Privacy Policy

1. Information We Collect

• Account information: name, email address, phone number, and password (stored hashed, never in plain text).
• Domain & registrant information: the WHOIS/registrant contact details you provide for domains you register, renew or transfer, and DNS records you configure.
• Billing information: billing address and transaction records. We do not store your full card or bank account number — payments are processed directly by our payment gateway partners (which may include Paystack, Flutterwave, Nomba, Interswitch, OPay or Paga).
• Support information: the content of support tickets and any files you attach to them.
• Usage & device information: IP address, browser type, pages visited and similar technical data, collected automatically, including via cookies (see Section 6).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate and maintain domain registration, DNS management and billing services;
• Process payments, issue invoices and receipts, and send billing and renewal reminders;
• Submit registrant/WHOIS information to the relevant domain registry or registrar, as required to register, renew or transfer a domain;
• Respond to support requests and communicate service-related updates;
• Detect, prevent and investigate fraud, abuse and security incidents; and
• Comply with legal obligations, including registry and law-enforcement requests.

3. Legal Basis for Processing

We process personal information where it is necessary to perform our contract with you (providing the service you signed up for), to comply with a legal obligation (such as registry WHOIS requirements or tax record-keeping), for our legitimate interests (such as fraud prevention and improving the Service), or with your consent (such as non-essential cookies).

4. How We Share Information

We share personal information only where necessary to operate the Service:

• Domain registries & registrars: registrant/WHOIS details are submitted to the relevant registry to register, renew or transfer a domain, and may be published in the public WHOIS database unless WHOIS privacy protection is enabled and available for that TLD.
• Payment gateways: billing details are shared with the gateway you choose to complete a payment.
• Invoicing providers: invoice and customer details may be shared with our invoicing provider to generate and send invoices, receipts and reminders.
• Service providers: we use third-party providers for functions such as email delivery, in line with the purposes described in this policy.
• Legal & safety: where required to comply with a law, regulation, legal process, or a valid request from a public authority.

We do not sell your personal information.

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, plus any additional period required to comply with legal, tax or registry record-keeping obligations, or to resolve disputes.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences (such as light/dark mode), maintain your cart across domains, and protect the Service against fraud and abuse. See our cookie notice for the categories of cookies we use and how to manage your preferences.

7. Data Security

We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss or misuse, including encrypted connections, hashed passwords, and access controls on staff accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to our legal and registry retention obligations;
• Object to, or request that we restrict, certain processing; and
• Withdraw consent at any time where processing is based on consent, such as non-essential cookies.

To exercise any of these rights, contact us at privacy@cloudone.ng. Most account and domain details can also be updated directly from your dashboard.

9. International Data Transfers

Some of our service providers (such as payment gateways, registrars or email delivery providers) may process data outside Nigeria. Where this happens, we require that appropriate safeguards are in place consistent with the NDPA.

10. Children's Privacy

The Service is not directed at children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, notified to you by email.

12. Contact Us

Questions about this Privacy Policy or your personal information can be sent to privacy@cloudone.ng.