Privacy Policy
Contents
1. Who we are
This policy explains how Domain Prices ("we", "us", "our"), accessible at https://domainprices.co.uk, collects, uses and protects information when you visit this site. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data controller: domainprices.co.uk
Address: None
Contact: admin@domainprices.co.uk
2. Information we collect
You do not need an account to use this site, and we keep what we collect to a minimum:
- Server / access logs — our hosting provider automatically logs standard technical data for every request (IP address, browser/user agent, pages requested, referring page, timestamps). This is standard web server behaviour, used only for security, diagnosing faults, and preventing abuse.
- Visitor statistics — we separately keep our own simple, first-party record of page views (which page, when, the referring site's domain, and browser type) so we can see how the site is used. This doesn't use a cookie or any script in your browser, and we never store your actual IP address for this — instead, each visit is counted using a one-way scrambled value derived from your IP and browser that changes every day, so it can be used to estimate "how many different visitors today" without ever being able to identify you or track you across days or visits.
- Cookies — see the Cookies section below.
- Messages you send us — if you email us (e.g. via the Contact page), we'll hold your email address and message content for as long as needed to handle your query and keep a reasonable record afterwards.
- Admin accounts — separate from public visitors, site administrators have a login (username and a securely hashed password) used solely to manage sale records. This is not personal data about site visitors.
- RDAP/WHOIS lookup tool — the domain lookup tool at /rdap-uk/ runs entirely in your browser. Domain queries go directly from your browser to the relevant registry's own RDAP server — they never pass through our servers, and we don't see or log what you search. Any domain you choose to "track" in that tool is saved only in your browser's local storage, never sent to us.
We do not require registration to browse or search the site, and we do not collect payment details, government ID numbers, or any special category data from visitors.
3. Domain sale data
The sale records published on this site (domain name, sale price, sale date, and a link to the source auction) are aggregated from publicly available third-party auction sources, principally domainlore.uk. This is factual, already-public information about domain name transactions — it is not information we collect about you as a visitor to this site.
Occasionally a domain name may incidentally include what looks like a personal name (e.g.
janesmith.co.uk). We do not attempt to identify or link domain names to specific individuals,
and publishing a factual record of a public auction result is not, of itself, an assertion about any
particular person. If you believe a published record concerns you and you would like it reviewed,
corrected, or removed, see Your rights below.
4. Our legal basis for processing
| Activity | Legal basis |
|---|---|
| Server/access logs, keeping the site secure and working | Legitimate interests (Art. 6(1)(f)) — running a secure, reliable website |
| First-party visitor statistics (page views, referrers) | Legitimate interests (Art. 6(1)(f)) — understanding site usage, without cookies or persistent identifiers |
| Publishing aggregated, publicly-sourced domain sale records | Legitimate interests (Art. 6(1)(f)) — maintaining a public-interest historical record of domain sale prices |
| Strictly necessary cookies (admin session) | Legitimate interests / not subject to consent under PECR, as they're essential to the service requested |
| Optional cookies (Google Analytics, Google AdSense) | Your consent, given via the cookie banner |
| Responding to emails you send us | Legitimate interests in handling correspondence, and steps taken at your request |
Where we rely on legitimate interests, we've considered that this doesn't override your own rights and freedoms; you can object at any time (see Your rights).
5. How we use your information
- To operate, maintain and secure the site
- To diagnose technical problems and prevent abuse or fraud
- To respond to enquiries, correction requests, or complaints you send us
- To comply with legal obligations where applicable
We do not use your information for automated decision-making or profiling, and we do not sell your information to third parties.
6. Sharing your information
We share information only where necessary:
- Hosting provider — processes server logs and site data on our behalf, under a hosting agreement.
- Google Analytics — only loads after you consent via the cookie banner (see Cookies); Google processes this under its own privacy policy.
- Google AdSense — we show ads served by Google, which only loads after you consent via the cookie banner (see Cookies). Google may use cookies to serve and measure ads and, where you've consented to personalised ads, to tailor which ads you see — see how Google uses information from sites that use its services.
- Legal requirements — we may disclose information if required by law, court order, or to protect our rights, users, or the public.
domainlore.uk and other cited auction sources are our data sources, not recipients of your personal data — we don't send them any information about site visitors.
