BM Domains is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and UK data protection law more broadly.
When you deal with BM Domains or use our services, this policy explains how your personal information is collected, used, stored, and protected.
When We Collect Your Information
There are several points at which we may collect personal data, including when you:
- Browse our website
- Reach out to us by email, phone, or post
- Register a domain with us, or ask us to manage one
- Send a question our way or request support
- Contact us about your account or a particular service
What We Hold
Depending on the situation, the information we hold may include:
- The registration details Nominet requires us to keep
- Contact details such as your name, email, phone number, and postal address
- Notes recording the messages and dealings we have had with you
- Payment details, where these are needed to settle an account or process a refund
- A limited amount of technical data that helps us support you
Why We Use Your Data
Personal data is only ever used where there is a genuine need to:
- Communicate with you about renewals, your account, or support
- Provide registration and management services for domains
- Investigate and respond to abuse reports or complaints
- Meet our legal and regulatory obligations, Nominet’s included
Personal data is never sold, and we will not send you marketing that you did not ask to receive.
Who We Share It With
The only parties your personal data is ever passed to are:
- Suppliers involved in technical or domain-related work
- Nominet, the official .uk registry, so that registration requirements are met
- Regulators or law enforcement, where the law obliges us
- Payment providers, but only where this is needed to complete a transaction
Keeping Your Data Safe
To protect personal data against loss, misuse, or unauthorised access, we apply appropriate technical and organisational measures. Access is restricted to the staff who genuinely need the data for their work.
How Long We Keep It
We hold on to personal data only for as long as there is an operational, legal, or support reason to do so. As soon as it is no longer needed, it is either securely deleted or made anonymous.
The Rights You Have
A number of rights are available to you under UK data protection law. These include asking to see your personal data, having it corrected, limiting how it is used, or requesting its deletion. To exercise any of them, just get in touch using the details on our Contact page.
And if you feel your data has not been handled as it should be, you are also entitled to take the matter to the Information Commissioner’s Office (ICO).
BM Domains 