# Register.ly > Contact: mohamed@email.ly ### Posts #### .LY Support DNSSEC With DNSSEC, your domain name registrar plays a critical role in linking your signed domain to the higher-level name servers to form a “chain of trust“. This trust relationship begins at the “root” of the DNS system, then goes to the top-level domains (TLDs) and then to second level domain names (“example.com”) and on from there. How do I setup DNSSEC for .LY domain? DNSSEC adds an extra layer of authentication layer to DNS, making sure that visitors go to your domain instead of a spoofed domain. To configure DNSSEC, you first enable it with your DNS Provider and then add a DS record at your domain registrar. Step 1 – Enable DNSSEC with your DNS Provider First, DNSSEC needs to be enabled for your domain by your DNS Provider. If your DNS provider is Register.ly, e.g. your domain name servers are ns1.ns.ly, ns2.ns.ly, etc. Then please log in to your Client Area and open a support ticket requesting to enable and configure DNSSEC for your domain. If you are using another DNS provider for your domain, for example, Cloudflare, you should be able to Enable DNSSEC from your provider control panel. In this example, we are using Cloudflare DNS, but the general steps are similar to most providers. If in doubt, please contact your DNS provider customer support. By enabling DNSSEC first in the Cloudflare dashboard, you’re asking Cloudflare to generate the data necessary for adding a delegation signer (DS) record to your domain at the registrar. To obtain the Cloudflare DS record data: Log in to the Cloudflare dashboard. Ensure the website for the DS record you need is selected. Click the DNS app. Scroll down to the DNSSEC panel. Click Enable DNSSEC. You will see a dialog informing you that your configuration is pending until the DS record is added at your registrar. Next, click to expand the DS Record dropdown in the DNSSEC panel. Copy the DS Record fields for Step-2 Step 2 – Add the DS record to your registrar To complete your DNSSEC configuration, it is necessary for your domain to have a DS record in your domain DNS configuration at the registrar. To complete this step: Log in to your Client Area Open a new Support Ticket requesting to configure DS records for your “.LY” domain. Please include the following information obtained from Step-1 above: Domain Name (Required) DS Record (Required) Digest (Required) Digest Type (Required) Algorithm (Required) Public Key (Optional) Key Tag (Required) Once your support ticket is processed, you will receive confirmation that DNSSEC has been configured for your “.LY” domain Step 3 – Verification (Optional) After your receive confirmation that DNSSEC has been configured for your domain, please allow enough time for DNS propagations to complete, this might take up to 4 hours. You can use an online tool for DNSSEC validation such as DNSSEC Analyzer to test and verify the configuration for your domain from both the DNS Provider and the Registrar side. - Categories: Announcement #### .LY system now supports nTLDs As it became notable that the use of nTLDs ‘New Top Level Domains’ has increased over the past few years, with over 700 new extension publicly available! We therefore worked with the .LY registry to upgrade the .LY system so that it now accepts email addresses @nTLD extensions for the Registrant/Technical/Administrative contacts’ email address. In addition to that, the .LY system now supports nameservers with the nTLD extensions ex. ns1.mycompany.host, ns2.mycompany.host We would like to take this chance to thank all our clients who took the time to provide us with their feedback and request for this feature. We’re always happy to hear your feedback and suggestions for any service improvement. - Categories: Announcement #### Domain Name Local.ly Sold For $100,000 Tripoli, Libya – Braden Pollock of Legal Brand Domains has acquired domain name local.ly for USD 100,000.00 on behalf of Infor, the world’s third largest provider of enterprise applications and services with operations in 164 countries. The previous owner of local.ly, Hadi Naser of Libyan Spider owns several hundred premium .ly domains. His company also runs a brokerage domains.ly listing hundred other catchy .ly domain names. The legal and technical advisor on the seller’s side was London-based agency Brands-and-Jingles. Previous public sale in .ly zone comprised of names such as a.ly, active.ly, and er.ly. Back in 2010 Libyan Spider also sold dai.ly for USD 17,000.00 to French video service Daily Motion. Two previous significant .ly transactions included song.ly, sold for USD 50,000.00, and friend.ly, which was acquired by Facebook a month ago. Both deals included working sites and popular services on top of their jingly domain names. Libyan Spider is the unchallenged leader in .ly registrations with 80% share of the Libyan Internet market, currently above 10 thousand of active domain names. Anyone can register his or her own .ly name at their website. More .ly-related news can be read on the industry leading blog dot-ly.of-cour.se. The list of other premium .ly names provided by Libyan Spider can be viewed at http://ls.ly/lydomains and domains.ly About Libyan Spider Libyan Spider helps organisations of all sizes to run their businesses online. Since 2002 it has been offering its clients state of the art domain registration, web development, design and hosting services. For more information please visitLibyan Spider - Categories: News #### Happy Birthday to Us, $25 off for you! Register.ly is celebrating its 13 years of success, Happy Birthday to us! To celebrate this happy occasion with us we’re offering you $25 off on top level .LY domain registrations and renewals. Drop in the code below at checkout, and you’ll be good to go! Code: 25OFF | Order now! *Code expires on Friday July 24th, 2015. Good for use on any top level .LY domain registrations or renewals. If your renewal invoice was already generated by the system please open a ticket and a sales rep will help you apply the discount. Lowest rate for .LY domain registration/renewal is $50 Register.ly Team - Categories: Event #### Let’s Talk Domains LY domain names are now widely available. We have recently added a long list of words that end with LY to help you choose the right domain to suit your needs. Did you know that there are 8790 words that end with LY? This means that there are endless options when choosing the right domain for yourself or your company! What can you do with a LY domain name? Besides being fun to own, it’s a unique way to establish your presence on the web. If you are looking for a memorable domain name then contact us today as names are being registered quickly! - Categories: News #### LY Domain Search Add-on for Firefox An LY domain name search has been added to Firefox. This feature will allow all of our resellers and international