Privacy Policy

Last Update: April 24, 2024

Spaceship Privacy Policy

Spaceship is a leader in online privacy rights. We have created this privacy statement in order to demonstrate our commitment to you, our customer, through transparent, easy-to-understand information regarding our data practices. You will understand what we collect, why we collect it and what we do with it. This policy applies to all Spaceship brands, websites, apps, products, services or technologies (we will collectively refer to these as “Services”). Additional privacy practices for certain Services can be found in Details for Specific Products and Services.

Information Collection: Account Level

At an Account Level, we collect and use information necessary to enable you to purchase and manage Services, provide you with support for those Services and to curate your experience with us. Some information is collected and used based on contractual consent and other is based on informed consent, which may be changed at any time.

Basic Account Information.

Information Collected. Our site uses forms in which you give us contact information (such as your name, address, phone number, fax number, billing information, IP address and email address) so you can create an account, place orders, register domains, request information, and request support help. As you use your account, we may also collect support requests and other related types of information that is specific to the management of your account and Services with us.

Legal + Contractual Requirements. This type of information is legally and/or contractually required to be able to purchase and use Services. For example, we are required to be able to verify this type of information upon request by our payment processor. It is also required to be able to serve legal notices to you and is mandated by certain Services we offer. 

In addition, some Services, such as domains, require that you provide this information in order for you to purchase them. If you are purchasing a domain from us, we are likewise required to collect and retain this information. We are further required to verify that the information provided is accurate and serve legally required notices regarding your domain(s). The legal basis for the collection, use and retention of this information for these purposes is considered to be contractually given for the duration of your use of such Service and any legally required retention period.

How We Use This Information.

Sending Emails. Legally Required. As noted above, we use emails to communicate with you, to confirm your placed orders, to send information that you have requested and to serve legally or contractually required communications. Legally required emails cover ICANN mandated verification emails, renewal notices and any other policy or procedure created by ICANN which governs the purchase of domains. Additionally, we may be required by law to serve notices to you such as DMCA Takedown Notices, UDRP notices, etc. Or, we may deem a change to one of our policies to be material and, therefore, determine a duty (though not a legal requirement) to inform you of this change. These types of communications do not fall under any of our opt-out procedures.

Sending Emails: Service Communications & Promotional Communications. We also may use this information when it is important for us to contact you regarding functionality changes to Services you have purchased and/or our website and provide customer service (“Service Communications”.) By creating an account with us and/or purchasing our Services, you agree to receive these types of communication and acknowledge that they are not optional. 

Legally Required Disclosure. We will never share your information without your permission or in ways other than as outlined in this policy. The only exceptions to this are when we are required by law, in the good faith belief that such action is necessary in order to comply with the law, or when we must comply with a legal process. Examples of these types of exceptions are court orders, subpoenas, and UDRP/URS processes. In each of these situations, we will carefully review the documentation provided and only comply if such documentation meets requisite legal standards.

Changes in Our Practices. If we change our information-handling practices or other privacy aspects, we will post those changes on this privacy statement. If we make any material changes we will notify you by means of a notice on this site prior to the change becoming effective, and we may also try to notify you through email of the privacy changes, if necessary.

Retention & Deletion of Account Information.

Personal Information Following Termination of Account. When your Spaceship account is cancelled (either voluntarily or involuntarily) all of your personally identifiable information is placed in "deactivated" status within our corresponding databases. However, you should know that deactivation of your account does not mean your personally identifiable information has been deleted from our database entirely. 

We will retain and use your personally identifiable information, if necessary, in order to resolve disputes, enforce our agreements and/or as required by laws or regulations. In addition, Services that you purchase may require that you agree to the retention of this information for a specific period of time, such as with domains and SSL certificates.  

Therefore, personally identifiable information may not be immediately deleted upon request. This is an approved exception to GDPR and CCPA deletion rights. 

Information Collection: Site Usage

Device Information. We collect information from your devices (computers, mobile phones, tablets, etc.), such as IP address, cookie information, so that we may recognize your devices to provide you with legal notices (if required by your country of residence), support services (when you contact our support staff) and personalized experiences on our site and emails. Certain types of collection and use may be optional and controlled via our cookie tools.

