Privacy Policy
WDM — Web Domain Manager ("WDM", "we", "us" or "our") respects your privacy. This Privacy Policy explains how we collect, use, store and protect information when you use the WDM website, application and related services.
WDM is a domain management platform for authorised users. Access to the WDM dashboard is restricted and is not required to view this public website.
1. Information we collect
Depending on how you use WDM, we may process the following categories of information:
- Account and contact information — such as your name, email address and information needed to administer your WDM account.
- Domain and portfolio information — such as domain names, registrar information, domain status, DNS-related information, renewal information, search criteria and portfolio notes that you or an authorised administrator provide or make available to WDM.
- Google authorisation information — if you connect Google services, WDM may receive information needed to authenticate and maintain the authorised connection, including OAuth tokens and identifiers associated with the connected Google Ads account.
- Google Ads information — where authorised, WDM may access Google Ads account information and Google Ads API data required for features such as keyword research, keyword planning and related commercial-intelligence functions.
- Technical and usage information — such as IP address, browser and device information, security logs, timestamps and information about how the service is accessed.
- Communications — information you provide when contacting us for support or other service-related purposes.
2. How we use information
We use information only for legitimate purposes connected with operating WDM and providing its functionality, including to:
- provide, operate and maintain WDM;
- authenticate authorised users and maintain account security;
- manage and monitor domain portfolios and related information;
- provide domain research, intelligence, reporting and related features;
- provide Google Ads-related functionality when you have authorised the relevant Google connection;
- protect WDM against fraud, abuse, unauthorised access and security incidents;
- respond to support requests and communicate about the service;
- maintain, troubleshoot and improve the reliability and functionality of WDM; and
- comply with applicable legal and regulatory obligations.
3. Google API and Google Ads data
WDM may use the Google Ads API and Google's OAuth 2.0 authorisation system. Google OAuth allows you to authorise WDM to access specified Google Ads functionality without giving WDM your Google account password.
Depending on the functionality enabled, WDM may access information such as Google Ads customer/account identifiers, account-related information and keyword-planning or keyword-metric data. The precise information requested will depend on the Google Ads API scopes and services actually used by WDM.
How Google data is used
Google API data is used to provide the WDM feature for which you authorised access, such as domain and keyword research, commercial-intelligence analysis and related reporting.
Sharing and transfer of Google data
WDM does not sell Google API data. WDM does not transfer Google API data to advertising platforms, data brokers or information resellers, and does not use Google API data for personalised advertising or retargeting.
WDM may disclose information where necessary to comply with applicable law, protect the security of the service, prevent fraud or abuse, or where you have expressly authorised a disclosure. Service providers may process information on our behalf where necessary to operate the service, subject to appropriate confidentiality and security obligations.
Storage and retention of Google data
We retain Google API data only for as long as reasonably necessary to provide the authorised WDM functionality, comply with applicable law, maintain security and meet applicable Google API requirements. Where Google API rules or cache-control requirements specify a shorter period, those requirements take precedence.
When you revoke an authorisation, or when the data is no longer required for the authorised feature, we will take reasonable steps to stop using the associated access and delete or securely dispose of stored credentials and data when no longer required, subject to legal or legitimate operational retention requirements.
Google API policy
WDM's use of information received from Google APIs is intended to comply with the applicable Google API Services User Data Policy, Google Ads API policies and their Limited Use requirements where applicable.
4. Legal basis for processing
Where the UK GDPR or EU GDPR applies, we process personal data using one or more lawful bases depending on the circumstances, including:
- Contract — where processing is necessary to provide the service you have requested.
- Legitimate interests — where necessary to operate, secure and improve WDM, provided those interests are not overridden by your rights and interests.
- Consent — where we ask for consent, including where required for optional cookies or third-party connections.
- Legal obligation — where processing is necessary to comply with applicable law.
5. Cookies and similar technologies
The public WDM website is designed to operate without advertising cookies or cross-site tracking. WDM may use strictly necessary cookies or similar technologies where required for authentication, security, session management or other essential functionality.
If optional analytics, advertising or other non-essential technologies are introduced in the future, this policy will be updated and any consent required by applicable law will be obtained before those technologies are used.
6. Data security
We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse, alteration or disclosure. Access to administrative systems is restricted to authorised persons, and credentials and authentication tokens are intended to be stored and handled using appropriate security controls.
No internet-based service can guarantee absolute security. If we become aware of a security incident affecting personal data, we will respond in accordance with applicable legal requirements.
7. Data sharing and service providers
We do not sell or rent your personal information. We may use carefully selected service providers for infrastructure, hosting, security, communications, domain services or other functions required to operate WDM. Such providers receive only the information reasonably necessary for their function and are expected to protect it appropriately.
We may also disclose information where required by law, legal process or a competent authority, or where necessary to protect the rights, property or safety of WDM, its users or others.
8. International transfers
Depending on the services and infrastructure used by WDM, information may be processed in countries outside the country in which you are located. Where applicable, we will use appropriate safeguards for international transfers as required by applicable data-protection law.
9. Your rights
Depending on your location and applicable law, you may have rights including the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of information where there is no lawful reason for us to retain it;
- request restriction of certain processing;
- object to processing based on legitimate interests in appropriate circumstances;
- withdraw consent where processing is based on consent; and
- receive or request portability of certain information where applicable.
To exercise a right or ask a privacy question, contact us using the details below. You may also have the right to complain to the data-protection supervisory authority applicable to you.
10. Account and Google connection revocation
You may stop using WDM at any time. If you have connected a Google account or Google Ads account, you may also revoke WDM's Google authorisation through your Google Account permissions or the relevant Google Ads account controls. Revoking authorisation may prevent WDM from providing features that depend on the connection.
11. Children's privacy
WDM is a business-oriented service and is not directed at children. We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.
12. Changes to this Privacy Policy
We may update this Privacy Policy when the WDM service, applicable law or our data practices change. The revised policy will be published on this page with an updated date. If a change is material, we will provide additional notice where required by law.
13. Contact us
If you have questions about this Privacy Policy, WDM's handling of personal information, or a Google API connection, please contact:
WDM — Web Domain Manager
Email: [email protected]