Privacy Policy

The data controller responsible for your personal data is:

We collect different types of information depending on how you interact with our services. The categories below outline the personal data we may collect and process.

We use your personal data for the following purposes:

• Providing, maintaining, and improving our hosting, email, and domain registration services
• Processing payments and managing your billing account
• Registering and managing domain names with the relevant registry operators
• Fulfilling our obligations as an ICANN-accredited registrar
• Responding to customer support enquiries and resolving technical issues
• Protecting the security and integrity of our infrastructure and preventing fraud
• Complying with legal obligations, including tax, accounting, and law enforcement requirements
• Sending service-related communications (e.g. renewal reminders, maintenance notices)

Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases depending on the nature of the processing:

As an ICANN-accredited domain registrar, FXRM is required to collect and maintain accurate registrant data for all domain names registered through our services. This section explains how domain-related personal data is handled.

We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described in this policy:

• Domain registries and ICANN — registrant contact data as required for domain registration, WHOIS/RDAP services, and data escrow
• Payment processors — to securely process your payments (we do not store full card details on our systems)
• Hosting infrastructure providers — data centre operators and network providers who support the delivery of our services
• Law enforcement and regulatory authorities — when required by law, court order, or to protect our legal rights
• Professional advisers — accountants, auditors, and legal counsel where necessary

As part of the domain registration process, your registrant data may need to be transferred to registry operators, ICANN, or data escrow providers located outside the United Kingdom. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data, including:

• UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office
• Transfers to countries that the UK Government has confirmed provide an adequate level of data protection
• Transfers necessary for the performance of our contract with you (e.g. completing a domain registration with an overseas registry)

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. The specific retention periods are as follows:

Under the UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at privacy@fxrm.com. We will respond to your request within one month.

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete personal data
• Right to erasure — you can request deletion of your personal data, subject to certain limitations (for example, we cannot delete domain registration data that we are required to retain under ICANN obligations)
• Right to restriction of processing — you can ask us to limit how we use your data in certain circumstances
• Right to data portability — you can request that we provide your data in a structured, commonly used, and machine-readable format
• Right to object — you can object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal

Our website uses cookies and similar technologies to provide and improve our services. We use the following types of cookies:

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL and encryption of sensitive data at rest
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing of our infrastructure
• Secure data centre facilities with physical security measures, redundant power, and environmental controls
• Incident response procedures to detect, report, and investigate personal data breaches

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification or displaying a prominent notice on our website. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

If you are unhappy with how we have handled your personal data, we would like the opportunity to resolve your concerns. Please contact us first at privacy@fxrm.com or via our complaints procedure.

You also have the right to lodge a complaint with the UK supervisory authority:

For any questions about this Privacy Policy or how we handle your personal data, please contact us: