Last updated: 07/10/2026
(“DomainSouq”, “we”, “us”) runs domainsouq.com and its services: domain registration, transfers and renewals, DNS, WordPress hosting, business email, SSL certificates, the domain marketplace, and free tools such as domain search, appraisal and the name generator. This policy explains what personal data we collect, why we collect it, who we share it with and what your choices are.
1. Who is responsible
Alriyad Capital, [registered address], is the controller of your personal data. For any privacy question, contact [info@domainsouq.com].
2. What we collect
- Account details: name, email address, phone number, password (stored only as a one-way hash), language and currency preferences, and two-step verification settings.
- Domain registrant (contact) details: name, organisation, postal address, email and phone of each domain’s owner and contacts. Domain registries and ICANN require this data to register a domain.
- Orders and billing: the products you buy, prices, coupons, invoices, refunds and payment status. We never see or store your full card number. Card details are entered only on our secure payment provider’s page. We keep only a reference to the saved card, its brand, its last four digits and its expiry date, so we can show it to you and renew your services if you choose.
- Services you use: your domains, DNS records, nameservers, transfer requests, hosting websites, mailboxes and SSL orders. Your WordPress password for a new website is used once to set the site up and is then deleted. It is never stored on your account or shown back to you.
- Security data: IP address, browser type, sign-in times, failed sign-ins, and security events such as password changes, transfer-code requests and new-device sign-ins. We never log passwords, transfer codes or card data.
- Messages: what you send us through the contact page, support, or a marketplace request to buy (name, email, phone, message).
- Searches and tools: domain names you search for, appraise or generate. We use them to answer your request and to protect the service from abuse.
- Cookies and analytics: see our Cookie Settings page.
3. Why we use it (and legal basis)
- To provide the services you order: registering and renewing domains, hosting, email and SSL, and running your account (contract).
- To take payment, issue invoices and credit notes, and keep accounting records (contract; legal obligation).
- To meet registry, ICANN and legal requirements, including registrant data and abuse handling (legal obligation).
- To keep accounts and payments secure: rate limits, bot checks, fraud and dispute handling (legitimate interest).
- To send service emails: order confirmations, renewal reminders, security alerts and expiry notices (contract; legitimate interest). These are not marketing and cannot be turned off while you have active services.
- For analytics and advertising measurement, only if you accept them (consent). You can change your choice at any time from “Cookie settings” in the footer.
4. Who we share it with
We do not sell your personal data. We share it only as needed with:
- Our domain registrar partner and the relevant domain registries, to register and manage domains. Their policies may publish some registrant data in the public WHOIS/RDAP directory. Where the registry allows it, personal details are redacted.
- Our secure payment provider, to process payments, saved cards and refunds.
- Our hosting infrastructure provider, to create and run your WordPress websites.
- Our email, SSL and DNS providers, to deliver those services, and our email delivery provider to send you messages.
- Our security and network provider, which protects the site from attacks and bots.
- Analytics and advertising platforms, only after you accept. We never send them your name, email, phone number or the domain names you buy.
- Authorities, dispute-resolution providers (such as UDRP) or other parties, where the law, a registry policy or a valid legal order requires it.
Some of these providers process data outside your country. When they do, we rely on appropriate safeguards, such as contractual clauses.
5. How long we keep it
- Account and service data: while your account is active, then as long as needed to close open matters.
- Invoices, credit notes and payment records: as long as tax and accounting law requires ([e.g. 5–10 years]).
- Security and activity logs: 90 days.
- Registrant data: as long as the registry and ICANN rules require, which can be after the domain ends.
- Contact and marketplace messages: [24 months] after the conversation ends.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your data, to receive a portable copy, and to withdraw consent. You can update most details yourself under My Account → Profile. For anything else, email [privacy@domainsouq.com]. We may need to confirm your identity. Some data cannot be deleted while a domain is registered or while the law requires us to keep it. You can also complain to your local data protection authority.
7. Security
We protect your data with encrypted connections, hashed passwords, optional two-step verification, encrypted storage of sensitive codes, rate limits and access controls for our staff. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.
8. Children
Our services are not meant for anyone under 18, and we do not knowingly collect their data.
9. Changes
If we change this policy, we will post the new version here with a new date. If the change is significant, we will also tell account holders by email.
10. Contact
[info@domainsouq.com]