Last revised June 8, 2018 (effective date)
What information we collect (and how we collect it)
Account and profile
We ask you for the following required information (unless listed as optional) and actions when you create an account:
- Your name or username (always public)
- Your email address
- Your date of birth
- Gender (optional)
- Your explicit agreement to our Terms of Service
You may choose to create an account with us using one of your social media accounts (Facebook, Twitter, or Google+), in which case it would provide us with the required information to create your account on NamePros, and it may also provide us with additional account information (e.g., a link to your profile page on that social network).
You may choose to provide additional information to us (e.g., your skills, custom title, and signature) by filling out fields on your profile (“profile fields”), setting your avatar (e.g., uploading a profile picture or providing your Gravatar email address), and specifying other profile information (e.g., your time zone).
Content and activity
We collect and store the information that you choose to produce on NamePros, such as when you compose messages in our editor (drafts), post in sections or on profile pages, use the chatroom, or send direct messages to other members, which can include comments, questions, answers, links, and uploaded photos (“content”).
We also collect and store information that you produce on NamePros when you perform certain actions, such as liking content, editing content, reporting content, voting in a poll, viewing a page, following another member, or indicating you are online by interacting with NamePros.com in anyway (“activity”).
We collect information from you and store information about your transaction when you purchase our products or services (e.g., a Gold Account), such as your name, address, date of the transaction, status of payment attempts, and information about the product or service you are purchasing.
We may ask you to enter financial information (e.g., credit card details) for billing purposes (e.g., to complete your purchase), which is stored, protected, and processed by Stripe, a secure service provider that we use. Your sensitive financial information is not stored by us.
We may collect and store information about you and our interactions with you when you communicate with us, which includes when you contact us through our service (e.g., name, email address, and IP address if you use our contact form), send us an email (e.g., message, name, email address, and IP address), start a conversation with us using our support chat (i.e., Intercom), send us a message on social media (e.g., username), and/or when you contact us on other websites.
Public information from third parties
We may use public sources (e.g., social media and public records) to collect and store additional information about you in the interest of know your customer, such as additional email addresses, phone numbers, and your domain names. This information is used for reasonable purposes including the detection and prevention of fraud, assessment of your eligibility of community groups, to provide you with customer support (e.g., account recovery), and to determine whether our terms and rules are being followed (e.g., you may have only one account that is not a Gold account).
Technical information automatically
We use third-party service providers (e.g., Google Analytics, Cloudflare, Quantcast, Intercom, and New Relic) in addition to our own internal tools (e.g., ELK) to collect and store certain information automatically as you browse and use our services, such as your IP address, geographical location, device details, how you found our site, browsing activity, and page load speed.
We may receive information about you from cookies and other browser storage options, which let us store pieces of data in your web browser that it sends back to us when it makes requests.
Your IP address is stored when you perform certain actions on our services, which includes when you register for an account, manage your account details, write a direct message or public post, or perform any other action that causes data to be transferred to or from your computer and our services.
Why we collect the information (and how we use it)
Provide our services
Most of the information that we collect is used to provide and operate our services, including communicate with you about your account or use of our services, send you email notifications for your content subscriptions (e.g., watched threads, sections, tags, and new blog posts), customer support (e.g., provide troubleshooting), account management, features and functionality (e.g., the ability for you to login using a social media account and post content), keep you informed about our services (e.g., notification of maintenance), research and development of new services, internal record keeping, and billing purposes (e.g., charge you for your purchases, manage subscriptions, purchase confirmation, send invoices and receipts, and keep you informed about your billing status, such as a failed charge or expiring credit card).
Cookies and browser storage
Improve and support our services
We use some information to improve our services, create new features, and keep everything up and running, including the recording and analysis of visits to detect website errors and slow pages, direct marketing and promotion of our services, monitoring and blocking intrusion attempts, and showing ads to support the cost of offering our services.
