Updated May 25th 2018

Google Registry Privacy Policy

At Charleston Road Registry d/b/a Google Registry (“Google Registry”) we understand the trust users place in us and our responsibility to protect the privacy of user information. We want you to be clear how we’re using information and the ways in which you can protect your privacy.

Our Privacy Policy explains:

Information we collect

We collect information in three ways:

Information you give us

For example, we may offer you the chance to provide us with certain information, such as your name and email address when you reach out with customer support requests. If you use a Google Account to access Google Registry products and services (“Services”), your use of that account for our Services is governed by this Privacy Policy.

Information we get from your use of our services

We may collect information about the services that you use and how you use them, like when you visit our website. This information may be linked to your Google Account and may include:

Information we get from your registrar

Your registrar collects information from you when you register a domain name, including your name, address, contact information, the name servers on which your domain name is hosted and their IP addresses, and the same information for administrative and technical contacts you identify. We receive this information from registrars for Google Registry’s top-level domains.

How we use the information we collect

We use the information we collect from Google Registry’s services for the following purposes:

Retaining and deleting your personal information

We retain your personal information only as long as necessary to provide you services and to safely delete it following termination of services. When we receive an update indicating that you deleted your registration data via your registrar, we start the process of removing it from our systems. First, we aim to remove any publicly visible personal information by removing your information from any registration data directory services we operate. We then begin a process to safely and completely delete the data from our back-up storage systems.

Sometimes business or legal requirements may oblige us to retain certain information, for specific purposes, for an extended period of time. We might retain some data for longer periods of time if:

Information we share

When you provide data or personal information to Google Registry, we may store it and share it with companies, organizations and individuals outside of Google Registry in the following circumstances and in compliance with this Privacy Policy, our obligations to the Internet Committee for Assigned Names and Numbers (ICANN), and any other appropriate confidentiality and security measures:

We may share aggregated, anonymized information with ICANN, publicly, and with our partners. For example, we may share information publicly to show statistical trends about the general use of our services.

In the event that Google Registry is involved in a merger, acquisition or asset sale, we may disclose your personal data to the prospective seller or buyer of such business or assets.

Information security

Google Registry uses strong security features that continuously protect your information. The insights we gain from maintaining our services help us detect and automatically block security threats from ever reaching you. And if we do detect something risky that we think you should know about, we’ll notify you or your registrar and help guide you through steps to stay better protected.

We work hard to protect you and Google Registry from unauthorized access, alteration, disclosure, or destruction of information we hold, including:

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Compliance and Cooperation with Regulators

We regularly review this Privacy Policy and make sure that we process your information in ways that comply with it.

Data Transfers

Our parent company, Google LLC, maintains servers around the world and your information may be processed on servers located outside of the country where you live. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy. We also comply with certain legal frameworks relating to the transfer of data, such as the EU-US and Swiss-US Privacy Shield Frameworks.

When we receive formal written complaints, we respond by contacting the person who made the complaint. We may work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.

European Requirements

If European Union (EU) data protection law applies to the processing of your information, you have the right to request access to, update, remove, and restrict the processing of your information. You also have the right to object to the processing of your information. The personal information that we process about you is the information we receive from your registrar and any update that you make in your registrar’s system will be automatically reflected in our system. If you would like to access, update, or remove any of that personal information, please first contact your registrar.

We process your information for the purposes described in this policy, based on the following legal grounds:

When we’re pursuing legitimate interests

We process your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. This means that we process your information for the following purposes:

When we’re providing a service

We process your data to fulfill registration and operation of your domain that you request through your registrar.

When we’re complying with legal obligations

We’ll process your data when we have a legal obligation to do so, for example, if we’re responding to legal process or an enforceable governmental request. Google Registry may receive requests from governments and courts around the world to disclose registrant data. Respect for the privacy and security of your data underpins our approach to complying with these legal requests. Google’s legal team reviews each request and frequently pushes back when a request appears to be overly broad or doesn’t follow the correct process. Learn more in Google's Transparency Report.

If you have questions, you can contact Google and our data protection office. And you can contact your local data protection authority if you have concerns regarding your rights under local law.

About this Policy

When this Policy Applies

This Privacy Policy applies to all of the services offered by Google Registry. This Privacy Policy doesn’t apply to the information practices of other companies and organizations or to other Google products and services. For example, our website may contain links to and from the websites of our partners and these websites have their own privacy policies. Please check these policies before you submit any personal data to these websites.

Changes to this Policy

Any changes we may make to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.

Contact Us

If you have any questions about this Privacy Policy, please feel free to contact us here.