Legal

Privacy Policy

Last updated 2026-11-03

We collect the data we need to sell you a domain and keep the books. With your permission, we also use Google Analytics to understand how visitors use the site. We do not sell personal data or send newsletters you didn't ask for. This notice explains what we collect and why.

1. Who is responsible

The data controller is AVOSS DEVELOPMENT DBA SURFNAME.COM, registered in the Republic of Serbia. For any privacy question, email domains@surfname.com.

2. What we collect

Information you give us on the qualification form:

  • Full legal name
  • Email address (verified by a one-time code we email you)
  • Direct phone number with country code
  • Country
  • Company name, VAT / tax ID, and company country — only if you indicate the purchase is for a company
  • Buyer type (direct buyer, or agency acting for a client)
  • Intended use of the domain (investment, project, agency client, other) and a short optional description
  • Preferred payment method (bank transfer or Escrow.com)

Information captured automatically when you interact with the site:

  • IP address and approximate country (used for fraud prevention)
  • Browser user agent, request timestamp, page URL, referrer
  • Anonymized per-listing view count aggregated by week
  • Cookies: an essential sn_verify HMAC cookie during email verification, sn_currency for your currency preference, sn_analytics_consent to remember your analytics choice, and a Cloudflare Turnstile cookie for spam protection on the form

If you accept analytics, Google Analytics collects information about visits to public pages on surfname.com, such as page addresses, referring pages, browser and device information, approximate location, and usage interactions such as searches and outbound link clicks. We do not send your qualification form answers or order details to Google Analytics. Buyer qualification and offer forms, administrative pages, and order confirmation pages are not tracked.

Information we generate about your order:

  • Order number, date, amount, currency, FX rate
  • Invoice PDF with the above plus your billing details
  • Optional review flags (for example, when an IP country and stated country disagree) that prompt a human eye before we invoice

3. Why we collect it

We process this data to:

  • Qualify you as a legitimate buyer and accept your order (contract)
  • Issue a compliant invoice and transfer the domain (contract and legal obligation)
  • Meet our accounting and tax-record retention obligations under Serbian law (legal obligation)
  • Prevent and investigate fraud, trademark abuse, and other misuse of the service (legitimate interest)
  • Understand visits to our public pages and improve the site, if you accept analytics (consent)

4. Who sees it

The data is accessed by SurfName.com staff and, where required, our accountant and the Serbian tax authority. Limited data is shared with:

  • Cloudflare for Turnstile bot protection on the qualification form. Cloudflare processes your IP address and a short-lived challenge token.
  • Google Workspace for sending invoice emails and notifications. Gmail receives your email address and message contents.
  • Google Analytics, only if you accept analytics, for processing website usage data. Advertising personalization and Google signals are disabled in our tracking configuration. See Google's Privacy Policy.
  • Raiffeisen Banka a.d., the bank where your payment is received, if you pay by bank transfer.
  • Escrow.com, if you choose escrow, processes the transaction under their own privacy terms. You will receive an invitation directly from them.
  • VIES (EU Commission), if you supply an EU VAT number, to confirm it is valid.
  • ipapi.co, a geolocation service, to compare your stated country against the country of your IP for fraud prevention. We send only your IP address.

We do not sell personal data. We do not share personal data with advertising networks.

5. International transfers

Because most of the processors named above are based in the United States or operate globally, data may leave the European Economic Area. When that happens, transfers are covered by the EU-U.S. Data Privacy Framework, standard contractual clauses, or an equivalent mechanism maintained by the processor.

6. Retention

Order records, invoices, and related accounting data are retained for at least 10 years as required by Serbian accounting and tax law. Unsubmitted form drafts and short-lived verification cookies are discarded as soon as they expire. Aggregate per-listing view counts carry no personal data and are kept indefinitely.

7. Your rights

Depending on where you are, you may have the right to:

  • Access the personal data we hold about you
  • Ask us to correct data that is wrong or incomplete
  • Ask us to delete data we no longer need (subject to the 10-year retention on order records)
  • Ask us to restrict or object to our processing
  • Receive a portable copy of data you provided
  • Lodge a complaint with your local data protection authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs)

To exercise any of these, write to domains@surfname.com from the email address associated with your order.

8. Cookies

Functional cookies support email verification, your currency preference, your consent choice, and Turnstile bot protection. The sn_analytics_consent cookie remembers whether you accepted or declined analytics for one year. An older sn_consent cookie, which recorded that you had seen our previous notice, does not count as permission to use analytics.

Google Analytics loads only after you choose to accept analytics. It uses _ga and _ga_* cookies to distinguish visits and sessions; we configure these cookies to expire after one year. You can decline analytics and continue using the site normally.

You can change your choice at any time using the button below. Choosing to decline after previously accepting stops further analytics collection and removes the Google Analytics cookies from this site. Withdrawing consent does not remove data already sent to Google Analytics.

9. Changes

We will post updates to this notice on this page and bump the "Last updated" date at the top. Material changes will be flagged via email where we have a recent order contact for you.

10. Contact

Questions: domains@surfname.com.