registrars to easily check and register LY domain name(s). Use the following link to add this to your Firefox browser today! - Categories: News #### Moving our international clients from libyanspider.com to register.ly We are pleased to announce that on 6th August, we are moving our international clients to a new domain – register.ly – managed by the same company, Libyan Spider, LLC. Clients will have the same exceptional service on register.ly as before with new additional features made available to them. We have decided to separate two billing systems: local and international in order to serve our clients more efficiently. The previous system housed both clients on the same domain. With the growing number of both clientele and their different requests, this often led to confusions and delays in response due to the fact that requests were sent to different departments not related to the requests. To solve this issue, it was decided that the best solution was to separate the billing system by housing the international clientele on a separate domain – register.ly Doing this will allow for requests made by our international clients (which specifically order .ly domains) to be handled by the right team. Requests made by our local clients (domain registration, hosting, design and software) will be handled by the appropriate teams. Separating the billing system onto two different domains will allow for efficiency for both the client and our team. Date & Time Please note you will not be able to access your client area on August 6th, 10:00am to 5:00pm UTC/GMT +1 hour. New features Two factor authentication Search domain hacks within .ly domains SMS notification SSL Certificate Coming soon: API for Registrars Coming soon: Affiliate program Updates New domain name – Register.ly easy to remember and more related. Bulk actions for updating contacts and whois have been fixed. FAQs – have been updated! We have added the most recent frequently asked questions. KnowledgeBase – has been updated. Promotion Promotion 11% for 4 weeks starting with launching new site. Please note that all your data including your login details for the client area will remain same for register.ly. We enjoy doing business with you and thank you for your support. We invite you to get acquainted with our new site and look forward to any feedback that will help us better serve you. - Categories: Announcement #### New Search Tool for LY Domain ‘Hacks’ We have recently launched a new search tool for LY domain hacks. A new way for you to easily search any words ending with LY and checking its availability. This will help you search for short meaningful domain names ending in the LY extension. Click here to use this new tool. - Categories: Announcement #### Two-Factor Authentication on Register.ly Two-factor authentication is the concept of adding an additional layer of security by introducing a second step to your login. It combines something you know (i.e.: your password), with a second factor, typically something you physically have (such as your phone). Since both factors are required to log in, in the event an attacker obtains your password two-factor authentication would stop them for accessing your account. Why do you need it? Nowadays it’s becoming increasingly easy to compromise passwords. They can often be guessed or leaked, they usually don’t change very often, and despite common advice, many of us have favorite passwords that we use for more than one thing. Therefore Two-factor authentication gives you additional security as your password alone no longer allows access to your account. Two-Factor Authentication on Register.ly Register.ly supports two-factor authentication using two different options: Time Based One-Time Passwords Time Based One-Time passwords requires downloading an OATH application onto your smartphone or tablet, and optionally a bar-code reader. Once activated a pop-up screen will present a QR code, with optional manual code to enter into your smartphone or tablet. Once scanned or entered, a time based one time password will appear within your OATH application providing the second form of verification used to log in. Additionally, a backup code is presented which should be stored in the event that your smartphone or tablet is not accessible and you wish to gain access into your account on Register.ly YubiKey YubiKey creates a one time password stored within a USB drive that acts as a keyboard to your computer. These are physical devices that need to be purchased from Yubico directly. How do I enable Two-Factor Authentication on my Register.ly account? To enable two-factor authentication for your account, please visit the following link for detailed step by step instructions… http://register.ly/knowledgebase/enabling-two-factor-authentication-client-account/ - Categories: News ### Pages #### Acceptable Use Policy This Acceptable Use Policy (“AUP”) applies to all services provided by ASTRO REGISTER DOMAINS INC., trading as Register.ly. It forms part of the Agreement and applies to customers, authorized users, and anyone using the Services through a customer account. General rule You may use the Services only for lawful purposes and in a manner that protects users, networks, systems, and the operation and reputation of Register.ly and its suppliers. You are responsible for Customer Content and activity conducted through your account. Illegal and harmful activity You must not use the Services to create, host, publish, transmit, solicit, facilitate, or promote activity that violates applicable law; infringes intellectual property, privacy, publicity, or other rights; exploits or endangers children; facilitates human trafficking or non-consensual sexual content; makes credible threats; or supports fraud, theft, extortion, or unlawful evasion of legal controls. Security abuse You must not distribute malware; operate phishing or credential-harvesting services; gain or attempt unauthorized access; intercept data without authorization; conduct denial-of-service attacks; scan, probe, or test systems without permission; evade security controls; conceal malicious activity; or use compromised systems, accounts, or credentials. Good-faith security testing is permitted only when you own the target or have the target owner’s documented authorization and the activity does not affect other customers, shared infrastructure, or third parties. Messaging and unsolicited communications You must not send spam, unsolicited bulk messages, deceptive communications, address-harvesting campaigns, or messages that violate applicable anti-spam, privacy, or telecommunications law. Messages must accurately identify the sender and provide legally required consent and unsubscribe mechanisms. Network and platform integrity You must not interfere with or unreasonably burden the Services or connected networks; circumvent