PRIVACY POLICY
Effective Date: September 6, 2026 Controller: BDLOGIC LLC d/b/a FogMonkey, 5900 Balcones Drive, Ste 100, Austin, TX 78731 Privacy contact: privacy@fogmonkey.com
This Privacy Policy is a companion to, and incorporated by reference into, our Terms of Service, and uses the same defined terms (Company, Services, Upstream Registrar, Registry, Domain, Registrant).
1. Scope and Our Role
This Policy explains how we collect, use, share, and protect personal information when you use our Site and Services. Because we resell domain registration through our Upstream Registrar (TLDS L.L.C. d/b/a SRSplus, a Network Solutions / Web.com company) and the applicable Registries, some data you provide is necessarily transmitted to and independently processed by those parties and by ICANN. For your account and marketing data, we act as a controller. For domain Registrant data, we and the Upstream Registrar and Registries each act as independent controllers to the extent required to operate the domain name system and comply with ICANN requirements. The Upstream Registrar confirms this characterization in its Data Processing Addendum, which treats domain name registration as processing carried out by an Independent Controller (available at https://legal.newfold.com/DataProcessingAddendum.pdf), and describes its own handling of registration data in its Domain Registration Services privacy notice (https://newfold.com/privacy-center/domain-registration-services-addendum).
2. Information We Collect
- Account and contact data: name, email, postal address, phone, username, and account settings.
- Registrant data: the registrant, administrative, technical, and billing contact details required to register or manage a Domain. Providing this is a contractual and ICANN requirement; without it we cannot register a Domain for you.
- Privacy proxy contact: where our WHOIS privacy service is active on a Domain, a proxy contact is substituted for your Registrant details in the public registration directory, and communications sent to that proxy contact are forwarded to you. Your own Registrant data continues to be collected and transmitted as described in Section 4.
- Payment data: processed by our third-party payment processor(s). We do not store full payment-card numbers; we receive limited transaction confirmation data, such as card brand, last four digits, and expiration date.
- Usage and device data: IP address, browser and device identifiers, pages viewed, and similar analytics collected automatically, including via cookies and similar technologies.
- Communications: support requests, correspondence, and related records.
3. How We Use Information and Our Legal Bases
We use personal information to: create and manage your account; register, renew, transfer, and manage Domains; transmit Registrant data to the Upstream Registrar, Registries, escrow providers, and ICANN as required; operate our WHOIS privacy service and forward to you communications received at the privacy proxy contact; process payments; provide support; detect and prevent fraud, abuse, and security incidents; comply with legal, regulatory, and ICANN obligations; and, where permitted, send service and marketing communications. Where required by law (e.g., GDPR/UK GDPR), our legal bases are: performance of a contract (registering and managing your Domains), legal obligation (ICANN and applicable law), legitimate interests (security, fraud prevention, service improvement), and consent (certain marketing and cookies), which you may withdraw at any time.
4. Domain Registration Data, Public RDAP/WHOIS, and Your Accuracy Duties
Registration of a Domain requires that we collect Registrant data and transmit it to the Upstream Registrar, the applicable Registry, and data-escrow providers, and make it available to ICANN, as required by ICANN's Registration Data Policy and applicable Registry rules.
- Public directory (RDAP/WHOIS) and privacy: For most domains, the Upstream Registrar publishes Registrant contact details in the public registration directory. To keep your details off that public record, we include a WHOIS privacy service by default, at no extra charge, on every Domain whose Registry and the Upstream Registrar support it. Where privacy is applied, a proxy contact appears publicly in place of your name, address, phone, and email; communications sent to it are forwarded to you; and you remain the Registrant and retain all rights in the Domain. You may turn privacy off at any time by contacting support. Some TLDs do not support privacy — for those, your details are published, and we tell you which before you buy. Privacy protects your data only while active; if it lapses, your details may become publicly visible. Third parties may still obtain your data through the request-based disclosure process, or where required by law or ICANN/Registry policy.
