TLDreg.lt Privacy Policy

Last updated: September 14, 2026

This Privacy Policy explains how TLDreg.lt ("TLDreg", "we", "us" or "our") collects, uses, stores and shares personal data when you use our website, create an account, purchase services or use domain name registration and related services.

1. Who We Are

TLDreg.lt is operated by:

Arminas Keršys

Individual activity under certificate No. 919395

Address: Justiniskiu g. 144D

Lithuania

Email: info@tldreg.lt

Website: https://tldreg.lt

For personal data processed for our own customer account, billing, support, security and business administration purposes, TLDreg acts as the data controller.

When providing .lv domain registration services, certain personal data are also processed in connection with the .lv Registry operated by the Network Solutions Department of the Institute of Mathematics and Computer Science, University of Latvia ("NIC.LV"). Depending on the particular processing activity, NIC.LV may act as a separate controller and TLDreg may process certain information on behalf of NIC.LV in accordance with the applicable Registry–Registrar Agreement.

2. Personal Data We Collect

Depending on the services you use, we may process the following categories of personal data.

Account and Contact Information

This may include:

• first name and surname;
• organisation or company name;
• email address;
• telephone number;
• postal or billing address;
• account username and account identifiers.

Domain Registration Information

When you register or manage a domain name, we may process information required by the relevant Registry, including:

• domain name;
• Registrant or Domain Name Holder information;
• administrative and technical contact information;
• organisation information;
• registration, renewal and expiry information;
• nameserver and technical domain information;
• domain transfer and management information;
• requests and instructions concerning the domain.

Verification Information

Where required to verify registration information, identity or authority to act on behalf of another person or organisation, we may process:

• verified email address or telephone number;
• information obtained from reliable or publicly available registers;
• organisation and representative information;
• documents or information demonstrating authority to represent an organisation;
• identity verification information where necessary;
• records showing when and how verification was performed.

We only request information that is reasonably necessary for the relevant verification purpose.

Billing and Transaction Information

We may process:

• billing name and address;
• invoice information;
• transaction identifiers;
• payment status;
• amount, currency and transaction date;
• limited payment-method information supplied by the payment provider.

Payment card information may be entered directly into the systems of our payment service provider.

TLDreg does not store full payment card numbers or card security codes where payment details are processed directly by the payment provider.

Our payment provider is:

Stripe

Its processing of payment information is governed by its own privacy policy.

Communications and Support Information

If you contact us, we may process:

• email correspondence;
• support requests;
• complaint information;
• documents or information you provide to us;
• records of actions requested in relation to your account or domain name.

Technical and Security Information

When you access TLDreg.lt or our customer area, we may automatically process technical information such as:

• IP address;
• date and time of access;
• browser and device information;
• session information;
• authentication events;
• security and server logs;
• actions performed through your customer account.

This information is used primarily for operating, securing and troubleshooting our services and preventing unauthorised access and abuse.

3. Where We Obtain Personal Data

We obtain most personal data directly from you.

We may also obtain information from other sources where necessary to provide domain registration services or verify information, including:

• NIC.LV and other domain registries;
• payment service providers;
• publicly available or reliable registers;
• identity or contact verification providers, where used;
• persons authorised to act on your behalf;
• organisations on whose behalf you act;
• competent public authorities where permitted or required by law.

4. Why We Process Personal Data and Our Legal Bases

We process personal data only where we have a lawful basis under applicable data protection law.

Performance of a Contract

We process data where necessary to provide services requested by you, including:

• creating and administering your account;
• registering, renewing and managing domain names;
• performing requested domain changes or transfers;
• providing DNS or related services;
• processing orders and payments;
• providing customer support;
• communicating with you about services you use.

The legal basis is Article 6(1)(b) GDPR.

Compliance With Legal Obligations

We may process personal data where necessary to comply with legal, tax, accounting, regulatory, domain Registry or other applicable obligations.

This may include:

• accounting and tax records;
• responding to legally valid requests from authorities;
• maintaining records required under applicable domain registration rules;
• complying with data protection, cybersecurity or other statutory requirements.

The legal basis is Article 6(1)(c) GDPR.