Information from Others. We are dedicated to continually improving your experience on our website. Like many companies, we use third-parties to help us track browsing, identify technical issues and provide ways to enhance your overall experience. Several of the tools that we use and what they do are:

  • Log Files: We use information gathered about you from our site statistics via log files provided by third-party tracking partners (for example, your IP address) to help diagnose problems with our server and to administer our website. We also gather broad demographic information from this data to help us improve our site and make your browsing and purchasing experiences more enjoyable. This is not linked to any personally identifiable information.
  • Cookies: Our site uses cookies to keep track of your session information. We do link the information we store in cookies to personally identifiable information you submit while on our site.
    We use both session ID cookies and persistent cookies. A session ID cookie expires when you close your browser. A persistent cookie remains on your hard drive for an extended period of time. You can remove persistent cookies by following directions provided in your internet browser’s “help” file.
    We also use cookies to store your username if you request to have your username remembered during login. That information will be used to pre-fill the login form at a later time. If you are referred to our website through an ad or a partner, we will store the referral information in the cookies.
    The use of cookies by our partners, affiliates, tracking utility company and service providers is not covered by our privacy statement. We do not have access or control over these cookies. Our tracking utility company uses session ID cookies to help us improve our site and make your browsing and purchasing experiences more enjoyable.
    For those customers in countries subject to GDPR and LGPD, please see your cookie preference panel for additional instructions on how to opt-in and opt-out of cookies. The cookie preference panel is accessible once you have acted upon the cookie policy pop-up.
    Find more information regarding the categories of cookies we use and our specific cookie policy here. By continuing to use and navigate our sites, services, applications, tools or messaging, you are agreeing to our use of cookies described in this Privacy Policy.
  • Gifs: Our third-party tracking utility company employs a software technology called clear gifs (a.k.a. Web Beacons/Web Bugs) that help us better manage content on our site by informing us what content is effective. Clear gifs are tiny graphics with unique identifiers, similar in function to cookies; they are used to track the online movements of web users. In contrast to cookies, which are stored on a user’s computer hard drive, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence. Our tracking utility company does not tie the information gathered by clear gifs to our customers’ personally identifiable information.

Contests: From time to time we request information from users via surveys or contests. Participation in these surveys or contests is completely voluntary, and the user, therefore, has a choice whether or not to respond and disclose this information. Information requested may include contact information (such as name, email and shipping address) and demographic information (such as zip code and age level). Contact information will be used to notify the winners and award prizes. Survey information will be used for purposes of monitoring or improving the use and satisfaction of this site and/or any other purpose that we explicitly disclose in the contest rules.

Testimonials: We post customer testimonials on our website which may contain personally identifiable information. We do obtain the customer's consent via email, prior to posting the testimonial, to post their name along with their testimonial. If you would like to request the removal of your testimonial from the site contact us at support@spaceship.com.

Public Blog: Our website offers a publicly accessible blog, including the ability to post independent public comments. In general, submissions require a name (which can be an alias) which will be made public.  This information is not used for any other purpose.  You are given the option of providing your email.  Your email will not be made public but may be used by Spaceship to contact you regarding your submission.  All comments included in the comments section will be publicly displayed.  Spaceship may use the information provided by your comments to improve its products and services.

You understand and acknowledge that any information you provide in your submission (name or comments section) may be read, collected and used by others who access it.  Spaceship, therefore, prohibits the use of personally identifiable information within the comments section unless there has be explicit agreement to publicly display this information. 

Third-Party Product Offerings & Websites: Our site also contains links to other third-party websites, especially where we offer their products or services. Spaceship (www.spaceship.com) is not responsible for the privacy practices or the content of such websites. We encourage you to carefully read the privacy statement of any website you visit.

How to Share this Information

Spaceship shares information within its affiliated brands and companies. We also share information we have about you for the purposes described in this Privacy Policy, including to provide Services that you have requested. We do not share information that individually identifies our customers with companies, organizations or individuals outside of Spaceship, unless one of the following circumstances applies:

With Your Consent. We will share information with companies, organizations or individuals outside of Spaceship when we have your consent.

At Your Instruction as a Controller. We will also share this information when you, as Controller, direct us to do so pursuant to a purchase you have made with a third party provider who offer products or services through our marketplace. These providers will each have their own privacy policies and will be identified in our Details for Specific Products and Services section.

With Partners. We may share your information with non-affiliated companies who are:

  • Advertising, Analytics and Business Partners (Limited to Non-Personally Identifiable Information). We may share aggregated or pseudonymous information (including demographic information) with partners, such as measurement analytics, apps, or other companies.  We do not, however, share information that personally identifies you (personally identifiable information is information such as name or email address.)  When you use third-party apps, websites or other products integrated with our Services, they may collect information about your activities subject to their own terms and privacy policies.
  • For Legal and Other Purposes. We may access, preserve and disclose information to investigate, prevent, or take action in connection with: (i) legal process and legal requests; (ii) enforcement of our Universal Terms of Service; (iii) claims that any content violates the rights of third-parties; (iv) requests for customer service; (v) technical issues; (vi) protecting the rights, property or personal safety of Spaceship, its users or the public; (vii) establishing or exercising our legal rights or defending against legal claims; or (viii) as otherwise required by law. This may include responding to lawful governmental requests.  Learn more about how we evaluate and respond to these requests here.

New Ownership. If the ownership or control of all or part of Spaceship or a specific Service changes as a result of a merger, acquisition or sale of assets, we may transfer your information to the new owner.

