and appropriate safeguards are in place, such as an adequacy decision or approved standard contractual clauses.

8. How long do we retain personal data?

We do not retain personal data for longer than necessary for the purposes for which it was collected, unless we are legally required to retain it for longer.

• Enquiries that do not result in a sale are retained for a maximum of twelve months after the last substantive contact.
• Information concerning a completed domain sale is retained for as long as necessary to perform and complete the agreement.
• Information forming part of our business or tax records is generally retained for seven years.
• Information required for a complaint, dispute or legal proceeding may be retained for longer where necessary.

9. Cookies and similar technologies

DomainDock does not currently place cookies through its public website. We do not currently use analytics cookies, tracking cookies, advertising cookies or similar technologies to track visitors.

If we introduce cookies or similar technologies in the future, we will update this privacy policy. Where consent is legally required, we will request consent before using those technologies.

10. Technical data and server logs

When you visit the website, our hosting provider may automatically process technical information in server logs. This may include an IP address, browser type, visited page, date and time of the visit and technical error messages.

This information is only used for the security, stability and technical operation of the website. It is not used to track visitors for commercial purposes.

11. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised disclosure and alteration.

Where appropriate, these measures include secure connections, access restrictions, system maintenance and careful handling of personal data.

12. Your privacy rights

Depending on the circumstances, you have the right to:

• request access to the personal data we process about you;
• have incorrect or incomplete personal data corrected;
• request the deletion of your personal data;
• request that the processing of your personal data is restricted;
• object to the processing of your personal data;
• receive your personal data in a portable format;
• withdraw consent that you previously provided.

You can submit a request by emailing contact@depositado.com.

To prevent misuse, we may ask you to provide additional information so that we can verify your identity. We will not request more information than is reasonably necessary.

We generally respond to requests within one month. This period may be extended for complex or extensive requests in accordance with applicable law.

13. Automated decision-making

DomainDock does not make decisions based solely on automated processing that have legal or similarly significant consequences for you. We do not use profiling.

14. Complaints

If you have a complaint about the way we process your personal data, please contact us first at contact@depositado.com. We will try to resolve your complaint together with you.

You also have the right to submit a complaint to the Dutch supervisory authority:

Dutch Data Protection Authority
Website: autoriteitpersoonsgegevens.nl

15. Changes to this privacy policy

We may amend this privacy policy when our website, services or applicable legislation changes.

The most recent version will always be published on DomainDock. The date on which this privacy policy was last updated is displayed at the top of this page.