Privacy Policy

1. Scope

This Privacy Policy explains how Suds and Buds, LLC ("we," "us," "our") collects, uses, discloses, and protects personal information in connection with notparked.com (the "Site") and our sales and marketing activity. It applies to visitors to the Site, people who submit an offer or inquiry, buyers, and recipients of our business outreach.

It does not apply to third-party services that operate under their own policies — notably Escrow.com and Stripe, which handle payment and identity verification directly and are described in Section 5.

2. Information we collect

Information you give us

• Offer and inquiry details: your email address, the domain you are interested in, the amount you offer, and any message you write.
• Correspondence: the contents of emails and other messages you send us, and our replies.
• Transfer details: the registrar and account identifier you designate to receive a domain.

Information collected automatically

• Server and request data: IP address, user agent, referring URL, pages requested, and timestamps, logged by our hosting provider for security, abuse prevention, and reliability.
• Analytics data: pages viewed, approximate location derived from a truncated IP address, device and browser type, and how you arrived at the Site. Collected via Google Analytics — see Section 6, including how to opt out and why visitors in the EEA, UK, and Switzerland are excluded.
• Email engagement: whether an outreach message was delivered, opened, or clicked, and which link was clicked. This is standard sales-tooling telemetry, used to gauge interest and to stop contacting people who are not interested.

Information from third parties

We obtain business contact information from Apollo.io and comparable B2B data providers. This typically includes a work email address, name, job title, employer, employer website, and company size or industry. We use it to identify organizations that may have a commercial interest in a specific domain. We rely on those providers' representations that the data was lawfully collected, and we independently honor every opt-out we receive regardless of source.

What we do not collect

We do not collect payment card numbers, bank account details, government identification, or any special category data. Those are collected directly by Escrow.com or Stripe within their own systems; we never see or store them.

3. How we use information

• to respond to your offer or inquiry and negotiate a sale;
• to open, fund, and complete an escrow transaction and transfer a domain;
• to send business-to-business outreach about a domain we believe is relevant to your organization, and to follow up where you have not opted out;
• to maintain a suppression list of addresses that must never be contacted again — this is itself a use of personal information, and it is the reason we retain an opt-out record indefinitely;
• to detect and prevent fraud, spam submissions, and abuse of the Site;
• to keep records required for tax, accounting, and legal compliance, and to establish or defend legal claims.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not build advertising profiles.

4. Legal bases (UK/EU visitors)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Contract — to negotiate and perform a domain sale you have asked for.
• Legitimate interests — to market our domains to businesses likely to value them, to secure the Site, and to keep records. We have assessed that this outreach is limited in scope, directed to work addresses in a professional capacity, and easy to stop, and that it does not override your rights.
• Legal obligation — to meet tax, accounting, and law-enforcement requirements.
• Consent — where required for certain electronic marketing. You may withdraw consent at any time without affecting prior processing.

5. Who we share information with

We share personal information only with the following categories of recipients, each of which processes it for defined purposes:

• Escrow.com (Internet Escrow Services) — to open and settle escrow transactions. They act as an independent escrow agent, not our processor, and collect identity and payment information directly from you under their own privacy policy.
• Stripe, Inc. — to process card payments on low-value transactions, under its own privacy policy.
• Cloudflare, Inc. — hosting, DNS, and network security for the Site.
• Google LLC — website analytics, as described in Section 6. Configured without advertising features, and disabled entirely for visitors in the EEA, UK, and Switzerland.
• Apollo.io and our email sending providers — to source business contact data and deliver outreach and transactional notifications.
• Registrars (such as the registrar holding the domain and the one receiving it) — to effect a transfer you have requested.
• Professional advisers — accountants and lawyers, under duties of confidentiality.
• Authorities — where we are legally required to disclose, or where disclosure is necessary to protect our rights, safety, or property.
• A successor — if we sell or reorganize the business or its assets, subject to this Policy continuing to apply.

6. Cookies and analytics

We use Google Analytics 4 to understand how many people visit the Site, which domains they look at, and where they arrived from. It sets first-party cookies to distinguish one visit from another, and it collects the request data described in Section 2 along with a truncated IP address.

We have configured it as follows:

• IP anonymisation is on, so your full IP address is not stored.
• Advertising features, remarketing, and ad personalisation are switched off. We do not build advertising audiences and we do not share analytics data with Google for advertising purposes.
• Visitors in the EEA, the United Kingdom, and Switzerland are not tracked at all. Analytics storage is denied by default in those regions using Google Consent Mode, so no analytics cookies are set and no analytics data is collected. That is why you will not see a cookie banner — we do not set non-essential cookies for the people whose law requires prior consent.

Cloudflare may additionally set a strictly necessary cookie for security and bot mitigation. That one is required for the Site to function and cannot be switched off.

You can opt out of Google Analytics everywhere by installing Google's browser opt-out add-on, or by blocking cookies for this Site in your browser. The Site works fully with analytics blocked.

Outreach emails may contain a tracking pixel indicating whether the message was opened. You can prevent this by disabling remote image loading in your email client.

We honor Global Privacy Control signals as a valid opt-out request where applicable law requires it.

7. How to opt out of our outreach

Every outreach email includes an unsubscribe mechanism. You may also reply "stop" or "unsubscribe" to any message, or email hello@notparked.com.

We process opt-outs promptly and in all cases within ten (10) business days, as the CAN-SPAM Act requires. We add the address to a permanent suppression list so that it is excluded from all future campaigns, including lists built later from new data. Opting out is free and we will not require you to give any information beyond your email address, or to log in to anything, in order to do it.

8. Your rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete information; obtain a portable copy; object to or restrict processing (including our legitimate-interests marketing); withdraw consent; and be free from discrimination for exercising these rights.

To exercise a right, email hello@notparked.com. We will verify your request by confirming control of the email address in question, and will respond within the time your law allows — 45 days under the CCPA and one month under the GDPR, each extendable where permitted. An authorized agent may submit a request on your behalf with written proof of authority.

If you are in the UK or EU and are unsatisfied with our response, you may complain to your supervisory authority — in the UK, the Information Commissioner's Office.

9. Retention

• Offers and inquiries that do not convert: up to 24 months from last contact, then deleted.
• Completed transactions: at least 7 years, to meet tax and accounting obligations and to evidence chain of title.
• Suppression list entries: retained indefinitely — deleting them would cause us to contact you again.
• Server logs: typically 30 days.

10. Security

The Site is served over HTTPS. We limit access to inquiry data to the people who need it, and we deliberately keep payment and identity data out of our systems by routing it to Escrow.com and Stripe. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any regulator as required by law.

11. International transfers

We are based in the United States and our service providers are primarily based there. If you are outside the U.S., your information will be transferred to and processed in the U.S., where data protection law may differ from your own. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

12. Children

The Site is a business-to-business service and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, email hello@notparked.com and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with a new "Last updated" date, and for material changes we will take additional steps to notify you where we have your contact details.

14. Contact

Suds and Buds, LLC
Glenview, Illinois
hello@notparked.com