7. International transfers
Where any service provider we use (e.g. hosting, or Google Analytics/AdSense once you've consented) is located outside the UK, we take reasonable steps to ensure your information is protected to a standard equivalent to UK GDPR, such as relying on providers certified under an adequacy decision or using appropriate contractual safeguards (e.g. the UK's International Data Transfer Agreement / Addendum).
8. Data retention
- Server/access logs — typically retained for a limited period (commonly up to 12 months) before being rotated or deleted, per our hosting provider's standard practice.
- Visitor statistics — kept to review usage trends over time; since no raw IP address is stored in the first place, there's nothing in this data that identifies you regardless of how long it's kept.
- Published sale records — retained indefinitely, as the historical record is the purpose of the site, unless you successfully request correction or removal (see Your rights).
- Emails / correspondence — kept for as long as reasonably needed to deal with your query and for a reasonable period afterwards for our records.
- Admin account data — retained while the account is active, deleted once no longer needed.
9. Your rights
Under UK GDPR, you have the right to:
- Access — ask what information we hold about you
- Rectification — ask us to correct inaccurate information (including a sale record you believe is wrong)
- Erasure — ask us to delete information, in certain circumstances
- Restriction — ask us to limit how we use your information
- Portability — ask for a copy of information you provided us, in a portable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — for anything based on consent (e.g. optional cookies), at any time, without affecting processing carried out before withdrawal
To exercise any of these rights, or to request correction or removal of a specific sale record, email admin@domainprices.co.uk. We'll respond within one month as required by law. We may need to verify your identity before acting on some requests.
If you're unhappy with how we've handled your information, you have the right to complain to the UK supervisory authority: the Information Commissioner's Office (ICO), ico.org.uk, telephone 0303 123 1113. We'd appreciate the chance to resolve it directly first — see Contact us.
10. Cookies
We use one strictly necessary cookie, set only if you log in to the admin area, plus optional analytics and advertising cookies that only load if you accept them:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
PHPSESSID | Keeps an admin signed in after logging in — not used for tracking, and not set for ordinary visitors browsing the public site | Strictly necessary | Session (deleted when the browser closes / on logout) |
dp_cookie_consent (local storage, not a cookie) | Remembers your cookie preference so we don't ask every visit | Strictly necessary (preference storage) | Until you clear your browser storage or change your choice |
_ga, _ga_* | Google Analytics — counts visits and page views so we can see which pages are popular. Set by Google, not us. | Optional (analytics) — only loads if you click "Accept all" | Up to 2 years (set by Google) |
_gcl_au, IDE, test_cookie and similar | Google AdSense — serves the ads on this site and measures how they perform; may also be used to make ads more relevant to you. Set by Google, not us. | Optional (advertising) — only loads if you click "Accept all" | Varies by cookie, from minutes to around 2 years (set by Google) |
The strictly necessary cookies don't require your consent under UK PECR rules, since they're essential to a service you've specifically requested (staying logged in). The Google Analytics and Google AdSense cookies are optional — they only load after you click "Accept all" on the cookie banner, never before, and Google may process this data outside the UK/EEA under its own standard contractual safeguards. Ads shown before you've made a choice, or if you choose "Necessary only", are not personalised to you; see how Google uses information from sites that use its services and Google's Ads Settings if you want to control ad personalisation directly with Google, across any site. You can change your choice, or withdraw consent, at any time using the "Cookie Settings" link in the footer of any page — declining or withdrawing stops future analytics/advertising cookies but doesn't retroactively delete data Google already holds (see Google's own privacy policy for how to clear that).
11. Security
We take reasonable technical measures to protect information, including encrypted connections (HTTPS), securely hashed admin passwords, parameterised database queries, and access controls on the admin area. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
12. Children's privacy
This site is not directed at children, and we do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we'll remove it.
13. Changes to this policy
We may update this policy from time to time, for example to reflect changes in the law or the site's features. The "Last updated" date at the top of this page shows when it was last revised. Continued use of the site after changes take effect means you accept the updated policy.
14. Contact us & complaints
Questions about this policy, or want to exercise one of your rights above? Email admin@domainprices.co.uk.