1. About This Policy
This policy explains how the operator of RobotBuying.com handles personal data when you visit this informational website, contact us about a domain, or sign a sale agreement after an inquiry. Other domain names may point or redirect to this website; this policy applies however you reach it. The website provides an email link, not an online inquiry form, account service, or checkout.
2. Who Handles Your Data
The site operator is responsible for deciding how visitor and inquiry data, and the sale-agreement details in section 3.5, are used (the data controller). The escrow agent and the registrar for a sale decide how they use the data they receive, under their own privacy notices. For privacy questions or rights requests, email domains@robotbuying.com.
3. Information Received
3.1 Email Inquiries
Clicking the email link opens your email application. If you send a message, the operator and email service receive your email address, any name or contact details you include, your message and attachments, and email delivery information. Providing an inquiry is voluntary and is not required by law or by these website terms. Without a reply address and enough information about your request, the operator may be unable to respond.
Please send only information relevant to the domain inquiry. Do not send passwords, payment-card details, identity documents, or sensitive personal information in an initial message.
3.2 Website Access Data
When your browser requests a page or file from this website, the web server automatically records standard technical information. This can include your IP address, the date and time, the page or file requested, whether the request succeeded, the amount of data sent, the referring page where your browser supplies it, your browser's user-agent string (which names the browser and operating system), and related security information. IP addresses and related logs can be personal data even when the operator does not know your name.
These records are used only to deliver the website, to keep it and its server secure (for example, to detect and block attacks or abuse), to find and fix problems, and for the basic statistics described below. They are not used for marketing or to build profiles. An individual record is examined only when needed, for example to investigate abuse or a fault or because the law requires it, and records are not combined with other information to identify a visitor except for such an investigation or legal requirement.
Hosting provider. The website is served from a hosting account with hosting.com, which stores and processes the server logs on the operator's behalf. As checked on September 3, 2026, hosting.com's Service Terms and Company Details pages name A2 Hosting, LLC, a Delaware limited liability company trading as hosting.com, as the company the operator contracts with, and its privacy policy names Hosting Holding Germany BidCo GmbH, Kennedy-Ufer 11, 50679 Cologne, Germany, as its representative in the EU and the EEA. At that date hosting.com did not publish a data-processing agreement; its help pages say it supplies one on request through a support ticket, and the operator has requested one that covers the server logs. hosting.com's privacy policy is on its own website.
How long logs are kept. In the hosting account, as checked on September 3, 2026, the raw access log is processed and archived every 24 hours and each archived copy is deleted after one day, so an entry normally remains there for no more than about two days. The operator keeps no other copy unless one is needed to investigate an incident; such a copy is deleted when the investigation and any related legal hold end. How long hosting.com keeps its own server-level copies has not been verified. Section 8 gives the retention period for server logs.
Statistics from the logs. hosting.com runs AWStats, a program that turns the server logs into summary statistics, for this website's domain, and, as checked on September 3, 2026, it cannot be switched off from the hosting account. Its reports show totals such as page requests per day, browsers and referring pages, may estimate visitor numbers and approximate locations from IP addresses, and may list the IP addresses that sent the most requests. These statistics are used only to check that the website works and to spot abuse, not to identify, contact or profile anyone.
If you reach this website through another domain name, the registrar, DNS, or redirect service that forwards that name may also receive and log your request.
3.3 Features That Stay in Your Browser
Some website features work only on your device. The website does not receive what you do with them:
- Copy address: the button places the contact email address on your clipboard. It does not read your clipboard.
- Dark mode switch: see section 7.
3.4 People Under 18
This site is intended for people aged 18 or older and does not ask children to provide personal data. If you believe a person under 18 has sent personal data, contact the privacy email above so that appropriate steps can be taken to remove information that is not needed for a legal or security reason.
