Privacy notice

Who is responsible for your information?

Michael Rawson, trading as Exactism, is the controller of personal information described in this notice. Contact: acquisitions@exactism.com. Address: 41 Twyford Road, Twyford, Banbury, Oxon, OX17 3JG.

This notice also applies to standalone domain-for-sale presentation pages operated by Exactism that link to this notice.

Information we may use

We may use business contact information, including a person's name, role, work email address, employer, and other business contact details made publicly available by the organisation or individual; records of correspondence; information about a business and its relationship to a domain name; the public source or webpage from which business contact information was obtained; marketing preferences and suppression records; and records connected with enquiries, negotiations or completed transactions.

Where information comes from

Information may be provided directly by you or obtained from publicly available business sources, such as company websites, contact pages, team or staff pages, public registers, business directories and professional profiles. We may also record the specific public source or webpage from which contact information was obtained. We aim to use only information reasonably necessary for a specific business purpose.

Why we use information

We may use personal information to respond to enquiries; discuss, negotiate and administer domain-name transactions; keep appropriate business and transaction records; protect legal rights and prevent fraud; and, where lawful, make carefully targeted one-off business approaches about a domain name that appears specifically relevant to the recipient's organisation.

Lawful bases

Our lawful basis depends on what we are doing with the information.

Legitimate interests: We may rely on legitimate interests to make carefully targeted, one-off approaches to organisations where a domain name appears specifically relevant to their publicly described activities; to respond to and manage acquisition enquiries and negotiations; and to maintain proportionate business records to protect legal rights, prevent fraud and resolve disputes.

Before using personal information for direct outreach, we consider the relevance of the proposed approach, how the contact information was obtained, the recipient's reasonable expectations, the potential impact on their privacy and whether a less intrusive approach would achieve the same purpose.

Steps before a contract or performance of a contract: Where applicable, we process information to respond to a request, discuss a proposed domain acquisition, take steps at your request before entering into a transaction or perform agreed contractual obligations.

Legal obligations: We may process information where necessary to comply with applicable legal, tax, accounting or regulatory requirements.

Direct marketing and objections

You can object at any time to the use of your personal information for direct marketing. If you ask us not to contact you for marketing, we will stop and may retain the minimum information needed on a suppression list so that your preference is respected in future.

Sharing and service providers

We may use service providers for email, hosting, security, record-keeping, domain transactions and AI-assisted productivity tools used for business research, correspondence and administration. Where personal information is involved, we seek to limit it to what is reasonably necessary. Service providers may process information on our behalf or, for some transaction services, act under their own terms and privacy notices. We do not sell personal information to data brokers or use it for unrelated bulk marketing.

International processing

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we rely on an applicable UK adequacy regulation or approved contractual safeguards. You can contact us for further information about the safeguards used.

Automated decision-making

We do not use solely automated decision-making or profiling that produces legal or similarly significant effects.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including handling an enquiry or transaction, meeting legal or accounting obligations, resolving disputes, and maintaining suppression records. We review information and delete or anonymise it when it is no longer needed.

Your rights

Depending on the circumstances, you may have rights to ask for access to your personal information, correction, deletion, restriction of processing, or to object to processing. The right to object to use of personal information for direct marketing is absolute. To exercise a right, contact acquisitions@exactism.com.

Complaints

If you have concerns, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO). More information is available at ico.org.uk. Depending on your location and the data-protection laws that apply, you may also be able to complain to the relevant data-protection authority in the country where you live or work, or where you believe an infringement occurred. For people in the EU/EEA, this may be the supervisory authority in the country where they habitually live or work, or where the alleged infringement took place.

Website data

This site does not currently use advertising or analytics cookies. Basic technical request information may be processed by our hosting and security providers to deliver and protect the site.

Standalone domain-for-sale presentation pages operated by Exactism and covered by this notice do not currently use advertising or analytics cookies. Basic technical request information for those pages may be processed by their hosting and security providers. If you proceed to a third-party domain marketplace, its own privacy information and terms will apply.

Changes

We may update this notice when our activities or legal obligations change. The current version will be published on this page.

Current version: 10 November 2026.