We may use your information to support your access to the resources, data, and features of our services, which includes the ability for you to secure your account (e.g., security questions to confirm it is your account), regain access to your account (e.g., verify your identity first), reset your password, stay informed by email of activity on our site that you may reasonably expect to be notified about (e.g., someone replies to a direct message that you initiated; service, product, or policy updates; and security alerts or information that may affect you), and other relevant communications.
We use analytical data for assessment, analysis, and evaluative purposes, which include to understand how our services are used, improve our services, and to focus our efforts on changes that users may find more valuable.
We, our advertisers, and the service providers we use (e.g., Google Ads and DoubleClick) may use information about you (e.g., ads viewed, ads clicked, and demographics) for legitimate and reasonable purposes, such as improving the relevance of ads you see, the frequency of ads you see (e.g., ad rotation), learning the value or quality of an advertisement, and to decide whether to purchase or renew an advertisement.
Marketing and promotions
We may use certain information about you for marketing and promotional purposes, which includes sending you news and newsletters, special offers, promotions, and other information we think may interest you.
Protect our services and prevent misuse
We may use the information that we store (e.g., your IP address and log data), the information that we can access from the service providers we use (e.g., PayPal and Stripe), and the information that we can collect from other means (e.g., public records) to automatically and manually protect our services, protect our legal rights and interests, and/or prevent misuse of our services, which includes risk assessment and investigating, detecting, preventing, and dealing with suspected or apparent fraud; spam; violations of our rules, policies, or terms; threats and attacks (e.g., malicious hacking); scams; and other illegal or abusive activities.
For example, we may review your content and activity for reasonable and legitimate purposes, such as determining whether the rules are being followed and during investigations (e.g., fraud reports that involve you, someone you have interacted with, or someone who has interacted with you). We use the same technologies that banks have used for state-of-the-art fraud prevention (e.g., ETag headers and browser fingerprinting).
Comply with the law
We may collect and use any information necessary to comply with legal obligations (e.g., your birthday to confirm that you are old enough to use our services).
How we share information
Account and profile
Your account and profile information may be visible and used to provide details about you to others based on your privacy settings and use of our services (e.g., your posts and messages will display your username, default/custom title, and signature (if set); and your posts in certain sections, such as the marketplace, will display your local time based on your set time zone). Some of your profile information is hidden by default (e.g., your birthday), but you may share it by adjusting your privacy settings.
Content and activity
Your content and activity may be visible to anyone with permission to view it, which you grant by performing actions (e.g., liking content), by posting within specific sections or on profile pages, using the chatroom, or by direct messaging others on NamePros. The majority of sections on NamePros are public for everyone to see, including members and visitors that are not logged in (guests, bots, and search engines), and you should assume that all of your actions, activity, and content on NamePros are public or may become public.
We do not have any control over the sharing, processing, or protection of your content or activity that is copied by a third party (person or bot) with permission to access it. Once you grant access to information, it may be reproduced or posted elsewhere on NamePros (e.g., a direct message that you send to John may be shared by John in a public forum) unless the content resides (or the activity took place) in a section on NamePros that forbids it from being shared elsewhere on NamePros (e.g., certain groups).
In general, once you post content publicly or to a large group of people, it will become very difficult (or impossible) for you to remove all records of that content because people could manually save a copy of your content, or they could ask an archive service (e.g., the Wayback Machine) to archive it.
Your content and activity may be visible anywhere to anyone with permission to view it, including your profile page, the news feed of your followers, on the right side of each page ("sidebar widgets"), the New Posts page, the Overview page, the Activity page, or selected for inclusion in articles (e.g., Top Topics).
Payments that you make to us, whether solitarily or through subscription, are processed by secure third-party payment processors (e.g., Stripe and PayPal) that store most of the information we collect from you for billing purposes.
Analytics and metrics
We may share certain information with advertisers that cannot reasonably be used to identify you, including aggregate statistics and summary metrics about the performance of ads or content on NamePros, such as the total number of ad views and ad clicks over a period of time, the number of people who saw a particular ad, and the demographics about the people who saw the ads or content on NamePros.
We sometimes allow leading advertisers (e.g., Verisign, Inc.) to use a page tag to collect information about the performance of their ads, which can be used to identify you, including the page you saw their ad on, whether you clicked their ad, and your IP address.
