Privacy Policy

1INTRODUCTION§

This Privacy Policy explains how NetPro Ltd., a company registered under the laws of Libya, operating under the trade names “reg.ly” and “REGLY” (“Company”, “we”, “us”, “our”), collects, uses, discloses, and protects your personal information when you visit or use the websites https://reg.ly and https://my.reg.ly (collectively, the “Site”) and all services offered through the Site (the “Services”).

NetPro Ltd. is the controller of the personal information described in this Privacy Policy, except where this Privacy Policy states that another party, such as the NIC.LY registry, acts as an independent controller.

Please read this Privacy Policy carefully. By accessing or using the Site or Services, you acknowledge that you have read and understood it. If you do not agree with this Privacy Policy, please discontinue use of the Site and Services immediately.

This Privacy Policy should be read together with our Terms and Conditions, available at https://reg.ly/about/terms-of-use/.

2INFORMATION WE COLLECT§

2.1Information You Provide to Us§

We collect personal information that you voluntarily provide when you register an Account, purchase Services, join our Affiliate Program, submit a support ticket, or otherwise communicate with us. This includes:

• Account Information: name, email address, phone number, mailing address, billing address, company name, and Account login credentials (including your password).
• Domain Registrant Data: name, organization, address, email, and phone number provided for domain registration, as required by NIC.LY. Registrant Data is publicly displayed through NIC.LY’s WHOIS and RDAP services (see Section 13).
• Support Communications: the content of support tickets, live chat conversations (via Zendesk), and email correspondence with our support team.
• Billing Information: transaction records, invoice details, and Account credit balance. We do NOT directly collect, store, or process your full credit/debit card numbers, CVV, or bank account details for payments you make to us. All payment card data is collected and processed directly by our independent third-party Payment Processors (PayPal and Stripe) and is never transmitted to or stored on our servers.
• Affiliate Program Data: if you join our Affiliate Program, your affiliate account details, referral activity, commission records, and the payout information you provide to receive commissions (such as a PayPal email address or bank transfer details).
• Identity Verification (KYC) Data: in certain circumstances (described in Section 2.4 below), we may require you to complete identity verification. This may involve submitting a government-issued identification document (such as a passport, national ID card, or driver’s license), a selfie or photograph that is compared with the photo on your identification document using facial recognition technology, and phone number verification.

If you provide personal information about another person, such as a registrant or contact who is not you, you confirm that you have that person’s permission and have informed them that the information will be submitted to NIC.LY and publicly displayed through WHOIS and RDAP, as described in Section 13.

2.2Information Collected Automatically§

When you visit or use the Site, we and our third-party service providers automatically collect certain information, including:

• Log and Usage Data: IP address, browser type and version, operating system, device information, referring URLs, pages visited, date/time stamps, clickstream data, and actions taken on the Site.
• Device Data: hardware model, device identifiers, operating system version, and system configuration.
• Location Data: approximate geographic location derived from your IP address. We do not collect precise GPS location data.
• Referral Data: if you arrive at the Site through an affiliate referral link, the identifier of the referring affiliate, so that your purchase can be attributed to that affiliate.
• Cookies and Tracking Technologies: see Section 5 (Cookies) below.

2.3Information Collected by Third-Party Services§

We use the following third-party services, which may collect information about you directly:

• Google Analytics: collects usage data (pages visited, session duration, traffic sources, device type) to help us understand how users interact with the Site. Google Analytics uses cookies. See Google’s privacy policy at https://policies.google.com/privacy.
• Google reCAPTCHA: used to protect the Site from spam and abuse. reCAPTCHA may collect hardware and software information, including device and application data, and send it to Google for analysis. See Google’s privacy policy at https://policies.google.com/privacy.
• Zendesk: our live chat and support ticketing platform. Zendesk collects and stores chat transcripts, support ticket content, and related metadata. See Zendesk’s privacy policy at https://www.zendesk.com/company/agreements-and-terms/privacy-policy/.
• PayPal: payment processor. Collects payment data directly. See https://www.paypal.com/webapps/mpp/ua/privacy-full.
• Stripe: payment processor. Collects payment card data directly. See https://stripe.com/privacy.
• KYC Verification Provider: if you undergo identity verification, our third-party KYC provider collects and processes your identification document, facial images, and related verification data on our behalf (see Section 2.4).

