Privacy Policy

This policy explains what personal data we process when you use Billiongates Domains, why, on which legal basis, who receives it, how long we keep it and what your rights are under the EU General Data Protection Regulation (GDPR).

1. Data controller

The controller of your personal data is Kesnita UAB, company code 302565955, VAT code LT100009163612, registered address Gedimino pr. 45-4, LT-01109 Vilnius, Lithuania. Contact for all privacy matters: support@billiongates.com. We have not appointed a data protection officer.

2. What we collect

• Registrant data entered at checkout: first and last name, optional company name, email address, phone number and postal address. Registries require these details for every domain.
• Order data: the domains, registration period, amounts, order and payment status and references. We do not see or store your card details; the payment provider handles them.
• Account data, only if you create an account: email address and a securely hashed password.
• Messages you send us by email or through the contact form.
• Technical data: IP address, browser information and request logs created when you visit the site, used for security and to keep the service running.

3. Purposes and legal bases

• Registering and managing the domains you order, taking payment and sending service messages about your order and domains: performance of a contract (GDPR Art. 6(1)(b)).
• Passing registration data to the registrar and registry and keeping it as their rules and ICANN policies require, and keeping accounting records: legal obligation (Art. 6(1)(c)) and, where registry rules are contractual, performance of a contract (Art. 6(1)(b)).
• Answering your questions, preventing fraud and abuse, and protecting the security of the service: our legitimate interests (Art. 6(1)(f)).
• Optional cookies or analytics, if we ever use them: your consent (Art. 6(1)(a)), which you can withdraw at any time.

Registrant data is required to register a domain. Without it we cannot complete a registration. We do not use automated decision-making or profiling that has legal effects for you.

4. Who receives your data

We share only what each recipient needs:

• Openprovider (Hosting Concepts B.V., the Netherlands), our domain registrar, and the registry that operates each extension: to register and manage your domains. Registries may publish some registration data in their registration data services (RDAP/WHOIS) under their own policies.
• Stripe (Stripe Payments Europe, Limited, Ireland): payment processing.
• Supabase (Supabase, Inc.): account sign-in and account database, when accounts are enabled.
• Cloudflare (Cloudflare, Inc.): content delivery, DNS and protection against attacks; it processes technical data such as IP addresses.
• Our server hosting provider, which stores the order database.
• Public authorities, only where the law requires it.

Some providers (such as Supabase and Cloudflare) may process data outside the European Economic Area. Such transfers rely on the safeguards in those providers' data processing terms, such as the European Commission's Standard Contractual Clauses or an adequacy decision. We never sell your data.

5. How long we keep it

• Registrant and order data: for as long as the domain is registered through us, and afterwards for the period that registrar, registry and ICANN rules require (generally up to 2 years after the registration ends).
• Accounting records (invoices, payments): for the period required by Lithuanian accounting law.
• Account data: until you ask us to close the account.
• Messages: as long as needed to answer and follow up, and no longer than 2 years after the last message, unless needed for a legal claim.
• Technical logs: for a short period needed for security and troubleshooting.

6. Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing based on our legitimate interests, to data portability and to withdraw consent at any time without affecting earlier processing. Write to support@billiongates.com. Some registration data must be kept while the domain is registered and for the period required by registry and registrar rules, so erasure may only be possible after that.

You also have the right to lodge a complaint with a supervisory authority. In Lithuania this is the State Data Protection Inspectorate (VDAI), L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt. You may also contact the authority in the EU country where you live or work.

7. Cookies

We use essential cookies and local storage to run the site (for example to keep your cart). See our Cookie Policy.

8. Changes

We update this policy when our processing changes. The date at the top shows the latest version.