resource, bandwidth, rate, storage, or account limits; operate unauthorized relays; falsify source information; repeatedly create accounts to evade restrictions; or materially degrade service for others. Domain-name abuse You must not register or use domains for phishing, malware distribution, botnet command and control, deceptive impersonation, trademark abuse, unlawful content, spam, or other prohibited conduct. Domain use is also subject to applicable registry, registrar, ICANN, and dispute-resolution rules for .LY names, the current NIC.LY Domain Name Registration Regulations. Intellectual-property complaints If you believe content or a domain used through the Services infringes your rights, notify abuse@register.ly or use https://register.ly/contact/. Include your contact details, the material and location, the right claimed, the basis of the complaint, and any legally required declaration. Register.ly may forward the complaint and request more information. A complaint does not guarantee removal, transfer, or disclosure. Abuse reports Report suspected abuse to abuse@register.ly or https://register.ly/contact/. Include the affected hostname, IP address or URL, date and time with time zone, relevant logs or headers, and a concise description. Do not send passwords, private keys, or unnecessary sensitive data. Investigation and enforcement Register.ly may investigate suspected violations and request information, evidence preservation, remediation, or removal or restriction of content. Depending on severity and urgency, Register.ly may warn, rate-limit, block traffic, quarantine resources, suspend or terminate affected Services, or refer a matter to a supplier or competent authority. Register.ly may act immediately where reasonably necessary to protect people, infrastructure, other customers, or legal compliance. Where practicable, Register.ly will give notice and an opportunity to remedy. Enforcement may consider intent, severity, recurrence, cooperation, and available alternatives. No general monitoring duty Register.ly does not undertake to monitor all Customer Content or activity. A failure to enforce this AUP in one instance is not a waiver. Register.ly may use proportionate automated and manual measures to protect the Services and investigate abuse. Customer safeguards You must maintain appropriate security, keep software and credentials current, restrict access, monitor systems, preserve relevant logs, and promptly address abuse originating from your account. If you provide services to others, you must maintain and enforce terms no less protective than this AUP. Changes and contact Register.ly may update this AUP as described in the Terms of Service. Questions and reports: abuse@register.ly. Client area: https://my.register.ly. #### Cookie Policy This Cookie Notice explains how ASTRO REGISTER DOMAINS INC., trading as Register.ly, uses cookies and similar technologies on register.ly, the client area, and related online services. Read it with the Privacy Notice. What these technologies are Cookies are small text files stored by a browser. Similar technologies include local storage, software development kits, pixels, tags, and device identifiers. They can remember settings, maintain sessions, measure performance, and support security or communications. Cookie categories 2.1 Strictly necessary These technologies support account sign-in, session continuity, load balancing, security, fraud prevention, checkout, and consent settings. They cannot be disabled through our preference control because the requested service may not function without them. 2.2 Preferences These remember choices such as language, region, interface settings, and saved preferences. Where required by law, they are used only with consent. 2.3 Analytics These help us understand visits, feature use, errors, and performance. Where required by law, they are used only with consent. 2.4 Advertising If advertising or cross-site measurement technologies are enabled, they may measure campaigns or support relevant communications. They are activated only with valid consent where required. Register.ly does not activate this category merely because it is described here. Your choices Where a consent banner or Cookie Settings control is available, you can accept, reject, or change non-essential categories at any time. Withdrawing consent does not affect earlier lawful processing. Your choice may be stored in a necessary consent record. You can block or delete cookies in your browser, but this may sign you out, reset preferences, or prevent parts of the Services from working. Global Privacy Control or similar signals are honored where applicable law requires and technically supported. Because Do Not Track is not interpreted consistently, our response may vary unless law requires a specific response. Current technologies and retention The Cookie Settings interface, when available, identifies active technologies, providers, purposes, and durations. Session technologies expire when the browser session ends; persistent technologies remain for the duration shown there or until deleted. Register.ly retains consent and preference records for up to five years where reasonably needed to demonstrate and respect your choice. Third parties Service providers may set or read technologies supporting hosting, security, payments, customer support, analytics, or communications. They may process information under their own privacy notices where acting independently. The Privacy Notice explains supplier controls and international transfers. Legal bases Strictly necessary technologies are used to provide requested services, protect systems, and meet legal obligations. Non-essential technologies are based on consent where required. Where another basis is permitted, Register.ly uses it only with legally required notices and choices. Updates and contact We may update this Notice when technologies, providers, or law change. Questions: cs@register.ly. Client area: https://my.register.ly. #### Data Processing Addendum This Data Processing Addendum (“DPA”) forms part of the agreement between ASTRO REGISTER DOMAINS INC., a Saskatchewan corporation trading as Register.ly (“Register.ly”), and the customer that purchases or uses the Services (“Customer”). It applies when Register.ly processes Customer Personal Data on Customer’s behalf. Scope and order of precedence This DPA governs Customer Personal Data processed to provide the Services. It does not govern personal information that Register.ly processes as an independent controller for account administration, billing, fraud prevention, security, legal compliance, or marketing, which is addressed in the Privacy Notice. If this DPA conflicts with the Terms of Service on a data-protection matter, this DPA prevails. A signed agreement or service order prevails only where it expressly identifies the