Privacy Policy

1. Who We Are

Domain Dodo is operated by Ed Wade trading as Sky Blue Moose, Unit 165234, PO Box 7169, Poole, BH15 9EL. We are the data controller for personal data processed in connection with the service.

Contact: contact@domaindodo.com

2. What Data We Collect

• Account data: name and email address provided at registration.
• Team data: team name and the email addresses of team members you invite.
• Domain data: the domain names you add to Domain Dodo for monitoring.
• Notification data: Slack workspace details, phone numbers (for SMS and WhatsApp alerts), and webhook URLs you configure.
• Usage data: server log data including IP addresses, browser type, and pages accessed, collected automatically when you use the service.
• Payment data: payment processing is handled entirely by Paddle (paddle.com). We do not receive or store your card number or other sensitive payment details.

3. How We Use Your Data

• To provide, maintain, and improve the Domain Dodo service.
• To send domain expiry alerts and service notifications.
• To process subscription payments via Paddle.
• To respond to your support requests.
• To comply with our legal obligations.

4. Legal Basis (UK GDPR)

• Contract performance: processing necessary to deliver the service you have signed up for (e.g. storing your domains, sending alerts).
• Legitimate interests: security monitoring, fraud prevention, and service analytics where these interests are not overridden by your rights.
• Legal obligation: retaining billing records as required by applicable law.

5. Third-Party Processors

We share data with the following processors, each subject to a data processing agreement:

• Paddle (paddle.com) — payment processing and subscription management. Paddle acts as Merchant of Record and processes billing data under its own privacy policy.
• Mailgun — transactional email delivery (verification emails, expiry alerts sent via email).
• Twilio — SMS and WhatsApp notification delivery (only if you configure these channels).
• Slack — Slack notification delivery (only if you configure a Slack channel).
• Hosting provider — server infrastructure on which Domain Dodo runs (to be specified).

6. Data Retention

• Account and team data: retained while your account is active, and for 90 days after account deletion.
• Payment records: retained for 7 years to comply with financial record-keeping obligations.
• Server log data: retained for 30 days.

7. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate personal data.
• Erase your personal data ("right to be forgotten").
• Restrict processing of your personal data.
• Portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.

To exercise any of these rights, contact us at contact@domaindodo.com. We will respond within 30 days.

8. Right to Complain

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

9. International Transfers

Some of our third-party processors (including Twilio and Mailgun) are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

10. Changes to This Policy

For material changes to this policy we will notify you by email at least 14 days before the changes take effect. Minor updates will be reflected on this page with an updated "Last updated" date.

11. Contact

For any privacy-related questions or requests, please contact us at contact@domaindodo.com.