Privacy Policy Domain Parking Website

Last Updated: May, 2026

A. Introduction

BY USING OUR SERVICES, INCLUDING OUR WEBSITES AND APPLICATIONS, YOU ARE AGREEING TO BE BOUND BY THE TERMS OF THIS PRIVACY POLICY. YOU ARE ENCOURAGED TO READ THIS PRIVACY POLICY IN ITS ENTIRETY. IF YOU DO NOT WANT YOUR INFORMATION USED OR DISCLOSED IN THE MANNER DESCRIBED IN THIS PRIVACY POLICY, OR IF YOU DO NOT AGREE WITH ANY TERM OR CONDITION IN OUR TERMS, INCLUDING THIS PRIVACY POLICY, THEN YOU MUST NOT ACCESS OR USE OUR SERVICES (IN WHOLE OR IN PART) OR SUBMIT YOUR INFORMATION TO US.

GMO Registry US, Inc. provides the privacy policy to the controller and supports them in ensuring compliance with data protection requirements but does not independently handle data processing duties towards users. Within the scope of providing hosting services for the domain parking site, GMO Registry US, Inc. acts solely as a data processor and is not responsible for the data processing itself under the General Data Protection Regulation (GDPR), as well as to users in the United States — in particular residents of the State of California under the California Consumer Privacy Act (CCPA/CPRA). The controller of the domain parking website is entirely responsible for the data processing obligation to inform data subjects.

We may update this Privacy Policy from time to time to reflect new technologies and/or changes in legislation. We will notify you of any changes in an appropriate manner. Your concerns will always be taken into account when making such updates.

This Privacy Policy has a modular structure: a general section covering all processing activities when the website is accessed (Section B), specific sections for individual processing situations (Sections C–D) and US-specific rights (Section E). We may update this policy from time to time and will notify you of material changes in an appropriate manner.

B. General Information

I. Definitions

This Privacy Policy is based on the following definitions:

• 'California Consumer Privacy Act ('CCPA')' means the California statute intended to enhance privacy rights and consumer protection for residents of California, United States.
• 'Colorado Privacy Act ('CPA')' means the Colorado law providing consumers with data privacy rights and mandating that businesses respect universal opt-out mechanisms for targeted advertising and data sales.
• 'Connecticut Data Privacy Act ('CTPA')' means the Connecticut statute regulating the protection of personal data, with a focus on data minimization and the right to opt-out of profiling for automated decisions.
• 'Children's Online Privacy Protection Act ('COPPA')' means the U.S. federal law that regulates the online collection of personal information from children under the age of 13 and requires verifiable parental consent.
• 'California Invasion of Privacy Act ('CIPA')' means the California statute originally designed to prevent unauthorized wiretapping and eavesdropping, now frequently applied to the use of website tracking technologies without consent.
• 'General Data Protection Regulation ('GDPR')' means the European Union ('EU') law on data protection and privacy applicable to individuals within the EU.
• 'Utah Consumer Privacy Act ('UCPA')' means the Utah law that provides residents with fundamental data rights, such as access and deletion, while establishing specific frameworks for data controllers and processors.
• 'Virginia Consumer Data Protection Act ('VCDPA')' means the Virginia statute that grants residents rights to access, correct, and delete their personal data and requires businesses to perform data protection assessments.
• 'personal data' means any information relating to an identified or identifiable natural person ('data subject'). A person is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data, or by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Identifiability may also be given by linking such information or other additional knowledge. The origin, form, or embodiment of the information is irrelevant (photos, videos, or audio recordings may also contain personal data).
• 'personal Information' under the CCPA means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. For purposes of this Privacy Policy, "Personal Data" is included within this definition.
• 'processing' (Art. 4 No. 2 GDPR) is any operation involving personal data, whether or not with the aid of automated (i.e., technology-based) procedures. This includes, in particular, the collection (i.e., procurement), recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning, combining, restricting, erasing, or destroying personal data, as well as changing the purpose or objective for which the data was originally processed.
• 'controller' (Art. 4 No. 7 GDPR) is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
• 'third party' (Art. 4 No. 10 GDPR) is any natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or processor, are authorized to process personal data; this also includes other legal entities belonging to the group.
• 'processor' (Art. 4 No. 8 GDPR) is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, in particular in accordance with its instructions (e.g., IT service providers). In terms of data protection law, a processor is not a third party.
• 'consent' (Art. 4 No. 11 GDPR) of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

II. Controller

The website provider and controller (according to Art. 4 (7) GDPR) can be contacted via the contact data provided in the legal notice or via email konnichiwa@taku.com.