2.4Identity Verification (Know Your Customer / KYC)§

We may require identity verification (KYC) in the following circumstances:

• Account Recovery: if you lose access to your registered email address or need to verify your identity for account recovery purposes.
• Phone Verification: we may require phone number verification as an additional authentication step for account security.
• Domain Vault: enabling or disabling the Domain Vault add-on service requires successful completion of identity verification to prevent unauthorized changes to registry-level domain locks.
• High-Risk Account Actions: we may require verification for other sensitive account actions at our sole discretion, including but not limited to change of registrant, bulk transfers, or account ownership disputes.

Identity verification is conducted through a third-party KYC service provider. When you undergo verification, you submit your identification document and a selfie or photograph directly to the KYC provider. The KYC provider compares your facial image with the photo on your identification document using facial recognition technology, which involves processing biometric data (facial geometry) for the sole purpose of confirming your identity. We receive only the verification result (pass/fail) and a reference identifier from the KYC provider. We do not receive or store copies of your identification documents, your facial images, or any biometric data on our servers.

Where required by applicable law, your explicit consent is requested within the verification flow before any biometric processing takes place. You may decline; if you do, the action that requires verification cannot be completed. Biometric data is used only to verify your identity for the requested action and is not used for any other purpose, sold, or shared. The KYC provider retains and destroys identification documents and biometric data in accordance with its own data retention policy and applicable law, which we encourage you to review.

Verification results may be generated by automated means. If your verification fails and you believe the result is incorrect, you may contact [email protected] to request a review by a member of our staff.

3HOW WE USE YOUR INFORMATION§

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Services, including domain registration, renewal, transfer, and management.
• To create and manage your Account.
• To process transactions and send related information, including invoices, renewal reminders, and payment confirmations.
• To submit Registrant Data to the NIC.LY registry, which publishes it through its WHOIS and RDAP services, as required for .LY domain registration.
• To communicate with you, including responding to support requests, sending service-related notices, and providing account updates.
• To operate the Affiliate Program, including attributing referrals, calculating and paying commissions, and preventing affiliate fraud.
• To detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• To enforce our Terms and Conditions, Acceptable Use Policy, and other applicable agreements.
• To comply with applicable laws, regulations, legal processes, and governmental requests.
• To improve and optimize the Site and Services through analytics and usage data.
• To maintain backups and ensure business continuity.
• To verify your identity through KYC processes for account recovery, Domain Vault management, and other sensitive account actions.

We do NOT use your personal information for targeted advertising. We do NOT sell your personal information. We send only transactional and service-related communications; we do not send marketing emails or newsletters.

3.1Legal Basis for Processing (EEA, UK, and Switzerland)§

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, our legal basis for collecting and using your personal information depends on the specific information and context:

• Performance of Contract: processing your Account information, Registrant Data, billing information, and Affiliate Program Data as necessary to provide the Services you requested, including submitting your Registrant Data to NIC.LY, which is a mandatory condition of registering a .LY domain.
• Legitimate Interests: processing usage data, log data, and referral data for security, fraud prevention, Site improvement, analytics, and affiliate attribution, where our interests are not overridden by your rights.
• Legal Obligation: processing required to comply with laws that apply to us, court orders, or binding governmental requests.
• Explicit Consent: processing of biometric data during identity verification, as described in Section 2.4. You may withdraw consent at any time by contacting [email protected]; withdrawal does not affect verification already completed.

4HOW WE SHARE YOUR INFORMATION§

We do not sell, rent, or trade your personal information. We share your information only in the following circumstances:

