Skip to main content

    Privacy Policy

    Last updated: July 2026

    1. Introduction

    RollDomains ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our domain registration and management platform. By using RollDomains, you acknowledge the practices described herein. Where consent is required (for example, non-essential cookies under EU/UK law), we will ask before enabling those technologies.

    2. Information We Collect

    We collect information you provide directly: full name, email address, phone number, postal address, and company name (if applicable) during account registration. For domain registrations, we collect WHOIS contact data as required by ICANN, including registrant, administrative, technical, and billing contact details. Payment information (credit/debit card details) is processed securely through Stripe and is never stored on our servers. We also collect technical data automatically: IP address, browser type, operating system, referring URLs, pages visited, timestamps, and device identifiers.

    3. How We Use Your Information

    We use your information to: process domain registrations, transfers, and renewals; manage your account and provide customer support; send transactional emails (order confirmations, renewal reminders, security alerts); comply with ICANN requirements and applicable registry policies; detect and prevent fraud, abuse, and security threats; improve our platform, features, and user experience; communicate service updates and promotional offers (with opt-out available).

    4. WHOIS Data & Privacy Protection

    ICANN requires that registrant contact information be collected and, in some cases, made publicly available through WHOIS. RollDomains offers WHOIS Privacy Protection for supported TLDs, which replaces your personal details with proxy contact information in public WHOIS records. Even with privacy protection enabled, we are required to release your actual registrant data in response to valid legal requests or ICANN compliance inquiries.

    5. Data Sharing & Third Parties

    We share your information only as necessary: with domain registries and ICANN to fulfill registration obligations; with Stripe for payment processing; with email service providers for transactional communications; with analytics and advertising partners only when you have consented to analytics or marketing cookies; with law enforcement or regulatory bodies when required by law. We do not sell personal information for money. Under CCPA/CPRA, certain sharing for cross-context behavioral advertising may be considered a "sale" or "share," which you can opt out of via Cookie Preferences.

    6. Data Security

    We implement industry-standard security measures including TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, regular security audits and vulnerability assessments, access controls and authentication mechanisms, and automated threat detection systems. Despite these measures, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

    7. Data Retention

    We retain your personal data for as long as your account is active or as needed to provide services. Domain registration records are retained for the duration of the registration plus an additional 3 years as required by ICANN. Financial records are retained for 7 years for tax and accounting compliance. You may request deletion of your account data, subject to our legal retention obligations. Step-by-step account deletion instructions are published at rolldomains.com/account-deletion.

    8. Your Rights (GDPR & UK GDPR)

    If you are in the European Economic Area or United Kingdom, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); object to or restrict processing of your data; data portability (receive your data in a structured, machine-readable format); withdraw consent at any time where processing is based on consent. To exercise these rights, contact privacy@rolldomains.com or follow the process at rolldomains.com/account-deletion. We will respond within 30 days.

    9. California Privacy Rights (CCPA/CPRA)

    If you are a California resident, you may have the right to know what personal information we collect, use, disclose, or share; request deletion or correction of personal information; opt out of the sale or sharing of personal information; and not be discriminated against for exercising these rights. You can opt out of sale/sharing for advertising via the "Do Not Sell or Share" control in Cookie Preferences (footer link) or by rejecting marketing cookies. To submit a consumer request, email privacy@rolldomains.com with "California Privacy Request" in the subject line. We will verify your identity and respond as required by law.

    10. International Data Transfers

    Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, for any transfers of personal data outside the EEA and UK.

    11. Children's Privacy

    RollDomains services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

    12. Changes to This Policy

    We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on our platform. Your continued use after changes constitutes acceptance of the updated policy where permitted by law. Where consent is required, we may ask you again.

    13. Contact Us

    For privacy-related inquiries, contact our Data Protection Officer at privacy@rolldomains.com or write to: RollDomains Privacy Team, support@rolldomains.com.