Privacy Policy

2.1 Information from Website Visitors

When you visit our website without creating an account, we automatically collect certain technical information through cookies, server logs, and similar technologies. This includes your Internet Protocol (IP) address, browser type and version, operating system, device type, screen resolution, referring website URL, pages visited on our website, date and time of access, and preferred language and currency settings.

2.2 Account Registration Information

When you create an account with GetYour.iD, we collect personal information necessary to establish and maintain your account. This includes your full name, organisation or company name (if applicable), postal address, email address, telephone number, and account password (stored in encrypted form). For customers purchasing products and services, we also collect billing information including credit card details and billing address. Please note that payment card information is processed by our payment gateway partner Stripe and is not stored on our servers.

2.3 Domain Name Registration Data

Domain name registration is a regulated activity governed by ICANN policies for gTLDs and by the respective country code registry operators for ccTLDs. When you register, transfer, renew, or update a domain name, we are required to collect specific registration data elements as mandated by the applicable registry and ICANN's Registration Data Policy.

The registration data elements we collect include:

• Registrant Contact: Full name (or organisation name), postal address, email address, telephone number, and fax number (where required by the registry).
• Administrative Contact: Name, postal address, email address, and telephone number of the person authorised to manage the domain (where required by the registry).
• Technical Contact: Name, postal address, email address, and telephone number of the person responsible for the technical aspects of the domain (where required by the registry).
• Billing Contact: Name, postal address, email address, and telephone number of the person responsible for billing matters (where required by the registry).

Under the ICANN Registration Data Policy (effective 21 August 2025), only the Registrant contact is mandatory for gTLD registrations. Administrative, Technical, and Billing contacts are now optional unless specifically required by the individual registry operator. The Registrant Organisation field, if populated, is treated by ICANN as the legal owner of the domain; if left empty, the named individual registrant is deemed the owner.

2.4 WHOIS and RDAP Data

Domain name registration data has historically been published through the WHOIS protocol. As of January 2025, the Registration Data Access Protocol (RDAP) has replaced WHOIS as the required lookup protocol for gTLD registrations. RDAP provides structured data responses over HTTPS with enhanced security, internationalisation support, and differentiated access controls.

Under the current ICANN Registration Data Policy, non-essential personal data is redacted by default from public RDAP/WHOIS queries for gTLD domains. Only limited registration data elements are publicly accessible, while full registrant details are disclosed only through authorised access channels in accordance with applicable laws and ICANN policies.

For ccTLD domains, the applicable registry operator determines what registration data is publicly available. Each ccTLD operates under its own national privacy framework, and the level of data redaction varies. For example, .id domains are governed by the Indonesian registry (PANDI) and Indonesian data protection laws, while .au domains are governed by the .au Domain Administration (auDA) and Australian privacy legislation.

2.5 Web Hosting and Business Add-On Data

If you subscribe to our web hosting services (Shared Hosting or VPS Hosting), SSL certificate services, Google Workspace integration, or logo design services, we may collect additional information necessary to provision and manage these services, including server configuration preferences, website content (as stored on our hosting infrastructure), and SSL certificate request data (such as domain validation details).

2.6 Communication Data

When you contact our customer support team, submit enquiries, or interact with us through email, telephone, or our website contact forms, we collect the content of those communications along with associated metadata (date, time, channel) to provide you with support and improve our services.

4.1 Service Delivery and Account Management

• Creating, maintaining, and administering your GetYour.iD account.
• Processing domain name registrations, transfers, renewals, and modifications across gTLDs, ccTLDs, and other new global TLDs.
• Provisioning and managing web hosting, SSL certificates, DNS services, and other business add-ons.
• Submitting required registration data to the relevant domain registry operators and ICANN as mandated by policy.
• Processing payments and managing billing for your products and services.

4.2 Communication and Support

• Responding to your enquiries, support requests, and providing technical assistance.
• Sending transactional notifications including domain expiry reminders, renewal confirmations, service outage alerts, and maintenance notices.
• Sending newsletters, marketing promotions, and survey invitations (with your consent, where required).

4.3 Security and Compliance

• Verifying your identity and authenticating account access, including through our two-step authentication system.
• Detecting, preventing, and investigating fraud, unauthorised access, and other security incidents.
• Complying with applicable laws, regulations, ICANN policies, and registry requirements.
• Responding to lawful disclosure requests from law enforcement, regulatory authorities, and intellectual property rights holders through established ICANN and registry channels.