3.5 Sale Documents
If an inquiry leads to a sale, the sale agreement records each party's name, identification or company number, address and email address, the domain name, the price and the payment arrangements, and the name, signature and signing date of each person who signs it. These details are used to identify the parties, perform the agreement, meet tax and record-keeping obligations and handle any dispute. The details each recipient needs are shared with the escrow agent named in the agreement so that it can hold and release the payment, with the registrar handling the transfer, and with any electronic-signature service used to sign the agreement. Sale records are kept as described in section 8.
4. Purposes and Legal Bases
Where the EU GDPR or UK GDPR applies, the bases for processing depend on the purpose:
- General inquiries and correspondence: legitimate interests in answering messages, maintaining a record of discussions, and managing domain inquiries.
- Steps toward a possible contract: where you ask for steps necessary to enter a contract with you, processing necessary for those steps. For contacts acting on behalf of an organisation, the basis is the legitimate interest in communicating with that organisation.
- A sale agreement: processing necessary to perform the agreement with you. For the records that tax and accounting law requires, the basis is compliance with a legal obligation where that obligation arises under EU or UK law, and otherwise the legitimate interest in meeting the tax and accounting obligations that apply to the operator. For a person who signs on behalf of an organisation, the basis is the legitimate interest in concluding and performing the agreement with that organisation.
- Website operation, security, and basic hosting statistics: legitimate interests in delivering a reliable website, understanding aggregate usage, detecting faults, and preventing abuse. These interests must be balanced against individuals' rights.
- Legal requirements: compliance with a legal obligation where applicable; maintaining information necessary to establish, exercise, or defend legal claims may instead rely on legitimate interests.
The website does not use automated decision-making or profiling to make decisions with legal or similarly significant effects. Sending an inquiry does not subscribe you to marketing.
5. Recipients
Personal data may be handled by website hosting and email service providers, and by the registrars, DNS, or redirect services for domain names that point to this website, so they can deliver, secure, and support those services. The hosting provider is hosting.com, operated by A2 Hosting, LLC (section 3.2). If an inquiry leads to a sale, the details in section 3.5 that each recipient needs are shared with the escrow agent named in the sale agreement, the registrar handling the transfer, and any electronic-signature service used to sign the agreement. Relevant information may also be disclosed to professional advisers or competent authorities where needed for legal advice, legal obligations, or legal claims. Disclosure is limited to what is necessary for the relevant purpose.
The operator does not sell inquiry or visitor personal data or share it for cross-context behavioural advertising. If an inquiry progresses to a sale, information about any other transaction providers and necessary processing should be supplied before those services are used.
6. International Processing
This website is hosted in the United States, and inquiries may be handled from another country. Website-access, inquiry and sale data may therefore be processed outside your country, where privacy protections can differ. Email-service processing locations depend on the provider used, and the locations for sale data depend on the escrow agent, registrar and any electronic-signature service used.
Where EU or UK restrictions on international transfers apply, a transfer must meet the applicable legal requirements, such as a relevant adequacy decision or appropriate safeguards. Visiting this website or sending an inquiry is not relied on as consent to an international transfer. Contact domains@robotbuying.com to ask about processing destinations and to request details or a copy of any safeguards applicable to your data.
7. Cookies, Browser Storage and Tracking Signals
The website's pages do not set cookies, use sessionStorage, embed advertising or analytics tools, or load fonts from external font services. If you turn on the Dark mode switch, your browser keeps that choice (the value dark) in localStorage so other pages open in the dark theme too; it is not sent to the website's server. Server access logs are separate from browser storage. See the Cookie Policy for details, including how to remove the theme preference and storage left by an older version of the site.
The website itself does not track visitors over time or across other websites and does not let third parties do so through its pages. Services outside the website, such as a registrar or redirect service for another domain name (section 3.2), have their own practices. It therefore has no tracking to switch off in response to Do Not Track or Global Privacy Control signals, and it works the same whether or not your browser sends them.