Details for Specific Products and Services

Domain Whois Contact Information: ICANN and the Registries who issue domains require certain personally identifiable information in order to purchase a domain. Thus, when you choose to purchase a domain, you are contractually obligated to provide this information and instruct us to collect, process and retain it on your behalf.  Equally, as a registrar, we are required to comply with this obligation.

his You are required to keep this information current and may access, review and and update it through your customer Account Panel. You are also contractually required and agree to the retention of this information for the period of time defined by ICANN and/or a specific Registry.This information may be shared with ICANN, registries, registry operators and/or data escrow agents.

ICANN requires that registrants must provide and registrars must collect the mandated Whois information, whether or not protected by a privacy service, and retain it for two (2) years after the domain expires and/or you are no longer the registrant. (Please note that other ccTLD registries may have a longer required retention period. You will need to confirm their retention policies.) These guidelines are considered contractually required and approved upon purchasing a domain.

Domains not governed by ICANN, such as ccTLDs, have individual data collection guidelines explained in their domain agreements. These may include the collection and retention of IP addresses and notices sent to you, among other things. Spaceship requires, when purchasing domains from us, that Whois standards as set by ICANN be collected for all domains. Thus, even for ccTLDs, you will be asked to provide the standardized Whois information. Collection of the unique registry information and the standardized Whois information is considered contractually required by you from the individual registries and/or Spaceship. 

Also note that certain ccTLDs mandate the public disclosure of registrant data. If you are an EEA resident and eligible to register such a domain, by registering the domain, you explicitly agree to the publication of your personal information. This explicit agreement is between you, the Controller, and the Registry.  Spaceship will solely serve as a Processor in carrying out your instruction.  We recommend that you review ccTLD agreements purchasing one of these domains to review their contractual guidelines on data collected, processed, publicized and retained.

Changes due to GDPR. Due to the GDPR, ICANN has implemented a Temporary Specification that limits the information made available to the public, at least in the EEA. However, the model also proposes broader access to groups of individuals that may or may not have to substantiate a legal basis for each request. This means that a privacy service such as Withheld for Privacy is both relevant and still very necessary to protect you from unwanted and/or unknown disclosure.

Spaceship strongly believes in privacy, security, freedom and the equal treatment for all internet users. And we believe that your information should be protected both now and under any new model being considered. This is why we are providing all our customers with free privacy protection for life.

Spaceship has partnered with Withheld For Privacy to offer privacy protection by default for all domains (unless specifically precluded by the registry.) You can find more details on this privacy service by visiting the Domain Privacy page.

Withheld For Privacy. Withheld For Privacy is an Iceland-based privacy service that allows you to protect your identity. Spaceship selected Withheld for Privacy as a partner because its consumer focused privacy-by-design principles match our standards for your privacy protection. Unlike other domain privacy services, Withheld For Privacy does not need nor does it receive your personal information. It protects your identity by providing you with anonymization services.

DNS. No personally identifiable information is collected or shared with our DNS third party provider for any of our DNS products.

Hosting. When you host with Spaceship, we interact with your data in two ways. First, we obtain certain data in order to allow you to use our hosting services and to provide ongoing support. This data includes things like your password, DNS zones and account activity so that we can help you with any issues related to your site. Due to the nature of hosting, log files may also collect IPs of those who visit your site without additional identifying information. Second, we store information related to your website, such as website content, SSL files, your email logs (if you have email integrated into your site), related databases, full account backups and anything else that you host on your site.

In both cases, you operate as the Controller and we operate as the Processor and our relationship is governed by our Data Processing Addendum. Where your site is collecting personally identifiable information, such as customer information or contact lists, it is your responsibility to ensure you are compliant with privacy laws such as GDPR and that you are obtaining required permissions.

Third Party Hosting Products. We offer several third party hosting products to help you manage your website. They include Cloudflare products, CodeGuard, Attracta and Softaculous. We only share data with these companies when you initiate a specific request with us.

When you purchase a SSL Certificate, you agree to the contractual terms set by Sectigo for that Certificate.  Further, you acknowledge and agree that you instruct Spaceship to facilitate the sharing of any personal data required by Sectigo for the Certificate you have purchased, including complying with retention guidelines set by the agreement.  

Sectigo (formerly Comodo CA Limited), as the SSL issuing company, requires you to provide them with specific information for each SSL Certificate. Some information will relate to corporations, other information may be personally identifiable. 

Sectigo (formerly Comodo CA Limited) will process and retain this information as part of the requirements for providing an SSL certificate. Thereafter, this information will be retained, by Sectigo and Spaceship, for 7 years after the expiration or cancellation of your SSL certificate. You acknowledge and agree that the collection, processing and retention of this information is based on contractual consent.