Legitimate Interests

Where appropriate, we may process information where this is necessary for our legitimate interests and those interests are not overridden by your rights and freedoms.

These interests may include:

• protecting customer accounts;
• preventing fraud and abuse;
• maintaining network and information security;
• detecting unauthorised access;
• maintaining audit trails;
• improving reliability of our services;
• establishing, exercising or defending legal claims.

The legal basis is Article 6(1)(f) GDPR.

Consent

Where processing requires your consent, such as certain optional cookies or direct marketing communications, we will request your consent before carrying out that processing.

The legal basis is Article 6(1)(a) GDPR.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. .LV Domain Registration and NIC.LV

If you request registration or management of a .lv domain through TLDreg, information required for registration and management of the domain will be transmitted to and processed by NIC.LV.

NIC.LV operates the .lv top-level domain Registry.

The processing may be necessary for:

• domain name registration;
• renewal;
• transfer;
• change of Registrant or contact information;
• nameserver and technical management;
• verification of registration data;
• administration of the right to use the domain name;
• dispute handling;
• Registry security and compliance.

NIC.LV processes personal data in accordance with its own applicable policies, including the NIC Privacy Policy, NIC WHOIS Policy, Registration Data Verification Policy and Domain Name Data Disclosure Policy.

Current NIC.LV policies are available at:

https://www.nic.lv/en/policies

6. Registration Data Verification

TLDreg may be required to verify information relating to .lv Registrants and contact persons.

Verification may include:

• verification of an email address or telephone number;
• electronic identification;
• checks against reliable or publicly available registers;
• verification of organisation information;
• verification of a representative's authority;
• document checks;
• additional checks where information appears inaccurate, incomplete or outdated.

We retain appropriate records demonstrating that verification has been performed where required by Registry rules, our contractual obligations or applicable law.

If required registration information cannot be successfully verified, registration or management actions may be delayed, refused or otherwise affected in accordance with applicable NIC.LV policies.

7. WHOIS and Public Domain Information

Information relating to registered .lv domain names may be included in the NIC.LV Registry and some information may be made available through the NIC.LV WHOIS service.

The information published through WHOIS depends, among other things, on whether the Domain Name Holder is a natural person or a legal person and on the applicable NIC WHOIS Policy.

TLDreg does not determine independently which Registry information is publicly displayed by NIC.LV.

For details, please refer to the current NIC WHOIS Policy available through:

https://www.nic.lv/en/policies

8. When We Share Personal Data

We do not sell personal data.

We may disclose or provide access to personal data only where necessary for the purposes described in this Privacy Policy.

Recipients may include:

NIC.LV and Domain Registries

Information required for domain registration and management is provided to the relevant Registry.

For .lv domains, this includes NIC.LV.

Payment Service Providers

Payment and transaction information may be processed by our payment provider:

Stripe

Hosting and Infrastructure Providers

Our website, databases, email, backups or other technical services may be operated using third-party infrastructure providers.

Current material service providers include:

• UAB “Esnet” - server and infrastructure services;
• UAB “Redfoxcloud” - email services;
• UAB “Esnet” - backup/storage services.

Verification Service Providers

Where we use an external identity or contact verification provider, necessary information may be transmitted to that provider for verification purposes.

Professional Service Providers

Information may be disclosed where necessary to professional advisers such as accountants, legal advisers or auditors who are subject to appropriate confidentiality obligations.

Public Authorities and Law Enforcement

We may disclose information where required by applicable law, a legally binding request, court order or competent public authority.

Requests for non-public .lv registration information are handled in accordance with applicable law and the NIC.LV Domain Name Data Disclosure Policy.

We assess, where applicable:

• the identity of the requester;
• the legal basis for the request;
• the purpose of disclosure;
• whether the requested information is necessary and proportionate.

Appropriate records of such disclosures may be retained.

9. International Transfers

We aim to use service providers located in the European Economic Area where reasonably possible.

However, some service providers may process information outside the European Economic Area.

Where personal data are transferred outside the EEA, we use an appropriate transfer mechanism required under the GDPR, where applicable, such as:

• an adequacy decision adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission; or
• another legally permitted transfer mechanism.