Quantcast, one of the service providers we use, publicly shares general information about our analytics if you have an account with them, but the summary information they share cannot be used to identify you.
Protection and prevent misuse
We may share your information (e.g., IP address) where we believe it is necessary to protect NamePros, our services, or our users; where it may be necessary for reasons of public interest; or to prevent misuse of our services (e.g., by using StopForumSpam and DNSBLs); including when it may be necessary for our safety or the safety of others (e.g., fraud prevention and personal threats), for the protection of rights or property, where we suspect a threat (e.g., financial scam) and seek investigative assistance, when we believe it is necessary to respond to claims against us, and where we believe your actions are in violation of our rules, policies, or the law (e.g., to discourage illegal activities).
Third-party service providers
We only share the information necessary with these service providers, and only at the time necessary, for the purposes of providing our services to you, supporting our services, protecting our services, or providing the third-party’s services to you (e.g., Gravatar if you choose to use it). For example, SendGrid needs your email address in order to send you email notifications on our behalf. You may indirectly provide information to these service providers by accessing our services, such as Cloudflare receiving your IP address when you visit our website because Cloudflare helps us quickly deliver content to you.
The privacy policies of the service providers that we use apply primarily to NamePros, but we have made them available to you because they may contain clauses that are of interest to you:
- Cloudflare (web services and security)
- SendGrid (email)
- PayPal (billing)
- Stripe (billing)
- Intercom (customer support)
- Google Analytics (analytics)
- Quantcast (analytics)
- Google Ads (advertising)
- DoubleClick (advertising)
- New Relic (monitoring our services)
- Datadog (monitoring our services)
- Amazon Web Services (cloud services)
- StatusPage (website status and reporting)
- StopForumSpam (spam and fraud prevention)
- Gravatar (optional avatar service)
- AddThis (social sharing option)
Social media and similar service providers
We offer third-party buttons (e.g., Tweet and AddThis) on many pages that allow you to share content on popular social networks (e.g., Twitter, Google+, and Facebook) and similar services (e.g., Gmail and LinkedIn).
We also offer embedded media (e.g., YouTube videos) on many pages that allows you to seamlessly view content from approved third-party services (e.g., YouTube, Vimeo, Dailymotion, Facebook, Imgur, and Liveleak).
These third-party services usually log information (e.g., the webpage you are viewing) for various purposes (e.g., to allow you to quickly share a link to one of our webpages or to provide viewing statistics on video playback). We do not deliberately provide them with information, but your browser may be providing them with information automatically as you use our services.
We may share any or all of your information if we are required to do so by law (e.g., for law enforcement or national security purposes) or to comply with legal process (e.g., to respond to subpoenas, warrants, and court orders).
Change of control or similar event
We may share and/or transfer your personal data as part of a merger, sale, or transfer of our assets, an acquisition, financing, dissolution, divestiture, bankruptcy, reinvention, restructuring, reorganization, or similar event.
Control of the information we collect
Account, profile, content, and activity
You may view and update most of your personal information (e.g., your occupation and email address on your account), content (for a period of time), privacy settings (also known as privacy controls), and account preferences in the same way or similar to how you added them or set them (e.g., replace your personal details with a blank value, and if you like a post, then unlike it to remove your like), including:
Alternatively, you may choose to hide certain information about you (i.e., limit who may view it) rather than remove it. You may also control who may contact you on NamePros with the exception that staff may always contact you.
You may request to change your username (free) from your real name to any available and allowed alias, which will update the username on all of your past posts to an alias.
You may remove profile posts made by others (comments) or yourself (status updates) from your profile page.
Where you decide to perform an action (e.g., post or like content) and whom you decide to direct message determines the permission on your activity and your content on NamePros.
You may also request to close your account.
Notifications and direct marketing
You may control the notifications that you receive from us (e.g., disable all email notifications).
You may adjust your Messaging Preferences to opt-in or opt-out of receiving certain emails from us about news, updates, and promotional messages.
