Last updated: 3 August 2026
Find Cheap Domains is operated by a UK company and is available to visitors around the world. This notice explains how personal information is handled when you browse the website, use its tools, create or access a WordPress reviewer account, submit a review, contact us, follow an affiliate link, permit Google Analytics 4 measurement or interact with a form or account action protected by Google reCAPTCHA v3.
Plain-English summary
WordPress powers reviewer registration and login, so account details and authentication records are processed through our WordPress website and hosting environment. Google Analytics 4 helps us understand website use when permitted by your privacy choices. Google reCAPTCHA v3 protects selected forms and account actions from spam and automated abuse by analysing technical and interaction signals and returning a risk score. Google receives information needed to provide reCAPTCHA, and Google’s Privacy Policy and Terms of Service apply. HTTPS uses SSL/TLS encryption to protect information while it travels between your device and the website. Site tools may process the values you enter and create technical logs, so do not enter passwords, payment-card details or unnecessary personal information. Registrar purchases take place on the registrar’s own website.
At a glance
Find Cheap Domains does not register domains, hold registrar accounts or take payments. Most visitors can read the site without giving us their name or contact details. WordPress processes registration and login information for reviewer accounts. Site tools process the values needed to provide their results, Google Analytics 4 measures website use where permitted by your privacy choices, and Google reCAPTCHA v3 helps protect selected forms and account actions from automated abuse.
Technical and security records are created when the site, its tools or a reCAPTCHA-protected action is used. Contact details are collected for messages and WordPress reviewer accounts, and review content is collected when someone submits it.
GA4 and its non-essential storage are used only where permitted and, where required, after a valid consent choice that can later be changed.
Payments, domain orders, registrar passwords and domain account information are handled by the selected registrar, not Find Cheap Domains.
Rights vary by location. We apply UK data-protection standards and respond to additional local rights where applicable.
Platform and security. Reviewer registration and login are provided through WordPress. Selected forms and account actions are protected by Google reCAPTCHA v3. The website is delivered over HTTPS using SSL/TLS encryption, which protects information in transit but cannot guarantee absolute security.
Controller and scope
Unless another notice says otherwise, FindCheapEverything Ltd determines how and why personal information collected through FindCheapDomains.com is used and is the data controller for that processing.
Find Cheap Domains and FindCheapDomains.com
FindCheapEverything Ltd, Company No. 16467887
The Co Universe Ltd, Company No. 16368736
England and Wales
Registered address: 1st Floor, 36-40 West Parade, Halifax, HX1 2TE, West Yorkshire, United Kingdom.
The website is available internationally. Availability in a country does not by itself mean every local privacy law applies, but we honour rights and obligations that apply to our activities and the person making the request.
Information we collect
We collect information directly from you, through WordPress account and review functions, through site tools, automatically from your browser or device, from Google Analytics 4 where enabled, through Google reCAPTCHA v3 on protected forms and account actions, from people who report or dispute a review, and in limited cases from an affiliate partner after a qualifying referral.
| Category | Examples | How it is obtained |
|---|---|---|
| Contact and correspondence | Name, email address, the contents of a message, attachments and any information voluntarily included in an enquiry, correction request, review report or moderation appeal. | Provided by you through the contact form or another communication channel. |
| WordPress reviewer account data | Genuine first and last name, email address, WordPress user and account identifiers, authentication information such as a password hash or sign-in token, account status, creation and login timestamps, and account preferences where offered. | Provided when a reviewer registers, logs in or manages an account, and generated by the WordPress account and authentication functions used on the website. |
| Review and moderation data | Registrar reviewed, rating, review text, drafts, submission and edit dates, moderation status and reasons, deletion history, conflict-of-interest disclosures, reports, disputes, correspondence and proportionate anti-abuse signals. | Provided by reviewers, reporting people or registrars, and created through manual moderation, account activity and security checks. |
| Public review information | First name and last-name initial, rating, review text, registrar reviewed, and publication or last-edited date. The public name uses a space before the initial, for example Alex S. | Created from the review and account information when an approved review is published. |
| Technical and security data | IP address, browser and device type, operating system, timestamps, requested pages, referring page, error records and security events. | Created automatically by the website, hosting infrastructure, content-delivery network or security tools. |
| Google reCAPTCHA v3 data | Information may include IP address, browser and device details, page or action context, interaction and timing signals, cookies or similar identifiers, a response token, risk score and verification outcome. | Collected when a protected form, login, registration or other account action loads or is used. Google processes information to assess whether the interaction is likely to be legitimate or automated and returns a score or verification result to the website. |
| Google Analytics 4 and consent data | Pages viewed, website events, session statistics, general navigation, approximate location, browser and device information, referring source, cookie or client identifiers, cookie choices and consent records where GA4 is enabled. | Collected through Google Analytics 4, first-party cookies or similar technologies, subject to the choices and legal requirements that apply. Google receives the technical information needed to provide the analytics service. |
| Site-tool inputs and results | Domain names, extensions, prices, search terms, settings or other values entered into a website tool; the result produced; and associated technical or error information. | Provided when a site tool is used. Depending on the tool, processing may occur in the browser or on the website server, and ordinary technical logs may record the request. |
| Affiliate referral data | The outbound link followed, referral identifier, click time and limited confirmation that a qualifying transaction occurred. A partner may also report product type, order value or commission amount. | Generated when an affiliate link is used and, where applicable, reported by the registrar or affiliate platform. |
| Administrative and legal records | Privacy requests, complaint records, evidence supporting corrections, fraud-prevention records and information needed for accounting or legal obligations. | Created from communications, business records and legal or compliance activity. |
Information we do not receive from ordinary registrar purchases: full payment-card details, registrar passwords, registrar account credentials or the full domain-registration record. These are handled by the registrar under its own privacy notice. We also do not request proof of purchase as a standard condition of submitting a review.