provision it replaces. Definitions “Applicable Data Protection Law” means privacy and data-protection law applicable to the processing, including the GDPR, UK GDPR, and Canadian privacy law where applicable. “Customer Personal Data” means personal data contained in Customer Content that Register.ly processes on Customer’s behalf. “GDPR” means Regulation (EU) 2016/679. “Security Incident” means a confirmed breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Personal Data. Terms such as controller, processor, processing, personal data, and supervisory authority have the meanings given by Applicable Data Protection Law. Roles and instructions Customer is the controller and Register.ly is the processor of Customer Personal Data, except where Customer acts as a processor for another controller, in which case Register.ly is Customer’s subprocessor. Customer appoints Register.ly to process Customer Personal Data only to provide, secure, support, maintain, and improve the purchased Services; prevent abuse; comply with documented Customer instructions; and meet legal obligations applicable to Register.ly. The Agreement, Customer’s use and configuration of the Services, and authorized support requests constitute documented instructions. Register.ly will inform Customer if an instruction appears to violate Applicable Data Protection Law, unless prohibited from doing so. Customer responsibilities Customer is responsible for the lawfulness, accuracy, and quality of Customer Personal Data; providing required notices; establishing lawful bases; responding to data subjects; configuring the Services appropriately; and ensuring its instructions comply with law. Customer must not submit special-category, highly regulated, or sensitive data unless the applicable Service is expressly designed and agreed for that data. Confidentiality and personnel Register.ly will ensure that persons authorized to process Customer Personal Data are bound by confidentiality obligations and receive appropriate privacy and security instruction. Access is limited according to role and operational need. Security measures Register.ly will maintain appropriate technical and organizational measures designed to protect Customer Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Measures are selected in light of the nature of the Services, available technology, implementation cost, and processing risks. Measures may include access controls, authentication, least-privilege administration, encryption in transit, logging and monitoring, vulnerability and patch management, backups where included in the Service, incident response, supplier controls, physical safeguards at relevant facilities, business-continuity measures, and periodic review. Customer remains responsible for security controls under its control, including user access, application security, credentials, encryption choices, and backups not included in the Service. Security incidents Register.ly will notify Customer without undue delay after becoming aware of a Security Incident affecting Customer Personal Data. The notice will include available information about the nature of the incident, likely consequences, measures taken or proposed, and a contact point. Information may be provided in phases as the investigation progresses. Register.ly will take reasonable steps to contain, investigate, and remediate the incident and will reasonably assist Customer with legally required notifications. Notification is not an admission of fault or liability. Unsuccessful attempts, scans, and events that do not compromise Customer Personal Data are not Security Incidents. Data-subject requests Taking into account the nature of the processing, Register.ly will provide reasonable assistance through technical and organizational measures so Customer can respond to requests to exercise data-subject rights. If Register.ly receives a request concerning Customer Personal Data, it may direct the requester to Customer and will not respond substantively unless authorized or legally required. Assessments, consultations, and compliance assistance Register.ly will provide information reasonably necessary for Customer to conduct legally required data-protection impact assessments or prior consultations, taking into account the nature of processing and information available to Register.ly. Additional assistance beyond standard documentation or support may be subject to reasonable fees agreed in advance. Subprocessors Customer gives Register.ly general written authorization to appoint subprocessors needed to provide the Services. Register.ly will impose written data-protection obligations that provide materially equivalent protection for Customer Personal Data and remains responsible for its subprocessors’ performance to the extent required by Applicable Data Protection Law. Register.ly will make current subprocessor information available through its website, client area, contractual documentation, or on request to cs@register.ly. Register.ly will give at least 30 days’ notice before a new subprocessor begins processing Customer Personal Data when required by law, unless an urgent replacement is reasonably necessary for security, continuity, or legal compliance. Customer may object during the notice period on reasonable data-protection grounds. The parties will work in good faith toward a commercially reasonable solution. If none is available, Customer may terminate the affected Service before the new subprocessor begins processing, and Register.ly will refund prepaid fees for the unused terminated period where required by the Agreement or law. International transfers Register.ly will use a lawful transfer mechanism where Customer Personal Data is transferred from the EEA, United Kingdom, or another jurisdiction that restricts international transfers to a destination not recognized as adequate. Where applicable, the parties will enter into or incorporate the relevant European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum, or another approved mechanism, completed for the parties’ roles and processing. Register.ly will provide reasonable information about relevant transfer safeguards and will implement supplementary measures where reasonably necessary. Nothing in this DPA requires disclosure prohibited by law or information that would compromise security or another customer’s confidentiality. Government and legal requests Register.ly will review legally binding requests for Customer Personal Data and, where lawful, notify Customer before disclosure. Register.ly will disclose only the data reasonably required and may challenge an unlawful or disproportionate request where appropriate. Deletion and return During the Service term, Customer may retrieve or delete Customer Personal Data using available Service features. After termination, Customer Personal Data may remain available for export