Information about relevant safeguards may be requested by contacting us.

10. Cookies

TLDreg.lt uses cookies and similar technologies where necessary for operation of the website and customer area.

Essential cookies may be used for purposes such as:

• maintaining login sessions;
• account authentication;
• security;
• preventing abuse;
• remembering necessary session information;
• operation of the shopping cart and customer area.

Where we use optional analytics, advertising or other non-essential cookies that require consent, they will only be activated in accordance with applicable consent requirements.

More information is provided in our Cookie Policy.

Do not include references to advertising or personalised tracking in this Privacy Policy unless TLDreg actually uses such technologies.

11. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with contractual, Registry, accounting, tax, security and legal obligations.

Retention periods vary according to the type of information.

Customer Account Information

Account information is normally retained for the duration of the customer relationship and afterwards where necessary to comply with legal obligations, resolve disputes, prevent fraud or establish or defend legal claims.

Accounting and Invoice Records

Accounting and supporting records are retained for the period required by Lithuanian tax and accounting law.

Certain accounting records relating to individual activity may be required to be retained for at least 10 years.

Domain Registration and Verification Records

Records relating to domain requests, Registrant authorisation, acceptance of applicable Registry policies, registration-data verification and domain-management actions may be retained for as long as necessary to:

• provide the domain registration service;
• comply with Registry requirements;
• demonstrate that an authorised request was received;
• comply with applicable law; or
• establish, exercise or defend legal claims.

Technical and Security Logs

Technical and security logs are retained for a limited period appropriate to security, troubleshooting and abuse-prevention purposes.

Where information is no longer required, it will be deleted, anonymised or securely archived where immediate deletion is not technically possible.

12. How We Protect Personal Data

We implement appropriate technical and organisational measures intended to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• alteration;
• disclosure;
• destruction.

Measures may include access controls, encrypted connections, account authentication controls, network security, logging, software updates, restricted administrative access and backups.

No Internet-based system can provide absolute security. Customers are also responsible for maintaining the confidentiality of their account credentials and for notifying us promptly if they suspect unauthorised access.

13. Your Data Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• obtain information about how your personal data are processed;
• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing based on legitimate interests;
• receive certain personal data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

Some rights are not absolute. For example, we may be required to retain certain information despite a deletion request where retention is required by law or necessary for the establishment, exercise or defence of legal claims.

To exercise your rights, contact:

info@tldreg.lt

We may request information necessary to confirm your identity before responding to a request.

We will respond to requests within the time limits required by the GDPR. This is normally within one month, although the period may be extended where permitted by law because of the complexity or number of requests.

14. Supervisory Authority

If you believe that your personal data have been processed unlawfully, you have the right to lodge a complaint with a competent data protection supervisory authority.

For TLDreg in Lithuania, the supervisory authority is:

State Data Protection Inspectorate Valstybinė duomenų apsaugos inspekcija (VDAI)

L. Sapiegos str. 17 LT-10312 Vilnius Lithuania

Website: https://vdai.lrv.lt/

You are encouraged to contact us first so that we have an opportunity to address your concern, but this does not affect your right to lodge a complaint with a supervisory authority.

15. Children

TLDreg services are intended for adults and organisations capable of entering into legally binding agreements.

We do not knowingly offer customer accounts or domain registration services directly to children under 18.

If we become aware that personal information has been collected from a child in circumstances where we do not have a lawful basis to process it, we will take appropriate steps to delete or otherwise address that information.

16. Automated Decision-Making

TLDreg does not currently make decisions producing legal or similarly significant effects solely through automated processing.

If this changes, this Privacy Policy will be updated as required by applicable law.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our services, service providers, Registry requirements or applicable laws change.

The current version will be published on TLDreg.lt and the "Last updated" date will be changed accordingly.

Where a change materially affects how existing customer personal data are processed, we will provide additional notice where required.

18. Contact Us

For questions concerning this Privacy Policy or the processing of your personal data, contact:

TLDreg.lt

Operated by: Arminas Keršys

Individual activity under certificate No. 919395

Address: Justiniskiu g. 144D

Lithuania

Email: info@tldreg.lt