III. Legal Basis for the Processing of Personal Data

We ensure that we only process your personal data in accordance with the law. This processing is supported by different legal bases, which include:

IV. Your Rights under the GDPR

In accordance with the law, you may exercise the following rights against the data controller:

Should you have any questions or concerns regarding your personal data, please contact us at: konnichiwa@taku.com. We have appointed a Data Protection Officer to assist us with compliance with applicable privacy regulations. To communicate with our DPO, please email to dpo@taku.com.

You have the right to make a complaint at any time to the data protection supervisory authority in your country. The UK regulator for data protection issues is the Information Commissioner's Office (www.ico.org.uk). The details of the relevant authorities in other EU/EEA countries can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

V. Retention Periods

In accordance with legal regulations, the data we process will be either erased or its processing will be restricted. Unless explicitly stated otherwise within this Privacy Policy, we will delete the data stored by us as soon as it is no longer necessary for its intended purpose. Data will only be kept beyond the point it is needed for its original purpose if this is required for other legally permissible reasons or if statutory retention obligations mandate a longer storage period. In these instances, processing will be limited (i.e., blocked), and the data will not be processed for other purposes. For example, a legal obligation to retain data exists due to documentation requirements in tax and commercial law.

VI. Children

Children under the age of 16 (EU/EEA) and under the age of 18 (US) are not permitted to use our online services.

DUE TO THE AGE RESTRICTIONS FOR USE OF THIS WEBSITE AND THE SERVICES, NO INFORMATION OBTAINED BY THE WEBSITE AND/OR THE SERVICES, FALL WITHIN THE CHILD ONLINE PRIVACY ACT (COPA) AND IS NOT MONITORED AS DOING SO.

VII. Recipients of Data, Third-Country Transfers, Linked Third-Party Websites

Processors are companies that we use to process your personal data. They only work on our behalf and are contractually bound to protect your privacy. You can find more information about the processors in the individual procedures.

Third parties are companies that we contract to provide certain services or to whom we are required to transfer data by accessibility use policy or by law. These companies are responsible for handling your information.

In order to provide you with the best possible service, we work with partners in different countries. This means that your information may be transferred to countries outside the EU/EEA/US.

We make sure that your information is protected when it is transferred abroad. We use various measures to do this:

VIII. Data Security

We apply technical and organizational security measures to protect personal data that is collected, in particular against accidental or intentional manipulation, loss, destruction, or against the attack of unauthorized persons. Our security measures are continuously improved in line with technological developments. To protect your data in transit, we use encryption technologies (TLS).

IX. No Automated Decision Making

We do not use automated decision-making, including profiling.

C. Collection and Processing of Personal Data

We explain here how the controller processes your personal data when you visit this domain parking website. Information about tracking is provided separately under section D.

I. Provision of Website for Informational Use (log files)

When you visit this domain parking website, certain information is automatically stored in so-called server logs. This data helps to improve the website and ensure smooth operation.

The data collected includes:

• Technical information (Browser type, version, and settings, device type and screen resolution, operating system of the accessing system, referrer URL (previously visited website), sub-pages visited and duration of visit, name of the retrieved file or page, date and time of access, internet service provider (ISP), amount of data transferred, access status (e.g., download, success, or error message))
• IP address

We process this information to enable use of the website and to enhance its performance. Your IP address is stored only for the duration of your visit to allow access on an informational basis. Any further use or evaluation takes place solely under the following provisions and, where applicable, with your consent.

The processing of this data is necessary under Article 6(1)(f) GDPR for the proper display of our website and to ensure its stability and security.

For operating this domain parking website, we engage the provider GMO Registry US, Inc, 200 Continental Drive Suite 401, Newark, DE 19713 USA, to process meta and communication data of our users on our behalf. This is done based on our legitimate interest in ensuring an efficient and secure provision of the website in accordance (Article 6 (1)(f) and Article 28 GDPR). An order processing agreement is in place.

GMO Registry US, Inc. solely provides the technical infrastructure that enables this domain to be monetised via an advertising technology platform. GMO Registry Inc. is neither the owner nor the operator of this domain. The company accepts no responsibility for the data processing that takes place in connection with the use of this website. The respective domain owner or website operator is the sole controller.

II. CDN

For our website, we use the services of the Content Delivery Networks (CDN) of Cloudflare, Inc., USA ("Cloudflare"), and Constant Company, LLC, USA ("Vultr").

A CDN ensures that content on our site—such as images, fonts, or scripts—is delivered via various servers distributed worldwide. This makes our website load faster and protects it against technical failures or attacks.