• NIC.LY / GPTC (Registry): We are required to submit Registrant Data (name, organization, address, email, phone) to the NIC.LY registry for domain registration and management. NIC.LY acts as an independent controller of the Registrant Data it receives. NIC.LY publishes Registrant Data through its publicly accessible WHOIS and RDAP services and uses it in accordance with its own regulations and policies. We do not control NIC.LY’s publication, use, or protection of Registrant Data. See Section 13.
• Payment Processors: PayPal and Stripe process your payment transactions. They receive only the information necessary to process payments. We do not share your full Account details with Payment Processors. Payment Processors operate under their own privacy policies.
• Payment Receiving Agents: Entities that collect payments on our behalf as described in our Terms and Conditions. Payment Receiving Agents receive only payment transaction data necessary for processing and do not have access to your Account details, domain management information, or support communications.
• Affiliates: if you were referred to us by an Affiliate, information about your referred purchases that is needed to attribute and calculate the Affiliate’s commission may be visible to that Affiliate.
• Zendesk: Our live chat and support platform. Zendesk processes and stores your support communications, chat transcripts, and related metadata.
• Google: Through Google Analytics (usage data) and Google reCAPTCHA (device/browser data for spam protection).
• KYC Verification Provider: If you undergo identity verification, your identification document, facial images, and verification data are collected and processed by our third-party KYC service provider on our behalf. We receive only the verification result and a reference identifier. The KYC provider processes your data under its own privacy policy.
• Hosting and Infrastructure Providers: Our servers are located in the United States. Your data is stored and processed on these servers.
• Legal Requirements: We may disclose your information where required by law, regulation, legal process, court order, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to detect, prevent, or address fraud or security issues.
• Business Transfers: In connection with a merger, acquisition, sale of assets, or similar transaction, your information may be transferred to the acquiring entity. Where required by applicable law, we will provide notice before your information becomes subject to a different privacy policy.

We do NOT share your information with any third party for marketing or advertising purposes.

5COOKIES AND TRACKING TECHNOLOGIES§

5.1What Are Cookies§

Cookies are small text files placed on your device when you visit a website. They help the website recognize your device and remember information about your visit.

5.2Cookies We Use§

We use the following categories of cookies:

5.3Managing Cookies§

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may prevent the client area (my.reg.ly) from functioning correctly. Disabling analytics or affiliate tracking cookies will not affect your ability to use the Services, but a purchase may then not be attributed to a referring affiliate.

For more information on managing cookies in your browser: Chrome (chrome://settings/cookies), Firefox (about:preferences#privacy), Safari (Preferences > Privacy), Edge (edge://settings/privacy).

6INTERNATIONAL DATA TRANSFERS§

Our servers are located in the United States. Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate, including:

• United States: server hosting, Google Analytics, Google reCAPTCHA, Stripe, WHMCS.
• Libya: NIC.LY registry (Registrant Data submission and public WHOIS/RDAP publication).
• Other jurisdictions: where our third-party service providers (PayPal, Zendesk, Stripe, and our KYC provider) maintain their infrastructure.

If you are located in the EEA, UK, or Switzerland, your data may be transferred to countries that do not have equivalent data protection laws. For transfers to our service providers, we rely on the following safeguards: (a) Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable; (b) the UK International Data Transfer Agreement (IDTA), where applicable; (c) the service provider’s own data protection certifications and commitments. The transfer of Registrant Data to NIC.LY in Libya is necessary for the performance of your contract with us, because the .LY registry is located in Libya and a .LY domain cannot be registered without it. Once published by NIC.LY through WHOIS and RDAP, Registrant Data is accessible worldwide. You may request information about the specific safeguards applied to your data by contacting [email protected].

7DATA RETENTION§

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Information: retained for the duration of your Account and for 12 months after Account termination, to allow for reactivation and to address post-termination inquiries.
• Domain Registrant Data: retained for the duration of the domain registration and as required by NIC.LY regulations. Registrant Data published by NIC.LY, and any copies made by third parties from public WHOIS or RDAP services, are outside our control and may persist after your registration ends.
• Transaction and Billing Records: retained for a minimum of 7 years for tax, accounting, and legal compliance purposes.
• Affiliate Program Records: referral, commission, and payout records are retained as Transaction and Billing Records.
• Support Communications: retained for 24 months after the last interaction, or as required for ongoing dispute resolution.
• Server Logs: retained for up to 12 months for security and diagnostic purposes.
• KYC Verification Data: we retain only the verification result and reference identifier. Identification documents, facial images, and biometric data are retained by the third-party KYC provider in accordance with its retention policy and applicable law. We do not store copies of them.
• Analytics Data: aggregated and anonymized data may be retained indefinitely.

