Further to clause 7.4.4.1 of the ICANN Registrar Accreditation Agreement 2013, we process personal data in the context of our domain name management services as follows:

1. We process personal data for the following purposes:
   1. To provide the domain name services and any additional services ordered by the client;
   2. To meet ICANN requirements including the verification of registrant details, the escrowing of registrar data and publication of domain name registration data on the Whois;
   3. To contact client about matters relating to the domain name services, additional services ordered and other related services which we think the client may require.
2. Intended recipients or categories of recipients of personal data are as follows:
   1. ICANN;
   2. the applicable domain name registry;
   3. any third party registrar, local presence provider, Trademark Clearinghouse or other third party used by us to provide the services;
   4. data escrow provider.
3. All registration data, contact data and billing data collected by us are obligatory.
4. A data subject can access and, if necessary, rectify personal data held about them by contacting their Client Manager or admin@comlaude.com.
5. The registrar (as controller) is Nom-IQ Limited, t/a Com Laude, whose contact details are 28-30 Little Russell St, London, WC1A 2HN, United Kingdom.
6. We are not obliged to have a data protection officer; data protection queries can be referred to your Client Manager or admin@comlaude.com.

1. Our legitimate interest for processing under Article 6(1)(f) of the General Data Protection Regulation (GDPR) is provision of our domain name management and related services to clients.
2. We intend to transfer personal data to domain name registries, clients and suppliers around the world. To the extent that personal data will be transferred outside the European Union or a country which has been recognised by the European Union as having an adequate level of protection, we will only transfer personal data if the necessary conditions of applicable privacy laws, including the GDPR have been met. This may involve first having obtained the consent of the data subject.
3. Personal data will be stored for the duration of the services, and for six years thereafter in case of legal claims.
4. Data subjects have the right to request from us access to, and rectification or erasure of personal data, or restriction of processing of personal data concerning them, or to object to processing, as well as the right to data portability.
5. Where we rely on the consent of the data subject for processing, we will comply with Article 6(1)(a) and Article 9(2)(a) of the GDPR.
6. Data subjects have the right to lodge a complaint with a relevant supervisory authority.
7. We seek to register domain names without using personal data wherever possible. Occasionally personal data is required by the registry to register a domain name and failure to provide such personal data means that the name cannot be registered.
8. We do not use automated decision-making or profiling.