4.4 Service Improvement and Analytics

• Analysing website usage patterns to improve user experience and interface design.
• Diagnosing technical problems and optimising website performance.
• Developing new products, features, and services.

5.1 Domain Registry Operators and ICANN

When you register, transfer, renew, or update a domain name, we are contractually and legally required to transmit your registration data to the relevant registry operator. For gTLD domains, this data is also shared with ICANN in accordance with ICANN's Registration Data Policy. The specific data elements shared vary by TLD type:

• For gTLD Registrations (e.g. .com, .net, .org, .info): Data is shared with the relevant gTLD registry operator and ICANN. Non-essential personal data is redacted from public RDAP/WHOIS queries by default under the Registration Data Policy.
• For ccTLD Registrations (e.g. .id, .au, .cn, .es): Data is shared with the respective country code registry operator. Each ccTLD registry has its own data handling policies subject to the national privacy laws of the relevant jurisdiction. Some ccTLD registries may publish registrant data publicly.
• For nTLD Registrations (e.g. .online, .shop, .tech): New TLD registrations follow the same ICANN data policies as gTLDs. Data is shared with the nTLD registry operator and ICANN, with the same default redaction protections.

5.2 Payment Processors

When you purchase products and services, your payment card information and billing details are transmitted to our third-party payment processor to authorise and complete transactions. We do not store full payment card numbers on our servers. Our payment processing partners through Stripe are PCI-DSS compliant.

5.3 Hosting and Infrastructure Partners

We use trusted third-party hosting (e.g. HostGator) and Amazon AWS cloud infrastructure providers to deliver our services. Your data may be processed by these partners as necessary to operate our platform, subject to strict data processing agreements that ensure the confidentiality and security of your information.

5.4 WHOIS Privacy and Proxy Services

If you opt in to our WHOIS Privacy service, we substitute your personal registration data with our proxy information in publicly accessible RDAP/WHOIS records. Your actual contact details are maintained securely in our systems and disclosed only in accordance with this Policy, applicable law, or through established relay mechanisms for legitimate communications.

Please note that WHOIS Privacy may not be available for all TLDs. Certain registry operators prohibit the use of privacy or proxy services, and in those cases your registration data will be displayed in accordance with the applicable registry's policies.

5.5 Legal and Regulatory Disclosure

We may disclose your personal information where we reasonably believe it is necessary to comply with a law, regulation, legal process, or enforceable governmental request; to protect the safety, rights, or property of GetYour.iD, our customers, or the public; to detect, prevent, or address fraud, security, or technical issues; or to respond to lawful requests for non-public registration data submitted through ICANN's established disclosure channels, including urgent requests as defined under the Registration Data Policy.

5.6 Dispute Resolution Bodies

In connection with domain name disputes (such as proceedings under the Uniform Domain-Name Dispute-Resolution Policy (UDRP), Uniform Rapid Suspension (URS), or equivalent ccTLD dispute resolution processes), we may be required to share relevant registration data with approved dispute resolution providers, panels, and the parties involved.

9.1 All Users

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information. You can also update your account details directly through your online account profile settings at any time.
• Deletion: You may request the deletion of your personal information, subject to our legal and contractual retention obligations (for example, Domain Registry Operators or ICANN-mandated data retention for domain registration records).
• Objection to Marketing: You may opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
• Account Closure: You may request the closure and deactivation of your account by contacting us. We will verify your identity before processing any such request.

9.2 Additional Rights for EEA and UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you also have the following additional rights under the GDPR:

• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object to Processing: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

9.3 Rights for Australian Residents

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to access and correct your personal information held by us. If you are not satisfied with our handling of your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9.4 Domain-Specific Considerations

Please note that certain personal data associated with domain name registrations may be subject to specific retention and disclosure obligations imposed by ICANN, the relevant registry operator, or applicable law. In such cases, we may not be able to fully comply with a deletion or restriction request until those obligations have been satisfied. We will inform you of any such limitations (if any applicable) and the reasons for them.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website. These include session cookies that maintain your login state, shopping cart functionality, and security features such as CSRF protection.
• Functional Cookies: Remember your preferences such as language selection (English, Indonesian, Chinese) and currency settings (USD, AUD, IDR) to provide a personalised experience.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting information on pages visited, time spent, and navigation patterns. This data is used to improve our website and services.
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These cookies are only placed with your explicit consent.

10.2 Cookie Management

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline optional cookies. You can also manage your cookie preferences at any time through the "Cookie Settings" link in the footer of our website. Additionally, you may configure your browser to block or delete cookies, though this may affect the functionality of certain features.