When you visit our website, your browser establishes a connection to the servers of the providers Cloudflare and Vultr. Among other things, your IP address and other technical information (e.g., browser type, operating system, time of visit) are transmitted. This data is used exclusively to speed up the display of our website and to ensure security.

You can find more information about the providers in their privacy policies:

• Cloudflare: https://www.cloudflare.com/privacypolicy/
• Vultr: https://www.vultr.com/legal/privacy/

The use of CDNs is based on our overriding legitimate interest (Article 6 (1)(f) GDPR) in the technically secure and optimized provision of our online services.

D. Tracking Pixels & Analysis

I. Tracking Law in EU/EEA and UK

Access to information or the storage of data on your device (e.g., through cookies, device fingerprinting, or local storage) is based on the national implementation of

• Article 5(3) of the EU ePrivacy Directive 2002/58/EC,
• Norwegian Electronic Communications Act (Ekomloven – LOV-2024-12-13-76),
• Art. 94 of the Icelandic Electronic Communications Act (Lög um fjarskipti nr. 75/2021),
• Art. 52 para. 2 of the Liechtenstein Communications Act (Kommunikationsgesetz; KomG),
• Section 3-2 of the Norwegian Electronic Communications Act (Ekomloven – LOV-2024-12-13-76),
• Regulation 6 of The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR),
  • If you have given your consent (Article 6(1)(a) of the GDPR)
  • To carry out the transmission of a message
  • To provide digital services

II. Tracking Law in the United States

Instead, a patchwork of state laws governs the use of cookies and tracking technologies, particularly where they involve the collection or "sale" of personal information. The following summarizes the applicable legal framework for U.S. residents:

• CCPA / CPRA: California Consumer Privacy Act / California Privacy Rights Act
• VCDPA: Virginia Consumer Data Protection Act
• CPA: Colorado Privacy Act
• CTPA: Connecticut Data Privacy Act
• UCPA: Utah Consumer Privacy Act
• COPPA: Children's Online Privacy Protection Act
• CIPA: California Invasion of Privacy Act

III. Use of Tracking

The use of tracking provided by partners (cookies and similar tracking technologies, such as web beacons, pixels, tags and scripts) is based on your consent.

You can limit the use of tracking pixels and similar technologies by setting your browser's tracking protection to the highest level, using an ad blocker (e.g., uBlock Origin), or blocking third-party cookies.

• Google Chrome
• Internet Explorer
• Microsoft Edge
• Mozilla Firefox
• Safari (Desktop)
• Safari (Mobile)
• Android Browser

For other browsers not listed, please consult the documentation that your browser manufacturer provides.

Please note that our cookie consent tool provides more information about the cookies we use, including their purposes and lifespan. Revoking your consent at any time via our consent management tool.

Our parking website enables us to measure the performance and effectiveness of advertising campaigns. This allows us to demonstrate the benefits of their ads to our advertising customers and increase the relevance of the ads we place.

We collect data by:

• Partner: We work with Yahoo Inc., USA, to measure advertising effectiveness. Yahoo is certified under the Data Privacy Framework and thus guarantees the highest data protection standards.
• Measurement: Measurement is based on your interactions with the ads. These typically include:
  • ad impressions (views of the ad),
  • clicks on the ads, and
  • sales generated by the campaign (known as "conversion data").

This data is analyzed to generate reports on the overall performance of the campaign (e.g., how many actions can be attributed to the ad). These reports may also show performance based on different user demographics.

Handling of your data:

When you see or click on an ad, your interaction data is included in the campaign analysis. The reports are created in aggregated and anonymized form so that no conclusions can be drawn about individual users.

IV. Tracking Pixels

We use tracking pixels (also called "counting pixels" or "web beacons") on our digital services such as websites and emails. These are tiny graphic elements (1x1 pixels) embedded in the content, which are automatically requested from a server when you access our services. This allows us to collect statistical data for usage and reach analysis.

When a tracking pixel is loaded, the following data may be processed:

• IP address,
• browser and operating system information,
• referrer URL,
• timestamp of the request,
• possibly page usage information.

You can revoke your consent at any time with future effect by changing your preferences in our consent management tool.

V. Analysis

We use the Microsoft Clarity analytics service on our website. The service is provided by our processor, Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Dublin 18, Ireland), with whom we have entered into a data processing agreement. If your data is transferred to the US, this is done based on the EU-US Data Privacy Framework (DPF). Microsoft is certified under this framework to ensure an adequate level of data protection.