8. Retention
- Routine inquiry correspondence: the retention period is generally up to 18 months from receipt.
- Routine server logs and identifiable hosting statistics: the retention period is up to 90 days.
- Sale records: a signed sale agreement and the records of the sale, including an agreement that was ended or cancelled, are kept for seven years after the end of the tax year in which the sale was completed, ended or cancelled, or for longer where tax and accounting law requires it.
Relevant records may be kept longer where needed for an ongoing inquiry, a legal obligation, or the establishment, exercise, or defence of a legal claim. The period depends on the unresolved matter or applicable legal requirement; unrelated information should not be retained for that reason.
Information no longer needed is to be deleted from active systems. Backup copies may remain until the applicable backup rotation expires and should not be used for unrelated purposes. Contact the privacy email for information about retention affecting your inquiry.
9. Security
Personal data is protected with technical and organisational measures appropriate to the limited information involved, including limiting access to inquiry email and hosting accounts to those who need it. These measures reduce risk but cannot remove it, and ordinary email is not always encrypted in transit or end to end, so please do not send sensitive information. If a security incident affects your personal data, you and the relevant authority will be notified where the law requires it.
10. Your Rights and Requests
Your rights depend on the law that applies and may include access to your data, correction of inaccurate or incomplete data, deletion, and restriction of processing. Where applicable, you may request a portable copy of data you provided if it is processed automatically on the basis of consent or a contract. If a particular activity relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.
Your Right to Object
Where EU or UK GDPR applies, you may object to processing based on legitimate interests for reasons relating to your particular situation. That processing must stop unless there are compelling legitimate grounds that override your interests and rights, or the data is needed for legal claims. You may object to any direct marketing at any time.
How to Make a Request
Email domains@robotbuying.com with your request, including a request under the EU or UK GDPR. Only information reasonably needed to identify the relevant records and verify your identity will be requested. Please do not send an identity document unless specifically needed and requested.
Requests will be handled without undue delay and within the applicable statutory deadline. Under the EU GDPR, this is normally one month from receipt. If complexity or the number of requests requires an extension, up to two further months are permitted, with notice and reasons within the first month. Any different deadlines or permitted extensions under other applicable laws will be followed. Requests are generally free; fees or refusal are limited to circumstances allowed by law and must be explained.
Complaints
You can send a privacy complaint to domains@robotbuying.com. It will be acknowledged within 30 days of receipt and answered without undue delay.
You may also complain to the relevant data protection authority without contacting the operator first. Where EU GDPR applies, this includes the authority in the country of your habitual residence, place of work, or the alleged infringement; see the EEA supervisory authorities. In the UK, contact the Information Commissioner's Office. Elsewhere, you can contact the data protection authority where you live.
11. Other Applicable Privacy Laws
If a US state or another jurisdiction's privacy law applies to the operator and your data, you may have additional rights. For example, where the CCPA applies, California residents may have rights to know, access, delete, or correct personal information, and to exercise applicable opt-out rights without unlawful discrimination. Contact the privacy email to make a request or ask about an authorised agent. The categories of personal information collected are identifiers (email address and IP address and, if an inquiry leads to a sale, name, postal address and identification or company number), internet activity (server-log data) and the contents of inquiries, from you and your browser. If an inquiry leads to a sale, they also include signatures and commercial information (the domain, price and payment arrangements) recorded in the sale agreement (section 3.5), from the parties. These categories are used for the purposes in section 4 and kept for the periods in section 8. An identification number that is a driver's licence, state ID or passport number is sensitive personal information; it is used only to identify the parties and perform the agreement, not to infer characteristics about anyone. No personal information is sold or shared for cross-context behavioural advertising, including that of consumers under 16. This section does not assert that every such law applies to this website.
12. Changes
Changes to this policy will be posted with an updated date. If processing changes materially, additional notice or consent will be provided where required by applicable law. A policy update does not itself authorise a new use of existing personal data.