Purposes and lawful bases
Under UK data-protection law, personal information must have a lawful basis. The basis can differ according to the purpose and the circumstances.
| Purpose | Information involved | Lawful basis |
|---|---|---|
| Operate, deliver and troubleshoot the website | Technical, device, log and error information. | Legitimate interests in providing a functional, reliable and accessible website. |
| Protect the website and investigate misuse | IP addresses, security events, logs, account activity and relevant correspondence. | Legitimate interests in network security, fraud prevention and protecting visitors, reviewers and the business; legal obligation where applicable. |
| Prevent spam and automated abuse using Google reCAPTCHA v3 | Technical, device, browser, interaction, action-context, token, score and verification information. | Legitimate interests in protecting forms, accounts, visitors and the website from bots, spam, credential abuse and fraudulent activity; legal obligation where applicable. |
| Create, authenticate and manage WordPress reviewer accounts | Name, email address, authentication information, WordPress user and account identifiers, status and account activity. | Performance of the agreement made under the Terms and Conditions to provide account and review functions; legitimate interests in account administration and security. |
| Verify email addresses, recover account access and send essential service messages | Email address, verification and password-reset records, security events, moderation status and message-delivery records. | Performance of the agreement to provide and secure the account; legitimate interests in preventing unauthorised access and keeping reviewers informed about their account, review or material service changes; legal obligation where applicable. |
| Publish and administer user reviews | Public review information, account identifiers, submission and edit history. | Performance of the agreement to provide the review service requested by the reviewer; legitimate interests in operating a useful and transparent registrar-review service. |
| Moderate reviews, handle reports and prevent manipulation | Review content, moderation records, reports, conflict disclosures, account activity, technical signals and relevant correspondence. | Legitimate interests in publishing genuine reviews, applying standards consistently, preventing fake or incentivised reviews, protecting rights and resolving disputes; legal obligation where applicable. |
| Respond to enquiries, corrections and privacy requests | Contact details, message content, attachments and request records. | Legitimate interests in communicating and maintaining accurate content; legal obligation for statutory privacy requests. |
| Provide and improve site tools | Tool inputs, settings, generated results, technical logs and error information. | Performance of the service requested when you use a tool; legitimate interests in maintaining, securing and improving useful website functions. |
| Measure and improve website use through Google Analytics 4 | Website events, session statistics, approximate location, browser and device information, referral data, analytics identifiers and consent information. | Consent where required for GA4 cookies or similar non-essential technologies; legitimate interests for aggregated or consent-exempt measurement only where applicable law permits it. |
| Attribute affiliate referrals and maintain financial records | Referral identifiers, click data, limited transaction confirmation and accounting records. | Legitimate interests in funding and administering the website; legal obligation for tax and accounting records. Consent is used where tracking technologies require it. |
| Establish, exercise or defend legal rights | Relevant correspondence, logs, transaction records and complaint information. | Legitimate interests and legal obligations. |
Consent can be withdrawn. Where processing relies on consent, including GA4 analytics storage where applicable, withdrawing it does not affect processing that was lawful before withdrawal. Use the website’s cookie settings control to change your choice. Some strictly necessary WordPress, reCAPTCHA, security and consent-management processing will continue because the requested account and website functions cannot operate securely without it.