for 30 days unless the Service description states otherwise or immediate restriction or deletion is required by law, security, registry rules, or the nature of the Service. Register.ly will then delete or anonymize production copies within 30 days. Residual backup copies may remain for up to 90 days and will remain protected and unavailable for ordinary use until overwritten. Audits and information Register.ly will make available information reasonably necessary to demonstrate compliance with this DPA, including relevant security summaries, certifications, or independent audit reports where available and subject to confidentiality restrictions. If that information is insufficient, Customer may request one audit per year, or an additional audit following a confirmed Security Incident or supervisory-authority request. Audits require reasonable advance notice, must occur during normal business hours, must minimize disruption, and may not expose other customers’ data or compromise security. Customer bears reasonable audit costs unless material non-compliance by Register.ly is established. Processing details 15.1 Subject matter and duration Processing of Customer Personal Data as necessary to provide the Services for the term of the Agreement and the deletion period described above. 15.2 Nature and purpose Hosting, storage, transmission, retrieval, organization, backup where included, security monitoring, technical support, maintenance, troubleshooting, migration, deletion, and other processing initiated through Customer’s use of the Services. 15.3 Categories of data subjects Customer’s users, personnel, contractors, clients, website visitors, end users, registrants, contacts, and other persons whose personal data Customer submits to the Services. 15.4 Types of personal data Contact and account data, identifiers, communications, technical and usage data, authentication and access data, hosted files, databases, logs, website content, and other personal data selected and submitted by Customer. The exact categories depend on Customer’s use of the Services. Liability and termination Liability arising under this DPA is subject to the Agreement’s liability provisions to the extent permitted by law. This DPA terminates when Register.ly no longer processes Customer Personal Data, except for obligations that by their nature survive, including confidentiality, deletion, audit, and transfer obligations. Contact Privacy and DPA inquiries: cs@register.ly Legal notices: legal@register.ly Provider: ASTRO REGISTER DOMAINS INC., 3537 Green Moss Lane, Regina, Saskatchewan S4V 1L5, Canada. #### Domain Registration Agreement This Domain Registration Agreement (“Domain Agreement”) is entered into between ASTRO REGISTER DOMAINS INC., a Saskatchewan corporation trading as Register.ly (“Register.ly,” “we,” “us,” or “our”), and the person or organization that applies for, registers, renews, transfers, manages, or uses a domain name through Register.ly (“Registrant,” “Customer,” or “you”). This Domain Agreement forms part of the Register.ly Terms of Service. By submitting or approving a domain transaction, you accept this Domain Agreement and the rules applicable to the relevant domain-name extension. Agreement and order of precedence The domain-registration contract consists of this Domain Agreement, the Terms of Service, the applicable order, the Renewal and Expiration Policy, the Refund and Cancellation Policy, the Acceptable Use Policy, the Privacy Notice, and any registry, registrar, ICANN, dispute-resolution, or service-specific policy incorporated by reference. If these documents conflict on a domain matter, mandatory law and binding registry or ICANN requirements prevail, followed by the applicable registry policy, this Domain Agreement, the order, the Terms of Service, and the other incorporated policies. A signed agreement prevails only where the higher-ranking rule permits the variation. Register.ly’s role Register.ly acts as a registrar or reseller for the domain extensions it offers. Our exact role may vary by extension and supplier. Register.ly is not the registry operator for an extension unless expressly stated. Registry operators control the authoritative registration database and may approve, reject, suspend, restore, transfer, cancel, delete, reserve, or restrict domain names in accordance with their rules. Register.ly cannot guarantee or override a registry decision. Application and acceptance A domain order is an application pending confirmation by the relevant registry or registrar. Availability searches, quotations, payment collection, invoices, and automated acknowledgments do not guarantee that a domain is available or will be registered. Applications are subject to payment, technical availability, fraud screening, sanctions and export controls, identity and contact verification, eligibility, required documentation, local-presence rules, registry approval, and applicable law. If an application fails or is rejected before completion, fees will be processed in accordance with the Refund and Cancellation Policy. Register.ly is not responsible for commitments made before registration is confirmed. Registrant authority You represent and warrant that: You have legal capacity to enter this Domain Agreement. You are the Registrant or are duly authorized to act for the Registrant. All instructions and approvals you provide are authorized. The registration and intended use do not violate applicable law or third-party rights. The domain is not being registered for fraud, impersonation, phishing, malware, spam, abuse, or another prohibited purpose. You will comply with the policies applicable to the domain. If an agency, employee, developer, hosting provider, reseller, or other representative manages a domain for another party, that representative must identify the true Registrant and maintain valid authority. Register.ly may request evidence before acting on instructions. Registrant and contact information You must provide complete, current, accurate, and truthful registrant, administrative, technical, billing, identity, and eligibility information. You must promptly update information when it changes. Register.ly may verify an email address, telephone number, identity document, organization record, authority, trademark, local presence, eligibility, or beneficial ownership. Verification may be required before registration, renewal, transfer, restoration, contact change, nameserver change, disclosure, account recovery, or another high-risk action. Failure to provide or verify the required information may result in the delay, rejection, suspension, locking, cancellation, or deletion of a transaction or registration. Notices sent using the recorded contact information are treated in accordance with the Agreement and applicable registry policy. Registration data and privacy Register.ly processes