You may also use the unsubscribe link in any emails that you receive from us.
Social networks and similar services
We do not have control over the security practices, the privacy policies, or the collection, use, or storage of your information on popular social networks and similar services (e.g., Twitter, Google+, Facebook, and LinkedIn), but they typically offer some form of opt-out that you can find by visiting their respective websites, viewing their privacy policies, and adjusting your settings with them.
Many web browsers accept cookies by default, but you can typically set your browser to block, remove, or reject cookies. If you choose to block or reject cookies on NamePros, it will hinder the availability and functionality of our services for you. We do not have the ability to access, read, or write cookies set by third parties that we use.
At any time, you can contact us to easily withdraw your consent of us processing your personal data, but consent is not the only basis by which we may process your personal data.
Access and data portability
We provide you with direct access to a secure account area with multiple pages to view and manage your personal data that you have provided us for your account.
Additionally, you may contact us to request access to your personal information, including the purposes for which it is used, what we have done with it, and what we are currently doing with it, such as what kind of information about you we have shared (if any) with third parties for their direct marketing purposes, along with the names and addresses of those third parties and examples of the products or services they have marketed if it is reasonably unclear from their names and addresses.
You may also request an electronic copy of your personal data that is attached to your account in a structured, commonly-used, and machine-readable format, which can be provided to a different service. However, there may be certain information (e.g., technical metadata) that we may not share with you (e.g., for security reasons).
Data care and management
You may contact us at any time about our processing of your personal data (e.g., to ask a question, request that it be restricted, object to it, request cancellation and erasure, lodge a complaint, or request assistance).
- you have given consent to it for one or more specific purposes, which you may contact us to revoke at any time;
- it is necessary for compliance with a legal obligation or to defend legal claims;
- it is necessary in order to protect the public interest or to protect the vital interests of you or others;
- it is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, such as misuse and fraud prevention, network and information security, direct marketing and promotion of our services, research and development, and indicating possible criminal acts or threats to public security;
- or you have expressly made information public.
You must not share special categories of your personal data (“sensitive data”) with or on NamePros (a public forum by trade), such as the kind of personal data that reveals your racial or ethnic origin, philosophical or religious beliefs, genetic or biometric data, political opinions, or data concerning your sexual orientation, sex life, or health, unless you understand and agree that by doing so:
- you have obviously made that sensitive data of yours public, which means it could be viewed by and transmitted to a third country without an adequate level of protection;
Security and data transfers
We are committed to protecting your personal data to the best of our ability, but we need your help. We encourage you to take the necessary steps to help keep your personal information safe, such as choosing a strong password, not sharing your password with others, and always logging out of NamePros on computers that may be accessed by someone else.
We take reasonable measures to secure your personal information that we collect and safeguard it from theft, loss, misuse, unauthorized access, disclosure, alteration, and destruction. Compliance with the principles of data protection by design and by default are important to us, and we are committed to conducting Privacy Impact Assessments (PIA) in the initial stages of new projects and processes involving personal data.
We transfer data from the location where it is submitted to data centers in the United States (limited to the Privacy Shield framework) and Canada (commercial organizations) on the basis of adequacy, as they have been recognized as providing adequate protection and appropriate safeguards.
We make every effort to ensure that information is secure during network transit no matter your location. We require that connections to our services use industry-standard encryption (e.g., TLSv1.2 or TLSv1.3), and we have requested that modern browsers connect to our services exclusively through HTTPS by way of HSTS preloading (i.e., using https://www.namepros.com/ rather than http://www.namepros.com/). In the event that we identify a data breach that involves your personal data, we will notify you within 72 hours of discovery.
Changes and notices
Acceptance and consent
You must not provide your personal information to us if you are under the age of 13 years old, or the equivalent age in your jurisdiction (e.g., you must be at least 16 years old in many locations), whichever is greater, unless consent is given or authorized by your holder of parental responsibility. Our services cannot operate securely without personal information; therefore, you cannot use our services if you are underage.
If you have any questions about our policies or inquiries about our data practices, please contact us at [email protected] anytime.