Legal
Privacy Policy
This Privacy Policy explains what information DNinja (“we”, “us”) collects when you visit www.dninja.com, use our client portal, or engage us for domain, hosting, design, or development services — and what we do with that information.
01Information we collect
We collect only what we need to deliver our services and run our business.
Account & billing details
When you become a client, we collect your name, business name, email address, postal address, and phone number. For domain registrations we also collect the contact details required by ICANN and the relevant registry, which may be transmitted to the registry of record.
Service data
To deliver hosting, domain, design, or development work we store project files, configuration, DNS records, credentials you choose to share with us, and the content of communications you send us. We do not access client servers or accounts unless you have asked us to.
Site activity
When you visit our website we receive standard web-server data: your IP address, browser user-agent, the pages you visit, and timestamps. This is used for security, debugging, and aggregate traffic measurement.
02How we use it
- To set up and deliver the services you’ve requested.
- To bill you, send invoices and receipts, and process payments.
- To communicate with you about your account, services, and support tickets.
- To meet legal, tax, and accreditation obligations (including ICANN’s WHOIS requirements for domain registrations).
- To protect our systems and clients from abuse, fraud, and security threats.
- To improve our website and services in aggregate — never to profile you individually for advertising.
03When we share information
We do not sell your personal information. We share it only with the parties needed to deliver what you’ve asked us for, or where the law requires it.
Service providers
We use vetted third parties to operate our infrastructure: domain registrars, cloud and hosting providers, payment processors, transactional email providers, and accounting software. They process data on our behalf, under contract, only for the purpose we’ve given them.
Domain registries
When you register a domain through us, the registrant contact information you provide is transmitted to the relevant registry as required by their policies. Most TLDs offer WHOIS privacy — we apply it by default where available.
Legal requirements
We will disclose information if compelled by a valid legal request from a competent authority, or where disclosure is necessary to protect our rights, your safety, or the integrity of our services.
04Cookies & analytics
Our website uses a small number of essential cookies (for example, to keep you signed in to the client portal) and a privacy-respecting analytics tool that records aggregate page-view counts. We do not use advertising cookies or cross-site trackers.
05Data security
We protect your information with industry-standard measures: encrypted transport (TLS) for all traffic, hashed passwords using a modern algorithm, encrypted backups, role-based access controls, and audit logging on sensitive operations. No system is invulnerable — if a breach affects your data we will notify you without undue delay.
06How long we keep it
We keep account and service records while you are a client, and for as long afterwards as is needed to meet our accounting, tax, and dispute-resolution obligations. Server logs are retained for a short rolling window for security and debugging purposes, then deleted.
07Your rights
Depending on where you live you may have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete information, where we are not required to keep it.
- Export your information in a portable format.
- Object to certain processing, or withdraw consent where it was the basis.
To exercise any of these, contact us at contact[AT]dninja.com. We will respond within a reasonable timeframe.
08International transfers
DNinja operates offices in multiple jurisdictions and uses cloud infrastructure that may store or process data outside your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect your information during international transfers.
09Children’s privacy
Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us their information, contact us and we will delete it.
10Changes to this policy
We may update this Privacy Policy as our services or the law evolves. When we do, we will revise the “Last updated” date at the top of this page. Material changes will also be communicated by email to active clients.
11Contact us
Questions, requests, or concerns about this policy? Reach us at contact[AT]dninja.com, or by post via any of the office addresses listed on our Get in touch page.