registration data to provide domain services, maintain records, prevent fraud and abuse, comply with registry and legal obligations, and respond to lawful requests. Processing is described in the Privacy Notice. Registration data may be disclosed to registries, registrars, escrow providers, technical operators, verification providers, dispute-resolution providers, authorities, and other recipients where necessary or legally required. Public registration data display depends on applicable registry policies and laws. Privacy or proxy services, where available, do not make the Registrant anonymous to Register.ly, the registry, or competent authorities and may be suspended or disclosed as permitted by their terms or law. Domain selection and third-party rights You are solely responsible for selecting the domain and determining whether its registration and use infringe a trademark, trade name, company name, personal name, copyright, privacy right, or other legal right. Register.ly and the registry generally do not screen applications for conflicting rights. Registration does not establish ownership of a trademark, endorse the Registrant, or establish that use is lawful. Premium, reserved, restricted, and prohibited names A domain may be classified as premium, reserved, restricted, blocked, protected, or unavailable. Special prices, renewal prices, documentation, verification, allocation rules, or approval may apply. Search results and preliminary prices are indicative and may change before confirmation. If a validated price or condition materially differs from the disclosed order, Register.ly will request confirmation or cancel the application unless the condition was already disclosed and accepted. Domain syntax and nameservers The requested label, length, characters, internationalized domain format, nameservers, DNS configuration, and hosting arrangement must meet registry and technical requirements. A registry may reject or suspend a domain if nameservers are invalid, misconfigured, unreachable, inconsistent, or otherwise non-compliant. Register.ly may test technical requirements but does not guarantee the operation, security, or availability of third-party DNS or hosting. .LY registry terms For domains within the Libyan country-code top-level domain (“.LY”), the namespace is administered by the registration authority identified by NIC.LY (the “.LY Registry”). Register.ly facilitates eligible applications and transactions as a recognized registrar; it does not operate or control the .LY Registry. Every .LY application, registration, renewal, modification, transfer where supported, suspension, restoration, deletion, and continued use is subject to the then-current NIC.LY Domain Name Registration Regulations and related policies, procedures, forms, eligibility criteria, verification requirements, and registry decisions. The NIC.LY regulations are incorporated into this Domain Agreement for .LY services. Where the Arabic and English versions conflict, the language rule in the NIC.LY regulations applies. .LY eligibility and categories Certain .LY second-level categories are restricted to qualifying applicants or uses, including categories for commercial entities, nonprofit organizations, educational institutions, schools, healthcare providers, government entities, internet-related providers, state-owned companies, and personal or other eligible use. You must select the appropriate category and provide all requested evidence. Some categories or names may need to be submitted directly to, or specifically approved by, the .LY Registry. Register.ly cannot waive an eligibility or documentary requirement. Restricted and short .LY names Restricted strings, reserved names, and short .LY names may require additional documents, local presence, letters, registry review, or direct processing by the competent registration authority. Availability in a search does not establish eligibility. Register.ly may keep the request pending, request additional evidence, or reject or cancel it if the requirements are not completed within the applicable registry period. .LY representations For a .LY application, you additionally represent that: The application information is complete, correct, true, and accurate. The registration and intended use comply with Libyan law and the NIC.LY regulations. The name does not contain prohibited content or wording. You have obtained the necessary permissions or rights to register and use the name. You will promptly report changes to registration information. You understand that NIC.LY may reject, suspend, hold, modify, or delete a name as permitted by its regulations. Renewal and expiration You are responsible for renewing before the applicable deadline. Automatic-renewal settings, invoices, reminders, payment attempts, grace periods, suspension, redemption, restoration, deletion, and release are governed by the Renewal and Expiration Policy and applicable registry rules. An automatic-renewal setting does not guarantee automatic payment or successful renewal. A domain is renewed only after payment is cleared, verification is completed, Register.ly acceptance is obtained, and registry confirmation is received. After expiry, a domain may stop resolving, be suspended, enter redemption, incur additional fees, become unavailable for transfer, or be deleted and registered by another party. Register.ly does not guarantee recovery. Domain transfers A transfer is subject to the applicable registry and registrar rules. You must have the authority, provide the correct authorization code where required, complete the confirmation, pay any applicable fees, and ensure the domain is eligible and unlocked. A transfer may be refused, canceled, or delayed because of: Missing or invalid authorization. A domain or registry lock. Recent registration, transfer, or change of registrant. Expiry, suspension, redemption, or pending deletion. A dispute, court order, regulatory direction, or registry hold. Suspected fraud, abuse, or unauthorized activity. Unpaid amounts where refusal is permitted. Incomplete verification or inaccurate registration data. A registry or extension that does not support the requested transfer. For generic top-level domains governed by ICANN, applicable ICANN transfer requirements apply. Country-code domains may use different processes and may not support standard authorization-code transfers. Registrant changes and account ownership A change to the Registrant or a material change to registration data may be treated as a change of ownership and may require authentication, written authorization, identity or corporate documents, registry forms, payment, confirmation by current and proposed parties, or a transfer lock. Register.ly may rely on authenticated instructions from the account and recorded contacts, but may require additional evidence when a request is