- Your accuracy duties: You must provide accurate, current, and complete Registrant data, update it within seven (7) days of any change, and respond within fifteen (15) days to any verification or accuracy inquiry from us, the Upstream Registrar, or a Registry. Failure to do so may result in suspension, clientHold, or cancellation of your Domain under ICANN policy.
- Transfers out: Transfers are authorized using a Transfer Authorization Code (TAC) you request from us. When you transfer a Domain away, the gaining registrar becomes responsible for managing your registration data once the transfer completes.
5. How We Share Information
We share personal information with:
- The Upstream Registrar (SRSplus / Network Solutions / Web.com), Registries, escrow providers, and ICANN — as required to register and maintain Domains and comply with their policies. The Upstream Registrar's handling of this data is governed by its own Privacy Notice (https://newfold.com/privacy-center/privacy) and Data Processing Addendum (https://legal.newfold.com/DataProcessingAddendum.pdf).
- Our privacy service provider — the provider of the WHOIS privacy (proxy) service applied to your Domain, bound to use the data only to operate that privacy and forwarding service.
- Service providers — payment processors, hosting, analytics, email, fraud-prevention, and support vendors, bound to use the data only to provide services to us.
- Legal and safety recipients — courts, regulators, law enforcement, or others where required by law, to enforce our Terms, or to protect rights, safety, or security.
- Business transfers — a successor in a merger, acquisition, or asset sale, subject to this Policy.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
6. Data Retention
We retain personal information for as long as needed to provide the Services, maintain your account and Domains, and comply with legal, tax, accounting, ICANN, and escrow obligations, after which we delete it or retain it only in deidentified or aggregated form. Registrant data associated with a Domain is retained for the periods required by ICANN and applicable Registry policies, which may extend beyond the life of your account.
7. Security and Data Breach
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit where appropriate, and vendor diligence. However, no system is completely secure, and we do not guarantee that personal information will never be subject to unauthorized access, loss, or disclosure. In the event of a data breach affecting your personal information, we will notify you and applicable authorities as and to the extent required by applicable breach-notification laws. Any liability arising from a security incident is subject to the limitations in our Terms of Service.
8. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights. We will not discriminate against you for exercising them.
- EU/UK residents (GDPR/UK GDPR): access; rectification; erasure; restriction; data portability; objection to processing based on legitimate interests; withdrawal of consent; and the right to lodge a complaint with your supervisory authority.
- Texas, California, and other U.S. state residents (including under the Texas Data Privacy and Security Act and CCPA/CPRA): to know and access the categories and specific pieces of personal information collected, the sources, purposes, and categories of recipients; to delete; to correct; to opt out of any "sale" or "sharing" for targeted advertising; and to limit the use of sensitive personal information.
To exercise any right, contact us at privacy@fogmonkey.com. We will verify your request as required and respond within the timeframe the applicable law requires. Note that some Registrant data cannot be deleted while a Domain is active because ICANN and Registry rules require its retention; we will explain any such limitation.
9. International Data Transfers
Operating the domain name system requires transferring Registrant data across borders, including to the Upstream Registrar, Registries, and escrow providers that may be located outside your country. Where required, such transfers rely on an appropriate legal mechanism (for example, Standard Contractual Clauses).
10. Children
The Services are not directed to children, and our Terms of Service require all users to be at least 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us at privacy@fogmonkey.com and we will delete it.
11. Cookies and Tracking
We use cookies and similar technologies for essential site functions (such as sign-in and checkout) and for analytics that help us understand and improve the Services. We do not use advertising or cross-site tracking cookies. You can manage or block cookies through your browser settings; blocking essential cookies may prevent parts of the Site from working.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted with a new Effective Date and, where required, communicated to you directly.
13. Contact Us
BDLOGIC LLC d/b/a FogMonkey, 5900 Balcones Drive, Ste 100, Austin, TX 78731 — privacy@fogmonkey.com