WordPress reviewer accounts and public reviews
Reviewer registration and login are provided through WordPress. A review is submitted for possible public publication. We require a genuine first and last name, but publish only the first name and last-name initial alongside an approved review.
| Topic | Privacy approach |
|---|---|
| Creating a WordPress account | People may create a reviewer account through the website’s WordPress registration and login functions so they can submit registrar reviews and, where the account tools permit, view their submission status, edit or delete reviews and manage or close the account. Creating an account does not guarantee that a review will be approved or published. |
| Information required at registration | The WordPress registration form requires a genuine first and last name, an email address and the authentication information needed by the sign-in method offered. Required and optional fields should be identified on the form. We do not require purchase evidence to open an account or submit a review. |
| WordPress authentication and cookies | WordPress processes login credentials, sign-in status, password-reset or verification tokens and security records. WordPress stores account passwords as protected hashes rather than readable passwords. WordPress may set strictly necessary cookies or similar storage to test cookie support, keep an authenticated session active, remember account settings and protect the login process. |
| Email verification and account recovery | We may use the email address to verify the account, provide password-reset or sign-in links, confirm security-sensitive changes and help recover access. Verification and recovery links or tokens are intended to expire after a short security period or after use. |
| Essential account messages | We may send non-marketing messages about account security, review submission or moderation outcomes, reports or disputes, changes requested by the reviewer, account restrictions or closure, and material changes to the review service, Terms and Conditions or this notice. These messages are part of operating the account and are separate from optional marketing. |
| Account visibility | The reviewer account itself is not intended to be a public profile. Other users and registrars do not receive access to private account details. Only information included in an approved public review is displayed publicly. |
| Public information | An approved review may display the reviewer’s first name and last-name initial, rating, review text, registrar reviewed, and publication or last-edited date. The public name is formatted with a space before the initial, for example Alex S. |
| Private account information | The full surname, email address, authentication information, private account identifiers, login and security records, and private moderation correspondence are not displayed publicly. |
| No proof of purchase | We do not request purchase evidence as a standard review requirement. Reviews are therefore not labelled as verified purchases. Reviewers should not send invoices, payment details, domain credentials or other unnecessary documents. |
| Manual moderation | Reviews are manually checked before publication. Authorised staff or service providers may access the review, account identifiers, moderation history and proportionate technical signals where needed to approve, reject, redact, investigate or remove content. Automated security or spam signals may support checks, but publication decisions are manually reviewed. |
| Reports and disputes | When a review is reported or disputed, we may use the review, relevant account and moderation records, the report, supporting evidence and correspondence to investigate. We may share the substance of a concern or relevant review content with the reviewer, reporting person or registrar where reasonably necessary, but do not routinely disclose the reviewer’s email address, full surname or credentials. |
| Public reach and search engines | Published review information can be read, copied or indexed by website visitors, search engines and other third parties. When we remove a review, copies may remain temporarily in search caches, archives, screenshots or third-party records that we do not control. |
| Account restrictions and suspension | Where an account is restricted, suspended or closed for suspected manipulation, security concerns or breaches of the Terms and Conditions, we may retain the account status, relevant identifiers, review and moderation history, technical signals and correspondence for the period reasonably needed to investigate, handle an appeal, prevent repeat abuse or deal with legal claims. |
| Editing, deletion and account closure | A reviewer may edit or delete their review and may request account deletion. Edited reviews are moderated again. When account deletion is completed, sign-in access ends and reviews linked to the account are removed from public view. The account and removed reviews may not be recoverable. Remaining account, security, moderation and backup records are deleted or anonymised under the retention rules below, unless limited retention is necessary for fraud prevention, legal obligations or legal claims. |
| Information shown during sign-up | The account-registration and review-submission interfaces should provide a short privacy notice and a link to this policy before information is submitted, including a clear warning that approved review content and the first-name-plus-initial display name will be public. |
| Marketing and sale | We do not sell reviewer-account information or provide a reviewer’s email address or full surname to registrars for their marketing. Separate consent would be requested before using account details for optional direct marketing. |
Keep reviews focused on the registrar experience. Do not include passwords, payment-card information, private correspondence, full names of staff or customers, health information, political opinions or other unnecessary sensitive or confidential information. We may redact or remove such material.
Cookies, WordPress, GA4, reCAPTCHA and affiliate links
Cookies and similar technologies can keep the website secure, support WordPress registration and login, protect selected forms and account actions through Google reCAPTCHA v3, remember privacy choices, measure website use through Google Analytics 4 and attribute an affiliate referral.