When personal information is no longer required, we will securely delete or anonymize it. Information stored in backup archives will be securely isolated and deleted when the backup cycle completes.

8DATA SECURITY§

We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit (TLS/SSL), access controls, two-factor authentication for Accounts, and regular security monitoring. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. Transmission of personal information to and from the Site is at your own risk. Registrant Data published by NIC.LY through WHOIS and RDAP is public and is outside the scope of our security measures.

9CHILDREN’S PRIVACY§

The Site and Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will deactivate the Account and take reasonable measures to promptly delete such data. If you believe we have collected data from a child under 18, please contact us at [email protected].

10YOUR PRIVACY RIGHTS§

10.1General Rights§

Depending on your location, you may have the following rights regarding your personal information:

• Right of Access: request a copy of the personal information we hold about you.
• Right to Rectification: request correction of inaccurate or incomplete information.
• Right to Erasure: request deletion of your personal information, subject to legal obligations and legitimate business needs. Deleting Registrant Data requires deleting or transferring the Domain Name, and we cannot delete Registrant Data already published by NIC.LY or copied by third parties from public WHOIS or RDAP services.
• Right to Restrict Processing: request that we limit how we process your data in certain circumstances.
• Right to Data Portability: request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: object to processing based on legitimate interests.
• Right to Withdraw Consent: where processing is based on consent, withdraw at any time without affecting the lawfulness of prior processing.
• Right to Human Review: request review by a member of our staff of an automated identity verification result, as described in Section 2.4.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days, or within any longer period permitted by applicable law. We may need to verify your identity before processing your request.

10.2Account Management§

You may review and update your Account information at any time by logging into my.reg.ly. To terminate your Account, contact [email protected]. Upon termination, we will deactivate your Account and delete your information from active databases, subject to retention obligations described in Section 7.

10.3Opting Out of Communications§

We send only transactional and service-related communications (invoices, renewal reminders, security notices, terms updates). These are necessary for the administration of your Account and cannot be opted out of while your Account is active. We do not send marketing emails or newsletters.

10.4Cookie Preferences§

You may manage cookie preferences through your browser settings as described in Section 5.3.

11DO-NOT-TRACK SIGNALS§

There is no uniform technology standard for recognizing Do-Not-Track (DNT) browser signals. We do not currently respond to DNT signals. If a standard is adopted that we must follow, we will update this Privacy Policy accordingly. Because we do not sell or share personal information, Global Privacy Control (GPC) signals do not change how we process your information.

12REGION-SPECIFIC PRIVACY RIGHTS§

12.1European Economic Area, United Kingdom, and Switzerland§

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection (FADP), including the rights described in Section 10.1. You also have the right to lodge a complaint with your local data protection supervisory authority:

• EEA: https://edpb.europa.eu/about-edpb/about-edpb/members_en
• UK: https://ico.org.uk/make-a-complaint/
• Switzerland: https://www.edoeb.admin.ch/edoeb/en/home.html

12.2California Residents (CCPA/CPRA)§

If you are a California resident and the CCPA applies to our processing of your personal information, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected:

Your CCPA/CPRA rights include:

• Right to Know: what personal information we collect, use, disclose, and sell.
• Right to Delete: request deletion of your personal information, subject to exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: we do NOT sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: we use sensitive personal information only for purposes the CPRA permits without offering a right to limit, namely providing the Services, securing your Account, and verifying your identity. We do not use it to infer characteristics about you.
• Right to Non-Discrimination: we will not discriminate against you for exercising your rights.

To exercise your rights, contact [email protected]. We will verify your identity and respond within 45 days (extendable by 45 days with notice). You may designate an authorized agent to make requests on your behalf; agents must provide proof of authorization.

We have not sold or shared personal information in the preceding 12 months, and we will not do so.

12.3Canadian Residents (PIPEDA)§

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access, correct, and withdraw consent for the collection and use of your personal information. To exercise your rights, contact [email protected]. We will respond within the time required by PIPEDA.

13PUBLIC REGISTRANT DATA (WHOIS AND RDAP)§

As an accredited registrar under NIC.LY, we are required to submit Registrant Data to the NIC.LY registry for every domain registered through our Services. This data includes your name, organization (if any), address, email address, and phone number. Providing Registrant Data is a contractual requirement for registering a .LY domain; if you do not provide it, we cannot register the domain.