For more information about the analytics service, please refer to Microsoft's general privacy statement, which also covers Microsoft Clarity: https://privacy.microsoft.com/en-us/privacystatement.

E. U.S. State Privacy Rights

I. Scope and Applicability

This section supplements the general information set out elsewhere in this Privacy Policy. It applies exclusively to individuals who reside in U.S. states that have enacted their own comprehensive data privacy legislation, and only to the extent that GMO US by Taku meets the jurisdictional thresholds established under the applicable state law.

The following states currently provide their residents with specific statutory privacy rights, which are described in more detail below: California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia. The precise scope and nature of these rights varies from state to state; where differences exist, they are noted accordingly.

II. Personal Information We Collect — U.S. Disclosure

The table below sets out the categories of personal information that GMO US by Taku collects or has collected in the preceding 12 months. For each category, it specifies whether we disclose that information for a business purpose, whether it is shared in connection with behavioral targeted advertising, whether it is disclosed in exchange for services of value, the categories of third parties who receive it, whether it is sold, and our intended retention period.

In the course of our business operations, we process various categories of personal data with a focus on transparency and security. The information we collect includes technical identifiers (such as IP addresses and device IDs), commercial information (including service history and transaction records), internet activity data (such as browsing history and interactions with our advertisements), and geolocation data derived from IP addresses.

All such data is disclosed for legitimate business purposes, specifically for analytics, the technical delivery of our services, and—in the case of location data—for advertising relevance. This information is shared exclusively with selected service providers, vendors, affiliates, and operational partners. It is important to note that we do not sell your personal information, nor do we share it with third parties for cross-context behavioral targeted advertising. We retain this data only as long as necessary to fulfill the stated purposes or as required by applicable legal retention periods.

We collect personal information directly from you and indirectly through your use of our services — for instance, through your interactions with our website, forms you complete, or services you purchase. We use that information for the purposes described in this Privacy Policy and disclose it as set out above.

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising. These commitments apply equally to personal information relating to individuals under the age of 16.

III. Rights Available to Residents of Covered States

Subject to applicable jurisdictional thresholds and state-specific limitations, residents of the states listed in Section E.I have the right to:

• Confirm whether the controller processes their personal information and, if so, to obtain access to the specific information collected.
• Request deletion of personal information that we hold about them, subject to certain legal exceptions.
• Request correction of personal information that is inaccurate, having regard to the nature of the data and the purposes for which it is processed. (This right does not apply to residents of Iowa or Utah under current state law.)
• Receive a portable copy of their personal information in a structured, commonly used, machine-readable format.
• Opt out of the processing of their personal information for targeted advertising purposes. (Iowa currently does not provide this right in relation to targeted advertising.)
• Opt out of the sale of their personal information. (We do not sell personal information; however, residents may still submit a request.)
• Opt out of profiling where such profiling produces legal or similarly significant effects. (Iowa and Utah currently do not provide this right.)
• Limit the use and disclosure of sensitive personal information, or to require explicit consent before such processing takes place, in accordance with applicable state law.

The exact scope of each right depends on the state in which you reside. Where a right is described above as subject to state-specific exclusions, residents of the relevant state should assume that the corresponding right may not be available to them.

To exercise any of the rights set out in this section, please contact us by email at dpo@taku.com or in writing via the contact data provided in the legal notice. Before we act on any request, we will take reasonable steps to verify your identity and confirm that the personal information in question relates to you.

If we decline to act on a request — in whole or in part — you may appeal that decision by sending a written appeal to dpo@taku.com. We will review your appeal and respond within the timeframe required by applicable state law. To the extent permitted by law, we may charge a reasonable fee to process requests that are excessive, repetitive, or manifestly unfounded.

IV. California Privacy Notice (CCPA / CPRA)

This section applies solely to individuals who reside in the State of California (referred to in this section as "consumers" or "you"). It has been adopted to meet the requirements of the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, the "CCPA").

Additional Restriction on Use: We will not use personal information collected from California consumers for purposes that are materially different from, unrelated to, or incompatible with the purposes for which it was collected, without first providing you with notice.

Disclosure Practices: When we disclose personal information to a third party for a business purpose, we do so under a written contract that describes the purpose of the disclosure and requires the recipient to keep the information confidential and use it only to carry out the agreed services.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Your Rights as a California Consumer

Right to Know and Data Portability. You have the right to ask us to disclose, for the 12-month period preceding your request, the following information:

• The categories of personal information we have collected about you.
• The categories of sources from which that personal information was collected.
• The business or commercial purpose for which we collected or disclosed the personal information.
• The categories of third parties with whom we have shared your personal information.
• The specific pieces of personal information we hold about you.
• Where we have sold or disclosed personal information for a business purpose: a list identifying the categories of personal information that each category of recipient received, distinguishing between disclosures made for business purposes and any sales.

