Privacy Policy

1. Who is responsible for your information?

Clementine Deny, a sole trader trading as Next Big Domain is the controller of personal information processed through Next Big Domain. Contact us at clementine@nextbigdomain.com or at the address in section 13.

2. Information we collect

We may collect your name, email address, account and login information, billing and subscription references, domain submissions, ownership-verification records, listing content, enquiries, messages, support requests, buyer shortlists, saved search briefs, budgets, alert preferences, requests for guides or resources, and records of your choices or consent.

We may also collect technical information such as IP address, browser and device information, login activity, page views, marketplace searches, purchase-link clicks, downloads, referral source, campaign information, approximate location, cookies, security logs and an opaque first-party anti-abuse device identifier.

Stripe processes your complete payment-card details. We normally receive payment status, customer and subscription identifiers, card type and limited card details such as the last four digits, rather than the complete card number.

3. How we use information and our lawful bases

• Contract or requested service: to create accounts, take payment, provide plans, verify domains, publish listings, deliver enquiries, send a guide or resource you requested, and provide support.
• Legitimate interests: to secure the service, prevent fraud and repeated promotional-credit claims, rate-limit abusive requests, measure marketplace and campaign performance, improve features, maintain marketplace quality and handle disputes, provided those interests are not overridden by your rights.
• Legal obligation: to keep financial records, respond to lawful requests and comply with tax, consumer and regulatory duties.
• Consent: to maintain optional buyer profiles, send saved-search or shortlist alerts, send optional marketing after a guide request, and where required for non-essential cookies. You may withdraw consent, unsubscribe or disable alerts at any time.

4. Public listing information

Published domain names, prices, descriptions, logos, use cases and seller-selected information are visible publicly and may be indexed by search engines. Do not submit personal or confidential information for publication.

5. AI-assisted features

When an AI feature is used, domain information, listing instructions or draft content may be sent to an AI service provider to generate output. We aim not to send unnecessary account, payment or special-category information. Do not place sensitive personal information in listing briefs.

6. Who receives information?

We may share relevant information with service providers that help us operate the marketplace, including website hosting and security providers, WordPress services, Stripe for payments and billing, email providers, analytics providers where enabled, and AI providers when an AI feature is requested.

We may share an enquiry with the seller of the domain it concerns. We may also disclose information where required by law, to protect rights or users, to investigate fraud, or in connection with a sale or restructuring of the business. We do not sell personal information.

7. International transfers

Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on an adequacy regulation, approved contractual protections or another lawful transfer mechanism.

8. How long we keep information

We keep account and contract records while your account is active and normally for up to six years afterwards where needed for tax, legal claims and contractual records. We normally keep unsuccessful general enquiries for up to two years, unless a longer period is needed for a dispute, fraud prevention or legal duty.

Buyer profiles, saved searches and shortlists are kept while the buyer continues using the service or until deletion is requested. Buyers can delete this information directly from their private buyer area. Aggregated marketplace-demand records may be retained after personal identifiers have been removed.

Technical and security logs are retained for periods appropriate to security and troubleshooting. Anti-abuse records used for promotional-credit protection store one-way hashes rather than raw IP addresses or raw device tokens and are normally retained for up to 365 days. Public listing material may remain in backups or search-engine caches for a limited period after removal. We delete or anonymise information when it is no longer reasonably needed.

9. Cookies

We use essential cookies for login, security, checkout and site operation. This includes an opaque first-party device identifier used to prevent repeated promotional-credit claims and abusive account creation; the cookie itself does not contain your email address or IP address. If analytics, advertising or other non-essential cookies are enabled, we will provide information and request consent where required. You can also control cookies through your browser, although blocking essential cookies may prevent account features from working.

10. Security

We use proportionate technical and organisational measures intended to protect personal information. No internet service is completely secure, so you should use a strong, unique password and tell us promptly about suspected unauthorised access.

11. Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information, object to certain processing, receive portable information, and withdraw consent. Some rights are subject to legal exceptions.

To exercise a right, email clementine@nextbigdomain.com. We may need to verify your identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

12. External websites

Listings may link to registrars, marketplaces or other third-party websites. Those organisations control their own processing. Read their privacy information before providing personal or payment details.

13. Contact details

Clementine Deny, a sole trader trading as Next Big Domain
1 Claypole Drive TW5 0AL Hounslow, United Kingdom
Email: clementine@nextbigdomain.com

14. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will be published here with a revised date. We will give additional notice of material changes where appropriate.