Privacy policy

Configurix Limited
2A Lower Main Street, Lucan, Co. Dublin, K78 X5P8, Ireland
Registered in Ireland · CRO number 808025
support@itdomain.it

Necessary checkout diagnostics

To operate the checkout you request and detect problems, we record checkout starts, timestamps, selected domain and operation, order reference, submission stages and outcome or error codes. We associate your account email only when you are signed in. Checkout logs do not record typed text, passwords, identity documents or complete card details. Card details go directly to Stripe through secure fields. These operational records are separate from optional advertising and analytics; they do not depend on optional-cookie consent and are not disabled by declining it. Signing in remains necessary to buy. A checkout still incomplete after about three–four minutes may generate an internal support alert, including while the customer is still completing the form. Alerts do not authorize charges or promotional messages. Diagnostic database records are deleted after 30 days; emailed alert copies are support correspondence and follow its retention. Orders and contractual confirmations follow their own retention. The legal bases are performing pre-contract requests and our legitimate interests in service security and reliability. Contact support@itdomain.it to exercise your privacy rights.

Data and purposes

We process account email, registrant and billing details, orders, domains, DNS settings, support requests and payment references to answer requests and perform the contract. Registry-required identity details are necessary to register and maintain a domain. We retain the accepted terms, language, timestamp, express service-start request and withdrawal acknowledgement with the order. The confirmation email includes a copy. Do not include passwords or complete card details in tickets.

Legal bases

Our bases are performance of the contract and pre-contract requests, applicable legal obligations, and our legitimate interests in security, abuse prevention and handling complaints. IP addresses and technical data may be processed for rate limits, access security and diagnostics. We do not use advertising profiling or automated decisions producing legal effects.

Providers and recipients

Cloudflare hosts the website and database. Openprovider and the relevant registries receive information necessary for domains; some registries act as independent controllers and may publish information under their rules. ClouDNS manages DNS zones. Stripe handles payments: we do not store complete card numbers. SiteGround handles support and sign-in mail. Purchased email services are supplied through Openprovider. We may disclose data to authorities when legally required. Public DNS records are accessible to anyone and must not contain secrets.

Retention and security

We retain account and service data to manage the relationship and afterwards only for accounting obligations, pending requests, disputes or security. Retention depends on the data and applicable obligations; you may request details or deletion. Sign-in links are single-use and expire after 15 minutes; sessions last at most 30 days and are revoked on logout. Token expiry does not mean immediate deletion of its technical record. Temporary order contact details are encrypted and cleared from that field on completion; necessary service, provider and order records remain. Mailbox passwords are transmitted to the provider for the requested operation and are not saved in the ITDomain account. Provider-held copies follow their respective terms.

Transfers and your rights

Providers may process data outside the EEA. Where required, transfers must be covered by an adequacy decision or appropriate safeguards, including standard contractual clauses; you may request information about relevant safeguards. You may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Rights are subject to legal conditions and registry obligations. Email support@itdomain.it; proportionate identity verification may be needed. We respond within GDPR time limits. You may complain to the Irish Data Protection Commission or your local authority.