Residents of GDPR Governed Countries

If you are a resident of a GDPR governed country, more information regarding your GDPR rights may be found in 'Rights Under The GDPR'.

Rights Under The GDPR

If you are a resident who lives in a country that is part of the GDPR and are a natural person, you have the following rights:

  • Right of access: You have a right to access the personal data that we collect and process about you. Most of this data can be reviewed in your account panel and related products/services that you have purchased.  
  • Right to rectification: If you want to correct or revise any of the data we retain on you may do by accessing your account and the information contained within it. This includes Whois information collected for domains that you have purchased.
  • Right to be forgotten: You have a right to request the permanent deletion your data. However, please note that exercising this right may result in a suspension or discontinuation of services and is also governed by legal and/or contractual retention guidelines.  
  • Right to restrict processing: If you believe your personal data is inaccurate or collected unlawfully, you may request limited use of your personal data. Please note that, depending on the request, this may result in a suspension or discontinuation of certain services.
  • Right of portability: We provide you with the ability to move any of your account data to a third party at any time.
  • Right to object: If you decide that you no longer wish to allow your data to be included in our analytics or for us to provide personalized (targeted) marketing content at any time, you may contact us to request removal of this data. You may also achieve this by opting out of any marketing outreach that you previously agreed to either by choosing unsubscribe in the related email or by making this selection within your account.  

If you have provided data to Spaceship regarding a client of yours, which is subject to the GDPR, you are responsible for obtaining the proper consent from such client prior to sharing their personal information with us.

You further acknowledge and agree that Spaceship can only fulfill the above requests if made by a Spaceship customer. As such, as our customer, you agree that you must request to exercise these rights for your clients. Spaceship will support you in fulfilling such requests.

Your California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit the CCPA Privacy Notice.

Your Brazilian Privacy Rights

If you are located in Brazil, you may learn more about your Brazilian privacy rights here.

Nevada State Privacy Law

Nevada Residents

Pursuant to Nevada law, you may direct a business that operates an internet website not to sell certain Personal Information a business has collected or will collect about you. Spaceship does not sell your Personal Information pursuant to Nevada law. For more information about how we handle and share your Personal Information, or your rights under Nevada law, contact us at nvprivacy@spaceship.com.

Site Security

Our site has security measures in place to protect the loss, misuse and alteration of the information under our control. We use 128-bit SSL security to encrypt any transmissions when you provide credit card information, personal data, etc. No method of electronic storage or transmission over the internet is 100% secure, however. Therefore, we cannot guarantee its absolute security.

Protecting Children’s Privacy

Our Services are for a general audience.  We do not knowingly collect, use, or share information that could reasonably be used to identify children under age 18 without prior parental consent or consistent with applicable law.

Data Processing and Transfers

Transfer + Processing Within the US. When you use or interact with any of our Services, the data processing, sharing, transferring and uses of your information will be done as outlined in this Privacy Policy, which will only be done when necessary for the performance of our contract with you, when we have your consent to do so, and/or subject to the appropriate standard contractual clauses. 

Regardless of the country where you reside, you acknowledge that you are directly transferring your data to us in our United States based servers and agree to processing within the United States, where Spaceship processes its data. Therefore, if you reside outside of the US,  you authorize us to transfer, process, store and use your information in a country other than your own in accordance with this Privacy Policy and to provide you with Services.

Compliance with legal, regulatory and law enforcement requests. We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. As such, we may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (such as subpoena requests), to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical.

To the extent we are legally permitted to do so, we may take reasonable steps to notify you if we are required to provide your personal information to third parties as part of legal process. We will also share your information to the extent necessary to comply with any ICANN, registry or ccTLD rules, regulations and policies when you register a domain name with us. For reasons critical to maintaining the security, stability and resiliency of the Internet, this includes the transfer of domain name registration information to the underlying domain registry operator and escrow provider, and publication of that information as required by ICANN or with other third parties that demonstrate a legitimate legal interest to such information.

Other Important Information

This Privacy Policy Applies Only to Spaceship. This Privacy Policy does not apply to the practices of companies that Spaceship does not own or control, or to people that Spaceship does not employ or manage.  Where Spaceship has engaged third parties as vendors and/or other roles that support its business operations, it will do the necessary due diligence to ensure compliance with laws such as the GDPR.

In addition, Spaceship may offer third-party products.  These products may have different privacy policies and practices that are not subject to this Privacy Policy. These products will be identified in the Details for Specific Products and Services section.

Changes

We may update this Privacy Policy from time to time, so you should check it periodically. If we make changes that are material, we will provide you with appropriate notice before such changes take effect.

Questions & Suggestions

For privacy and GDPR related matters, you can contact our Data Protection Office and our Data Protection Officer via email at dpo@spaceship.com.

If you have general questions or suggestions, please you can contact us at Spaceship Support.