Privacy Policy
Last updated August 2026
This policy explains how Design Dragon Ltd ("we", "us", "our") collects and uses your personal data, and your rights over it. We are the data controller for the information described here. Design Dragon Ltd is a company registered in England and Wales (company number: to follow), with its registered office at 9 Guelder Rode, Dunmow, CM6 1TU, United Kingdom. You can contact us at design@designdragon.uk.
Information we collect
- Contact and registrant details — your name, email address, postal address and phone number, provided when you order a domain or contact us.
- Order and account information — the domains and services you buy, and the email address you use to sign in to your account.
- Payment information — payments are processed by Stripe. We receive confirmation of payment and limited details (such as the last four digits of your card), but we do not store your full card number.
- Technical data — a strictly necessary sign-in cookie, and standard server logs generated by our hosting provider.
How we use your information
- To provide the services you order, including registering and managing domains for you.
- To take payment and send receipts and order confirmations.
- To operate your account and let you sign in and manage your domains.
- To contact you about your orders, renewals and support.
- To meet our legal, accounting and regulatory obligations.
Our lawful bases are performance of our contract with you, our legitimate interests in running and securing the service, and compliance with legal obligations.
Domain registration and WHOIS
When you order a domain, we register it through our domain registrar, Gandi, and provide the registrant details required by the relevant registry (for example Nominet for .uk domains, or ICANN-accredited registries for .com and similar). WHOIS privacy is applied where the registry allows it, so personal details are not published in the public WHOIS/RDAP directory. Some registries publish limited information as a condition of registration.
Who we share it with
We share only what is necessary with the providers who help us deliver the service:
- Stripe — payment processing.
- Gandi — domain registration and DNS.
- Cloudflare — website hosting and DNS.
- Resend — sending transactional email (sign-in links, confirmations).
These providers act as our processors or, where required, as controllers for their own purposes. Some may process data outside the UK; where they do, appropriate safeguards (such as standard contractual clauses) are in place.
How long we keep it
We keep your information for as long as we provide services to you, plus the period required to meet our legal, tax and accounting obligations, after which it is deleted or anonymised.
Your rights
Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal data, to object to certain processing, and to data portability. To exercise any of these, email design@designdragon.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use a small number of strictly necessary cookies. See our Cookie Policy for details.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.