Privacy & GDPR
UK Information.

Privacy Policy & UK GDPR

This policy explains how information is used when you visit UKNAME.UK, submit an enquiry or order, use the Client Portal, register a domain, purchase hosting/web services or request Digital Certification.

1. Who handles your information

UKNAME.UK LTD operates the website and processes information needed for enquiries, orders, account administration and service coordination. Information may also be processed where necessary to complete a domain registration, Digital Certification review, payment or another service requested by the client.

2. Information we may collect

• Identity and contact information, including name, company, postal address, email address and telephone number.
• Order information, including requested domain, package, service specification and communications.
• Company and verification information where needed for registration, certification or service eligibility.
• Technical information such as IP address, browser/device data, security logs and session information.
• Billing and transaction references. Full payment-card data is not requested through the public order form.
• Content and documents that you choose or are required to provide for a website, domain registration, company service or certification review.

3. Why information is used

Information may be used to answer enquiries, prepare and confirm orders, create and administer accounts, perform identity or authority checks, register or manage domains, deliver hosting/web services, coordinate certification, issue payment instructions, provide support, prevent abuse, maintain records and meet legal or contractual obligations.

4. Lawful bases

Depending on the activity, processing may be necessary to take steps at your request before entering a contract, perform a contract, comply with a legal obligation, protect legitimate interests such as service security and fraud prevention, or act on consent where consent is the appropriate basis.

5. .UK domain data and Nominet

Domain registration requires registry data. Nominet requires complete and accurate registration information and may validate registrant data. Current Nominet policy states that the public .UK WHOIS does not display a registrant's name or address unless permission has been given to publish it; validation status and other registry information may still be displayed.

6. Certification data

Certification evidence is processed for the level and scope agreed. Depending on the certification level, this can include entity status, registered office, officers, applicant authority, ownership/control information, constitutional records, business activity and other evidence relevant to the stated purpose. If ongoing Trusted Business monitoring is selected, relevant changes may be reviewed during the monitoring period and an annual reassessment may be required.

7. Payment data

Payment is requested only after an order is confirmed and the required identification stage is complete. Payment credentials are entered into the payment provider's environment or used with the client's bank, not into the public UKNAME.UK order form. UKNAME.UK may retain transaction amount, date, provider, reference, payment status, invoice information and records needed for accounting or dispute handling.

8. Sharing and recipients

Information is shared only where reasonably required for the requested service, legal compliance, fraud/security control or professional support. Recipients may include the providers named above, Nominet UK, hosting/email infrastructure providers, payment providers, banks, professional advisers and authorities where disclosure is legally required.

9. International processing

Some infrastructure or payment providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, the relevant provider or contractual arrangement is expected to use an available lawful transfer mechanism.

10. Retention

Information is retained for as long as reasonably needed for the enquiry, service term, support, renewal, dispute handling, accounting and legal record-keeping. Registry, payment and certification providers may have their own retention periods. When data is no longer required, it is deleted, anonymised or retained only where a lawful reason requires continued storage.

11. Security

Reasonable technical and organisational measures are used to protect account and order information. Clients should protect portal credentials, use strong unique passwords and notify UKNAME.UK promptly if they believe account access or contact information has been compromised.

12. Cookies and technical logs

The website may use essential session or preference technologies needed for navigation, security and language/interface behaviour. Server logs may record requests, IP addresses, timestamps and browser information for operation, security and troubleshooting. Optional analytics or marketing technologies, if introduced, should be handled in accordance with the consent requirements that apply at the time.

13. Your rights

Subject to the UK GDPR and Data Protection Act 2018, individuals may have rights to request access, correction, erasure, restriction, portability, objection and information about processing. A request may be limited where data must be retained for a live domain, contract, legal obligation, fraud/security record or another lawful reason. Requests can be made through the UKNAME.UK contact channel. You may also raise a complaint with the UK Information Commissioner's Office.

14. Third-party websites

Links to Nominet, payment providers, certification providers or other external sites lead to services with their own privacy notices. UKNAME.UK is not responsible for the content or privacy practices of an external website.

15. Changes

This policy may be updated to reflect service, provider or legal changes. The version published on this page applies from its publication date.