WordPress and security services may use strictly necessary cookies or similar storage to test cookie support, authenticate logged-in reviewers, maintain account sessions, remember account settings, prevent misuse and remember a privacy choice. These may operate without consent where the law permits because the requested function cannot work properly without them.
GA4 helps us understand visitor numbers, sessions, pages and events, approximate location, referring sources, and browser or device information. Where analytics storage is enabled, GA4 may use first-party cookies including _ga and a property-specific _ga_<container-id> cookie to distinguish users and maintain session state.
An outbound link may contain a referral identifier. A registrar or affiliate platform may set its own cookies after you follow the link and will process information under its own privacy and cookie notices.
Google reCAPTCHA v3: selected forms and account actions are protected by reCAPTCHA v3. It normally runs in the background and returns a risk score rather than displaying a traditional challenge. Google may receive technical, browser, device, page-context and interaction information. Google states that reCAPTCHA sets the necessary _GRECAPTCHA cookie when it is executed for risk analysis; depending on the domain and implementation, other Google cookies or similar identifiers may also be present. We use the result to detect spam, bots and automated abuse. Where reCAPTCHA is necessary to secure a requested form or account action, it may operate without optional analytics consent where the law permits. Google’s Privacy Policy and Terms of Service apply.
GA4 and consent: non-essential analytics storage is controlled through the website’s consent mechanism where required. We use GA4 to understand and improve website use, not to receive registrar passwords or payment-card details. Google processes analytics information to provide the service and may process it outside the United Kingdom. Google states that GA4 does not log or store IP addresses, although IP information is processed during collection to derive information such as approximate location.
Managing cookies: use the cookie settings control made available on the website to accept, reject or change non-essential choices. Browser controls can also delete or block cookies, although blocking essential WordPress, reCAPTCHA or other security storage may prevent protected forms, registration, login or account functions from working correctly. You can also read Google’s information about Analytics data safeguards.
Find Cheap Domains does not control cookies set on a registrar's website after you leave FindCheapDomains.com. Read the registrar or affiliate platform's privacy and cookie information before completing a purchase.
Sharing and international transfers
We disclose personal information only where it is reasonably necessary for the purposes described in this policy, to comply with law or to protect legal rights.
Processing outside the UK. Google and some hosting, security, support, email, consent-management and affiliate service providers operate internationally, so information may be stored in or accessed from another country. Where UK transfer rules apply, we use an applicable adequacy decision, recognised contractual safeguards such as the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism.
Where EU or EEA data-protection law applies, relevant transfer safeguards are used for transfers outside the EEA. No transfer mechanism can remove every risk, but providers and safeguards are reviewed according to the nature of the information and service.
Retention and security
Retention depends on the purpose, sensitivity, legal requirements and whether the information is needed to resolve a dispute or protect the website.
| Record | Typical period or criterion |
|---|---|
| Contact enquiries and correction requests | Kept while the matter is active and normally for up to 24 months afterwards, unless a longer period is needed for a dispute, repeated enquiry or legal requirement. |
| Unverified registrations | Account-registration records that are not verified or completed are normally deleted or anonymised within 30 days, unless they are needed for security, abuse prevention or an active support request. |
| Verification and recovery records | Verification and password-reset links or tokens are kept only until they expire or are used. Limited delivery, security and audit records may be retained with account or security logs. |
| Active reviewer accounts | Account information is kept while the account remains active and as needed to provide review functions, secure the account and resolve active issues. |
| Inactive accounts without published reviews | An account with no published review and no sign-in or other meaningful activity for 24 months may be deleted or anonymised after reasonable notice, unless retention is needed for security, abuse prevention, a dispute or a legal requirement. |
| Published reviews | Kept and displayed while the reviewer chooses to keep the review published, unless it is removed under the Terms and Conditions. A review is removed from public view when the reviewer deletes it or deletes the associated account. |
| Deleted reviews and accounts | Removed from public view after deletion is processed. Remaining operational copies are deleted or anonymised after normal deletion and backup cycles, except for limited records needed to prevent abuse, comply with law or establish, exercise or defend legal claims. |
| Rejected review submissions | The rejected submission and associated moderation record are retained for one year from the rejection date and are then deleted. |
| Review reports, disputes and enforcement records | Kept while the matter is active and normally for up to 24 months after closure. A longer period may apply for repeated manipulation, account restrictions, threatened or actual legal claims, or a legal requirement. |
| Server, error and security logs | Normally retained for up to 12 months, with longer retention only where needed to investigate a security event, abuse or legal claim. |
