Privacy Policy

Data Controller

Data We Collect

When you register a domain or use our services, Dervishi Domains may collect the following categories of personal data:

• Identity data: Full name, company name (if applicable)
• Contact data: Email address, postal address, phone number
• Technical data: IP address, browser type, access timestamps
• Transaction data: Domain registration details, payment records (we do not store card numbers)
• WHOIS data: As required by registry policy for .ES domain registrations

How We Use Your Data

Dervishi Domains uses your personal data exclusively for the following purposes:

• Processing and managing your domain registrations
• Communicating with you about your domains (renewals, expirations, transfers)
• Complying with registry requirements and applicable legal obligations
• Preventing fraud and ensuring the security of our platform
• Responding to legal requests from competent authorities

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Legal Basis for Processing

• Contract performance — to provide domain registration services you have requested
• Legal obligation — to comply with registry requirements and applicable regulations
• Legitimate interests — to prevent fraud and maintain platform security

Data Retention

• Active domain registration data: retained for the duration of the registration plus 30 days after expiry
• Transaction records: retained for 7 years for tax and accounting compliance
• Technical logs: retained for 90 days

Your Rights

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion where no legal obligation to retain exists
• Right to restriction — request we limit processing of your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Contact