Privacy policy

Overview

PK Domain ("we", "us", "our") provides domain name registration, transfer, DNS and web hosting services to individuals and businesses in Pakistan and abroad. This policy explains what information we collect when you use our website or services, how we use and share it, how long we keep it, and the choices and rights you have over it. By using our website, placing an order, or contacting our support team, you agree to the practices described here.

This policy also covers the PK Domain app for Android, published on Google Play by PK Domain. The app shows our website and client area. It collects no extra data of its own: anything you enter in the app (for example, when you create an account, place an order or open a support ticket) is handled exactly as described on this page.

Information we collect

We collect the following categories of information in the course of providing our services:

• Registration / WHOIS data: the registrant, administrative and technical contact name, organisation, postal address, email address and phone number required to register or renew a domain name, as mandated by PKNIC, ICANN and the relevant registry.
• Identity verification documents: CNIC numbers, company registration certificates, authorisation letters and affidavits where a domain extension or transfer requires them.
• Account and order data: your client-area login details, the services you purchase, invoices, and your order and renewal history.
• Payment information: billing name and address, and payment confirmation details from our payment processors and banks. We do not store full card numbers on our own servers — card payments are processed by our banking and payment-gateway partners.
• Support communications: messages, tickets, emails, phone calls and WhatsApp chats you send to our support team, including any attachments you provide to resolve an issue.
• Technical and usage data: IP address, browser type, device information, pages visited and referring pages, collected automatically when you browse our website.
• Cookies and similar technologies: small files stored in your browser to keep the site working correctly and to understand how visitors use it.

How we use your information

We use the information we collect to:

• Register, renew, transfer and manage domain names and hosting accounts on your behalf
• Publish the WHOIS/registrant record required by the relevant registry (PKNIC, ICANN-accredited registries, or other ccTLD authorities)
• Process payments, issue invoices and prevent fraudulent transactions
• Provide customer support and respond to tickets, calls, emails and messages
• Send service-related notices such as renewal reminders, expiry warnings and important account updates
• Send marketing or promotional communications where you have subscribed to them, with an option to unsubscribe at any time
• Maintain the security, stability and performance of our website and infrastructure
• Comply with legal, regulatory and registry obligations

Sharing with third parties

We do not sell your personal information. We share it only where necessary to deliver our services or where required by policy or law, including with:

• Domain registries: PKNIC for .pk-family domains, and the relevant registry operator or ICANN-accredited registrar for other extensions — registration of a domain inherently requires your contact details to be recorded with the applicable registry.
• Payment processors and banks: to process card, bank transfer, mobile wallet (JazzCash, EasyPaisa) and other supported payment methods securely.
• Hosting and infrastructure providers: data centres and server providers that host your website, email or DNS where you use our hosting services.
• Google reCAPTCHA: our forms use Google reCAPTCHA to block spam and abuse. It collects hardware and software information and sends it to Google, under Google's Privacy Policy and Terms of Service.
• Professional advisors and authorities: where required to comply with a legal obligation, court order, or valid request from a government or regulatory authority.
• ICANN / PKNIC policy compliance: WHOIS data may be made publicly or partially available where the applicable registry policy requires it, subject to any privacy or redaction options that registry offers.

Data retention

We retain your account, order and registration data for as long as your account or domain remains active with us, and for a reasonable period afterward to meet legal, accounting, tax and registry record-keeping obligations, resolve disputes, and enforce our agreements. Support ticket and communication records are retained for a limited period to help us handle any follow-up queries.

Cookie policy

We use essential cookies required for the website and client area to function (such as keeping you logged in and remembering your cart), and analytics cookies that help us understand traffic patterns and improve the site. You can control or disable cookies through your browser settings, though some parts of the site or client area may not work correctly without them. Our cookie notice banner lets you acknowledge this policy when you first visit.

Your rights

Depending on applicable law, you may have the right to:

• Request access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Request deletion of your information, subject to any registry, legal or accounting retention requirements that override the request
• Object to or restrict certain uses of your information, such as marketing communications
• Withdraw consent for optional communications at any time

To exercise any of these rights, contact us using the details below and we will respond within a reasonable timeframe. To delete your account or personal data, including an account created in the PK Domain app, use our account deletion page. It explains what we delete, what we must keep, and for how long.

Security measures

We use reasonable administrative, technical and physical safeguards to protect your information, including encrypted connections (HTTPS/SSL) on our website and client area, access controls on internal systems, and secure processing of payments through our banking and gateway partners. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your data against unauthorised access, alteration, disclosure or destruction.

Children's privacy

Our services are intended for use by adults and businesses capable of entering into a binding agreement to register a domain name or purchase hosting. We do not knowingly collect personal information from children, and any account found to have been created by a minor without appropriate parental or guardian involvement may be suspended.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our services, legal requirements or registry policies, and updates may be posted without advance individual notice. The updated version will be posted on this page with a revised effective date, and continued use of our services after changes are posted constitutes acceptance of the revised policy. As policy updates are not always announced individually, we recommend checking this page every month or so if data handling is important to you.

Contact us

If you have any questions, concerns or requests regarding this privacy policy or how we handle your information, email us at info@pk-domain.com, message us on WhatsApp, or submit a support ticket through our client area.