| reCAPTCHA verification and anti-abuse records | reCAPTCHA response tokens are short-lived and are validated promptly. Limited verification outcomes, risk decisions and associated security records may be retained with server or account-security logs where needed to prevent abuse or investigate an incident. Google determines retention for information it processes under its own terms and policies. |
| Cookie preferences and Google Analytics 4 | Consent records are kept for the period needed to remember and demonstrate the privacy choice. GA4 cookies and user-level or event data are retained according to the durations configured in the website tag, consent interface and GA4 property, subject to browser limits; they are then deleted, reset or aggregated as appropriate. |
| Site-tool requests | Tool inputs and results are kept only where needed to provide the requested function, troubleshoot errors, protect the service or improve the tool. Ordinary server or security records follow the log periods described above. |
| Affiliate and accounting records | Kept for the period required for reconciliation, tax, accounting and legal obligations, commonly up to six years after the relevant financial period. |
| Privacy requests and legal records | Kept long enough to demonstrate compliance, complete the request and manage applicable limitation periods. |
Security cannot be guaranteed absolutely. The website uses HTTPS with SSL/TLS encryption to protect information while it travels between your browser and the website. We also use reasonable technical and organisational measures appropriate to the information and service, including access restrictions, protected WordPress authentication records, Google reCAPTCHA v3 on selected forms and account actions, software and plugin maintenance, service-provider controls, backups, monitoring and security logging. Encryption in transit does not remove every security risk. Please do not send passwords, full payment details or unnecessary sensitive information through forms or site tools.
Personal-data breaches. We assess suspected breaches and take steps to contain and investigate them. Where the law requires it, we notify the ICO and, if a breach is likely to result in a high risk to affected people, notify those people without undue delay.
Your privacy rights
We may need to confirm identity before completing a request. Rights are not absolute, and an exemption or competing legal obligation may apply.
United Kingdom and, where applicable, EU/EEA rights
Depending on the circumstances, you may have the right to be informed, access a copy, correct inaccurate information, request erasure, restrict processing, receive portable data, object to processing and withdraw consent. You may also have rights relating to solely automated decisions.
Find Cheap Domains does not use solely automated decision-making that produces legal or similarly significant effects for visitors.
Review, account and analytics controls. Reviewers can edit or delete their own review and can request deletion of their WordPress reviewer account. Visitors can use the cookie settings control to reject or withdraw consent for GA4 analytics storage where applicable. These controls do not limit statutory privacy rights. Removing a review from FindCheapDomains.com may not immediately remove copies held in search-engine caches, archives, screenshots or third-party records.
Your right to object. Where we rely on legitimate interests, you may object to processing relating to your particular situation. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the information is needed for legal claims. Direct-marketing objections are honoured where applicable.
Visitors outside the UK
Privacy laws in California and other jurisdictions can provide rights to know, access, correct, delete or receive personal information and, in some circumstances, to opt out of sale, sharing or targeted advertising.
Where an applicable US state privacy law covers our processing, eligible residents may exercise the rights provided by that law without unlawful discrimination.
Where legally required and technically applicable, recognised browser-based opt-out preference signals are treated as requests for the browser or device sending the signal.
We do not offer discounts or other benefits in exchange for personal information through FindCheapDomains.com.
If local law grants a privacy right not described here, contact us and identify your country so the request can be assessed.
Children and external websites
The website is intended for people researching domain names and registrar services. It is not designed as a children's service.
We do not knowingly permit children under 16 to create reviewer accounts or submit reviews, and we do not knowingly collect their personal information through ordinary use of the website. A parent or guardian can contact us if they believe a child has submitted information. We may remove the account or review and delete the information unless limited retention is necessary for safety, legal obligations or legal claims.
Links can lead to registrars, affiliate platforms, social networks, regulators and other third parties. Their privacy practices are outside our control.
This notice may be updated when the website, service providers, laws or business practices change. The revised date will be shown on the page.
Contact and complaints
Contact us first so we have an opportunity to investigate and respond. You also have the right to complain to the regulator that applies to you.
Use the Find Cheap Domains contact page and state that the message concerns privacy or personal information. Include enough detail to identify the relevant interaction, but do not send passwords or full payment-card information.
We aim to respond within the period required by applicable law. Complex or repeated requests may take longer where the law permits, and we will explain any permitted extension.
Keeping this notice accurate. We review this policy when analytics, reCAPTCHA, advertising, site-tool, contact, hosting, WordPress account, authentication, moderation, security or affiliate technology changes, or when the user-review process materially changes.