unusual, disputed, high-risk, or inconsistent with existing records. Account access does not by itself resolve beneficial ownership. Register.ly does not determine private ownership disputes and may preserve the status quo while the parties reach an agreement, obtain a dispute decision, or obtain a legal order. Agency and reseller registrations If you register or manage a domain for a client or other third party, you must: Identify the correct Registrant rather than yourself unless you are the true holder. Disclose the applicable terms and obtain the Registrant’s agreement. Maintain verifiable authority and accurate records. Provide notices and renewal information to the Registrant. Avoid withholding transfer credentials or control unlawfully. Cooperate with verification, disputes, abuse handling, and ownership changes. You remain responsible for actions performed through your account. Register.ly may communicate directly with the Registrant where necessary to verify authority, protect the domain, or comply with law or policy. DNSSEC, privacy, and optional features DNSSEC, privacy or proxy service, registry lock, forwarding, managed DNS, and other features are available only for supported extensions and plans. Their operation may depend on registries and third parties. Incorrect DNSSEC information can make a domain unreachable. You are responsible for coordinating DNSSEC changes with the DNS operator and confirming resolution. Register.ly may disable or remove a feature where necessary to correct an incident, comply with policy, or protect the service. Acceptable use and abuse You must not register or use a domain for unlawful activity, deception, infringement, phishing, malware, botnet operations, spam, credential theft, impersonation, child exploitation, non-consensual sexual content, threats, fraud, or another activity prohibited by the Acceptable Use Policy. Register.ly may investigate complaints and request information, evidence preservation, remediation, or removal or restriction of content. Depending on the risk and applicable rules, Register.ly or the registry may lock, suspend, redirect, cancel, transfer, or delete a domain or associated service. Disputes and legal orders Domain disputes are governed by the policy applicable to the extension, which may include the ICANN Uniform Domain Name Dispute Resolution Policy, a registry-specific policy, court proceedings, or another approved procedure. Register.ly is not an arbitrator and does not decide the merits of competing ownership or trademark claims. We may lock a domain, preserve the status quo, restrict changes, deposit documents, disclose information, or implement a settlement, a final dispute decision, a registry instruction, or a binding legal order. You are responsible for defending your rights and meeting response deadlines. Failure to participate may result in cancellation or transfer under the applicable procedure. Suspension, cancellation, and deletion Register.ly or the applicable registry may suspend, lock, cancel, transfer, or delete a domain where permitted or required because of: Inaccurate, incomplete, or unverified registration data. Non-payment or failed renewal. Violation of this Agreement, the Acceptable Use Policy, registry rules, or law. Fraud, abuse, security risk, or technical harm. A dispute proceeding, settlement, court order, regulatory direction, or registry instruction. A threat to the integrity or stability of the domain-name system. An error requiring correction or a prohibited or reserved registration. Sanctions, export-control, or eligibility restrictions. Where practicable and permitted, Register.ly will provide notice and a reasonable opportunity to remedy. Immediate action may be taken where required by the registry, law, security, or urgent harm. Fees and refunds You must pay the registration, renewal, transfer, restoration, redemption, premium, verification, privacy, and other fees disclosed for the transaction. Registry transactions are often immediate and irreversible. Successfully completed registrations, renewals, transfers, restorations, and redemptions are generally non-refundable, including where a name is misspelled, unused, no longer wanted, or registered for an incorrect period. Failed or rejected requests are handled in accordance with the Refund and Cancellation Policy. Registry, supplier, payment provider, tax, and currency conversion charges may be non-refundable where permitted by law. Registrant rights Subject to applicable policy and law, a Registrant may have rights to: Receive clear information about applicable prices and terms. Access and update registration data through approved procedures. Receive renewal and expiration notices required by applicable policy. Transfer an eligible domain using the applicable process. Request correction of an unauthorized or erroneous transaction. Use an applicable dispute or complaint procedure. Exercise applicable privacy and data-protection rights. Retain mandatory rights that cannot lawfully be excluded. A right may be subject to verification, fees, locks, deadlines, registry restrictions, disputes, and security safeguards. Registry and policy changes Registries, ICANN, authorities, and suppliers may change policies, prices, procedures, eligibility rules, and technical requirements. Changes may become binding on existing registrations as provided by the applicable rule. Register.ly may update this Domain Agreement to reflect those changes. Material changes will be communicated as required by the Terms of Service or law. Continued registration or use after an effective change constitutes acceptance where permitted. Service availability Domain registration and DNS depend on distributed systems and third-party registries, registrars, networks, and providers. Register.ly does not guarantee uninterrupted access, resolution, propagation, availability, or recovery. Estimated registration, transfer, DNS propagation, restoration, and support times are not guarantees unless expressly stated in a signed Order. Liability and indemnity Liability relating to domain services is governed by the Terms of Service and mandatory law. Register.ly is not liable for a registry’s lawful decision, loss caused by inaccurate customer information, failure to renew or verify, an unauthorized instruction resulting from compromised credentials, or a third-party dispute except to the extent Register.ly is legally responsible and liability cannot be excluded. Business Customers must indemnify Register.ly as provided in the Terms of Service for third-party claims arising from their domain selection, registration, use, content, instructions, or violation of applicable rights or policies. Governing law The governing law and dispute resolution provisions in the Terms of Service apply between Register.ly and the Customer. This does not displace mandatory law, the governing