Privacy Policy

Last updated: 5 April 2025

1. Who We Are

AutumnFrog (“we”, “us”, “our”) operates the domain marketplace at autumnfrog.com. We are committed to protecting your personal information and being transparent about how we use it. Contact: sales@autumnfrog.com.

2. Information We Collect

We collect the following types of personal data:

  • Contact information: Name and email address submitted via the Make an Offer form.
  • Payment information: Payment data is collected and processed by Stripe. We do not store card numbers or banking details on our servers.
  • Transaction data: Records of purchases, lease agreements, and payment history associated with your email address.
  • Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps. This data is used for security and performance monitoring only.
  • Cookies: We use essential cookies to maintain your session when browsing. See Section 7 for details.

3. How We Use Your Information

  • To process and fulfil domain purchases and lease agreements.
  • To respond to offers and enquiries you submit.
  • To send transactional emails (payment confirmations, transfer instructions, billing notifications).
  • To comply with legal obligations, including financial record-keeping.
  • To protect against fraud and ensure the security of our services.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data under the following lawful bases:

  • Contract: Processing necessary to fulfil your purchase or lease agreement.
  • Legitimate interests: Security monitoring, fraud prevention, and improving our services.
  • Legal obligation: Retaining financial records as required by law.

5. Stripe Payment Processing

All payment transactions are processed by Stripe, Inc. When you make a payment, you share your payment details directly with Stripe. AutumnFrog only receives confirmation of payment status and a Stripe customer reference. Stripe's privacy policy is available at stripe.com/privacy.

6. Data Retention

  • Transaction records are retained for 7 years as required by UK financial regulations.
  • Offer submissions are retained for 2 years.
  • You may request deletion of your data by emailing sales@autumnfrog.com. Note that some data must be retained for legal compliance.

7. Cookies

We use the following types of cookies:

  • Essential cookies: Required for the site to function, including admin session management. These cannot be disabled.
  • Analytics cookies: We do not currently use analytics cookies. If added in future, this policy will be updated.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data (subject to legal retention requirements).
  • Restrict or object to certain types of processing.
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at sales@autumnfrog.com. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data in transit is encrypted via TLS. Our database is hosted on Supabase with row-level security enabled.

10. International Transfers

Our services use Stripe (US-based) and Supabase (infrastructure based in the EU or US depending on configuration). Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated date. For significant changes, we will notify affected users by email where possible.

12. Contact & Complaints

For any privacy-related questions or to exercise your rights, contact us at sales@autumnfrog.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.