Privacy Policy
We keep this policy short and readable. DropOps UK Ltd is the data controller for the personal data described below. This is a sample policy for demonstration and is not legal advice — a solicitor-reviewed version will replace it before marketplace payments go live.
1. Who we are
DropOps UK Ltd is the data controller responsible for your personal data when you use our drop-catching service, auction marketplace and website marketplace. You can reach our Data Protection Officer through the Contact page.
2. Data we collect
We collect only what we need to run the service and keep it secure.
- Account data: name, email address and password (stored hashed).
- Nominet tag and EPP connection details you choose to provide.
- Marketplace activity: bids, listings, watchlists and transactions.
- Technical data: IP address, device and browser information, and usage logs.
3. How we use your data
We process your data to provide and secure the service, to schedule and execute catches on your tag, to operate the marketplaces, to take payment, and to comply with our legal obligations.
- Deliver catching, auctions and marketplace features you request.
- Monitor EPP limits and protect against fraud and abuse.
- Send service, transaction and security notifications.
- Improve platform performance and reliability.
4. Lawful bases
We rely on: performance of our contract with you (to provide the service); legitimate interests (to secure and improve the platform); legal obligation (for accounting and compliance); and consent (for optional marketing, which you can withdraw at any time).
5. Sharing your data
We do not sell your personal data. We share it only with trusted providers who help us operate — such as payment processors, cloud hosting and the Nominet registry — and only to the extent necessary.
We may disclose data where required by law or to protect the rights, safety or property of DropOps, our users or the public.
6. Data retention
We keep account and transaction data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and dispute-resolution requirements. Technical logs are retained for a limited period and then deleted or anonymised.
7. Security
We use encryption in transit, hashed credentials, access controls and monitoring to protect your data. EPP credentials are stored encrypted and used only to operate catches you have scheduled. No system is perfectly secure, so we also encourage you to use a strong, unique password.
8. Your rights
Under UK GDPR you have the right to access, correct, delete or restrict the processing of your data, to object to certain processing, and to data portability. You can also lodge a complaint with the Information Commissioner’s Office (ICO).
- Request a copy of the data we hold about you.
- Ask us to correct or delete your data.
- Withdraw consent for optional communications at any time.
10. Changes to this policy
We may update this policy and will post the revised version with a new effective date. Where changes are significant, we will notify you through the service or by email.