Privacy statement

This page details what data we collect and store from/for our users and how we treat this data.

What data do we collect and why?

User accounts: Your user name, password, address and other personal data.
We use this to maintain your account, generate invoices and contact you.
Note that all passwords are hashed as they are set - staff can not see your password in the way you entered it.
Billing data: The services you buy from us, generated invoices, your account balance and all account mutations (including your bank account number or your PayPal account address and transaction ID).
We use this to properly bill all our users, maintain legally required records and to solve any disputes.
Access logs: Logs generated by our web servers.
We use these for statistical analysis.
DNS packet logs: We may keep dumps of DNS packets received and sent from/to our servers.
We use these for statistical analysis.

All data may also be used to track down violations of the terms and conditions.

Who can access this data?

We consider the data listed above as confidential. It will not be made available to third parties, except in these cases:

Subsidiaries and contractors of Solid DNS: We will limit the data available to that needed for the task of the contractor. The contractor will also be bound to this privacy agreement.
Legal requirement to do so: For example (but not limited to): the tax authorities may want to review our invoices, which contain personal data; a police warrant may require us to supply data; if you are an company in the EU registering with a VAT number we must verify your number and address with the Dutch tax authorities.
Handling of violations of the terms and conditions: If we choose to take additional action upon violations, we may use your data for this. For example, but not limited to: we may share your data with the police or a lawyer, or use it in a court case.
Statistical analysis: All data may be used for statistical analysis. If we publish such an analysis, we will make sure that no data can be tracked down to a specific user. Published statistical data will never contain personally identifiable information.
Payment providers: Any intermediate parties in the payment process, which may include your credit card company, PayPal, your bank and/or our bank, will need data about both sender and receiver.
Each of them also has to adhere to specific laws and regulations, which may require them to make data available to third parties.
Google Analytics: All pages on this website use Google Analytics. This means that some data on the page might be available to Google. For more information on this, please consult the Google Analytics privacy policy.

Where is the data stored?

All data may be stored in the European Union, Canada or the United States.

Encryption of data

The website is available through an encrypted channel (https).

Viewing, modifying or deleting your data

You can view all your data on the profile page, after logging in.
You can also modify most of your data on the profile page. Due to tax regulations, some data can not be changed by you. If you would like to change any of this data, please contact us.

Your data can not be deleted while your account is active, as we need the data for billing purposes.
After your account is cancelled, all data will be kept for seven years, as this is required by tax regulations.

DNS records

We block zone transfers (AXFR) from hosts other than your primary name server. This means it is not possible for any third party to get a full copy of your zone from our servers in one query.
However, please be aware that the zone transfer from your server to our servers is not encrypted.
As with all other data, we may use zone data to do statistical analysis, but in such cases we will assure no data can be tracked down to a specific user.