Privacy policy

1. Who processes the data

Personal data is processed by the ZRAZU storefront operator and the seller under contract for a specific order. Full details for both — to be announced.

2. What data we collect

Depending on how you use the site:

• Account data: email, phone (optional), notification settings.
• Order data: the domain, registrant contacts, payer details — for the receipt, the act, and the tax invoice.
• Technical search data: domain-check queries are kept for no more than 72 hours and then deleted.

3. WHOIS privacy

An individual’s data is never shown in the public WHOIS/RDAP, even if the registry provided it. Email, phone, and address are never shown as text — only as a link to the registry’s contact form, where one exists.

4. How long we keep data

Raw search queries — up to 72 hours. Document scans from access recovery are deleted once the procedure is complete. Other retention periods by data category are to be announced.

5. Data breach

For a confirmed breach of personal data, we notify affected people within 72 hours of finding out ourselves — this is our public commitment regardless of the lawyer’s final position on statutory deadlines.

6. Your rights

You can get a copy of your data, or ask for it to be corrected or deleted — with exceptions the law sets for documents we’re required to keep. How to submit a request is to be announced.