Right to Deletion. You may request that we delete personal information we have collected from you and that we direct our service providers to take the same action. We will honor deletion requests unless retaining the data is necessary for one of the following purposes:

• Completing a transaction for which the information was collected, providing goods or services you have requested, or fulfilling a written warranty or recall obligation under federal law.
• Detecting security incidents or protecting against malicious, deceptive, fraudulent, or unlawful activity.
• Debugging our products to identify and fix errors that impair existing functionality.
• Exercising free speech rights or enabling another consumer to exercise theirs, or exercising another right provided by law.
• Complying with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.).
• Supporting public interest research or peer-reviewed scientific or historical research, where deletion would likely render that research impossible or seriously impaired, and where you have previously given informed consent.
• Uses that are strictly internal and reasonably consistent with your relationship with us and your likely expectations.
• Complying with a legal obligation.
• Other internal and lawful uses that are compatible with the context in which you provided the information.

Right to Correct. You may ask us to correct inaccurate personal information that we hold about you, taking into account the nature of the information and the purposes for which it is processed.

Right to Opt Out of Sale or Sharing. You may direct us not to sell your personal information or share it with third parties for cross-context behavioral advertising. As noted above, we do not currently engage in either practice; however, you may still submit a request and we will confirm our position in writing.

Right to Limit Use of Sensitive Personal Information. Where we process sensitive personal information, you may direct us to limit our use and disclosure of such information to what is necessary to provide the services you have requested or for other purposes permitted under Cal. Code Regs. tit. 11, § 7027(m). We collect government-issued identification documents — such as a driver's license or passport — only to verify your identity, secure your account, and detect or prevent fraud. We do not process such information to draw inferences about you, and we do not sell or share it for cross-context behavioral advertising.

Right to Non-Discrimination. We will not treat you differently because you have exercised any right under the CCPA. Specifically, we will not:

• Deny you access to our goods or services.
• Charge you a different price or rate, including through discounts, surcharges, or other financial penalties.
• Provide you with a reduced quality or level of service.
• Suggest that you will face any of the above consequences as a result of exercising your rights.

Where we offer a financial incentive program in connection with the collection or use of your personal information, participation will be voluntary and subject to your prior opt-in consent, which you may revoke at any time. Any such incentive will bear a reasonable relationship to the value of the personal information involved.

How to Submit a Verifiable Consumer Request

To exercise your rights to know, access, correct, or delete your personal information, please submit a verifiable consumer request to us by email at dpo@taku.com or by mail via the contact data provided in the legal notice.

Requests may be submitted by you personally, by a person you have legally authorized to act on your behalf, or — in the case of a minor child — by you as the child's parent or legal guardian. We cannot respond to a request or provide personal information if we are unable to verify the identity of the requestor or confirm that the personal information at issue relates to that person. Submitting a request does not require you to create an account with us.

You may submit a request for access or data portability no more than twice in any 12-month period.

Response Timelines

We will confirm receipt of your request within 10 business days. If you do not receive a confirmation within that period, please follow up with us at the contact address above. We aim to provide a substantive response within 45 days of receiving a verifiable request. Where additional time is needed — up to a further 45 days — we will notify you in writing of the reason and the expected completion date.

Disclosures made in response to an access request will cover the 12-month period immediately preceding the date the request was received. Where we are unable to comply with any part of your request, our response will include an explanation of the reasons. For data portability requests, we will provide your information in a format that is readily usable and can reasonably be transmitted to another organization.

We do not charge a fee for processing or responding to verifiable consumer requests. If a request is excessive, repetitive, or clearly without merit, we reserve the right to charge a reasonable fee and will notify you of this in advance.

California residents may, once per calendar year, request information about any personal information we have disclosed to third parties for their direct marketing purposes during the preceding calendar year. To submit such a request, please write to us at dpo@taku.com or at the mailing address above.

California Contact Details

V. Nevada

Residents of Nevada have a limited statutory right to opt out of certain sales of personal information under Nevada Revised Statutes Chapter 603A. We do not sell personal information in a manner that triggers the opt-out requirements of that statute. Nonetheless, Nevada residents who wish to submit an opt-out request may do so by contacting us at dpo@taku.com. We will respond to such requests in accordance with applicable Nevada law.