13.1Public Display of Registrant Data§

Registrant Data submitted for a .LY domain is published by NIC.LY and is publicly accessible through its WHOIS and RDAP services and any other directory services the Registry operates. NIC.LY is an independent controller of the Registrant Data it receives and publishes. We do not control the Registry’s WHOIS or RDAP services and are not responsible for any access to or use of Registrant Data made publicly available by the Registry, including collection, copying, or archiving by third parties.

13.2No Privacy, Redaction, or Proxy Service§

We do not provide WHOIS or RDAP privacy, redaction, or proxy registration services for .LY domains. This applies to all registrants, regardless of country or jurisdiction, including registrants located in the European Economic Area, the United Kingdom, and Switzerland.

Registrant Data submitted for .LY domain registration is provided to NIC.LY and should be considered public information. You should register a .LY domain on the understanding that the Registrant Data you provide will be publicly displayed through NIC.LY’s WHOIS, RDAP, or other registry-operated directory services.

If NIC.LY redacts, withholds, or limits the public display of any Registrant Data, such action is determined and implemented solely by NIC.LY. It is not a privacy service provided by reg.ly, and we do not guarantee its availability, scope, or continuation.

13.3Your Choice Before Registering§

Registration, renewal, or transfer of a .LY domain requires Registrant Data to be submitted to NIC.LY. Before proceeding, you should understand that this information will be publicly accessible through Registry-operated WHOIS, RDAP, or other directory services and that reg.ly does not provide a privacy or proxy service to prevent such publication.

If you do not wish to provide Registrant Data under these conditions, you should not register, renew, or transfer a .LY domain through our Services.

By registering, renewing, or transferring a .LY domain through our Services, you acknowledge that Registrant Data must be submitted to NIC.LY and will be publicly displayed through NIC.LY’s WHOIS, RDAP, or other registry-operated directory services, as described in this Section. You further acknowledge that reg.ly does not provide or guarantee WHOIS/RDAP privacy, redaction, or proxy protection for .LY domains.

Where a domain is legitimately registered on behalf of an organization or company, the organization’s applicable contact information may be used where permitted, provided that the information is accurate and the designated email address and telephone number are valid and accessible for official communications.

13.4Registrant Data Accuracy§

You are responsible for ensuring that Registrant Data is accurate, current, and complete, and for promptly updating it when it changes. Providing false, misleading, or inaccurate Registrant Data, including in order to avoid public display, may result in suspension or cancellation of your domain by the Registry or by us, as described in our Terms and Conditions.

13.5Changes to Registry Practices§

NIC.LY may change its WHOIS, RDAP, data-publication, or privacy practices at any time, with or without notice to us. We may update this Privacy Policy to reflect such changes, but we are not obligated to monitor or report on the Registry’s practices. Any statement in a previous version of this Privacy Policy that we apply WHOIS privacy redaction for any group of registrants is withdrawn and no longer applies.

14THIRD-PARTY LINKS AND SERVICES§

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of every site you visit.

15CHANGES TO THIS PRIVACY POLICY§

We may update this Privacy Policy from time to time. The updated version will be indicated by the “Effective Date” at the top of this page, and posting the updated version on the Site constitutes notice of the changes. For material changes, we may, at our discretion, also provide notice by other means, such as a notice on the Site or an email to the address associated with your Account, but we are not obligated to do so except where required by applicable law. It is your responsibility to review this Privacy Policy periodically. Your continued use of the Site or Services after the updated Privacy Policy becomes effective constitutes your acceptance of the changes.

15.1Previous Versions§

Previous versions of this Privacy Policy are archived below for reference only. They are no longer in effect and have been superseded by this Privacy Policy.

• Privacy Policy in effect from April 5, 2026 to September 26, 2026

16CONTACT US§

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Company: NetPro Ltd., trading as reg.ly / REGLY

Email: [email protected]

Website: https://reg.ly

We aim to respond to privacy-related inquiries within 30 days, or within any period required by applicable law.

END OF PRIVACY POLICY