law specified by an applicable registry policy, or the jurisdiction of an authorized dispute-resolution provider. The NIC.LY regulations specify the law and language applicable to the relationship between the .LY Registry and the Registrant. Mandatory consumer protections remain unaffected. Notices Operational notices may be delivered through the client area, account email, support ticket, or service dashboard. Registry notices may be delivered to the recorded registration contacts. You must keep all contact details up to date and monitor them. Formal legal notices to Register.ly must be sent in accordance with the Terms of Service. Contact Domain support: cs@register.ly Billing and renewals: billing@register.ly Abuse reports: abuse@register.ly Legal notices: legal@register.ly Client area: https://my.register.ly Provider: ASTRO REGISTER DOMAINS INC., 3537 Green Moss Lane, Regina, Saskatchewan S4V 1L5, Canada. Applicable policy references NIC.LY Domain Name Registration Regulations: https://nic.ly/regulations.php ICANN Transfer Policy: https://www.icann.org/en/contracted-parties/accredited-registrars/transfer-policy-01-06-2016-en ICANN UDRP Rules: https://www.icann.org/en/contracted-parties/consensus-policies/uniform-domain-name-dispute-resolution-policy/rules-for-uniform-domain-name-dispute-resolution-policy-the-rules-11-03-2015-en #### GDPR Compliance This GDPR Compliance Statement explains how ASTRO REGISTER DOMAINS INC., trading as Register.ly (“Register.ly,” “we,” “us,” or “our”), approaches compliance with the European Union General Data Protection Regulation (“GDPR”) when the GDPR applies to our processing of personal data. This Statement should be read with our Privacy Notice, Data Processing Addendum (“DPA”), Terms of Service, Cookie Notice, and applicable Service Order. It describes our framework and commitments; it is not a certification, legal advice, or a representation that a customer’s use of every Service is automatically GDPR compliant. Scope and territorial application The GDPR may apply to Register.ly when we process personal data in connection with offering services to individuals in the European Economic Area (“EEA”) or monitoring their behavior there, or when we process personal data on behalf of a customer whose processing is subject to the GDPR. Whether the GDPR applies depends on the facts, including the parties’ location and role, the people concerned, and the nature of the processing. Other privacy laws may apply alongside or instead of the GDPR. Our roles Register.ly may act in different roles depending on the processing. Controller: Register.ly acts as a controller when it determines why and how personal data is processed for account creation, billing, customer support, security, fraud prevention, service administration, legal compliance, and our own communications. Processor: Register.ly generally acts as a processor when it processes personal data contained in Customer Content solely to provide services under the customer’s instructions. If the customer is itself a processor, Register.ly acts as its subprocessor. Customer: The customer remains responsible for determining whether its processing is lawful, giving required notices, selecting appropriate Service settings, responding to data subjects, and issuing lawful documented instructions. Data-protection principles Where the GDPR applies, our processing framework is based on the following principles: Lawfulness, fairness, and transparency. Purpose limitation. Data minimization. Accuracy. Storage limitation. Integrity and confidentiality. Accountability. Register.ly applies these principles in accordance with its role, the processing context, and the requirements of applicable law. Lawful bases When Register.ly acts as a controller, we rely on an appropriate lawful basis for each processing purpose. Depending on the circumstances, this may include: Performance of a contract or steps requested before entering a contract. Compliance with a legal obligation. Register.ly’s or a third party’s legitimate interests, where those interests are not overridden by individual rights. Consent, where consent is required or appropriate. Protection of vital interests or performance of a public-interest task in the limited circumstances where those bases apply. Our Privacy Notice provides more detail about the purposes and lawful bases relevant to our controller processing. Consent can be withdrawn at any time where processing relies on consent, without affecting processing that was lawful before withdrawal. Customer instructions and the DPA Where Register.ly acts as a processor, the DPA forms part of the Agreement. It addresses the subject matter and duration of processing, processing instructions, confidentiality, security, subprocessors, assistance with data-subject requests, personal-data breaches, deletion or return, audits, and international transfers. We process Customer Personal Data only on documented instructions, including the Agreement, the customer’s configuration and use of the Services, and authorized support requests, unless applicable law requires other processing. Where legally permitted, we will inform the customer of such a legal requirement before processing. Privacy by design and default Register.ly considers privacy and security when designing, selecting, and operating systems and processes that handle personal data. Measures are proportionate to the purpose, data, available technology, implementation cost, and risk to individuals. Customers must configure their Services appropriately. Where options are available, customers should limit collection, access, retention, public exposure, logging, and permissions to what their use case requires. Security of processing Register.ly maintains technical and organizational measures designed to provide security appropriate to the risk. Depending on the Service and processing, measures may include: Role-based access and least privilege. Authentication and account-security controls. Encryption in transit and encryption options where supported. Network, system, and application safeguards. Logging, monitoring, and abuse detection. Vulnerability, patch, and change management. Backup and continuity controls where included in the Service. Incident response and escalation procedures. Personnel confidentiality and awareness measures. Supplier and subprocessor controls. No system can be guaranteed completely secure. Customers remain responsible for the controls within their environments, including user permissions, credentials, software security, application configuration, encryption choices, and independent backups where not included in the Service. Personal-data breaches Register.ly maintains procedures to assess, contain, investigate, and remediate suspected personal-data breaches. Where Register.ly acts as a processor, we will notify the affected customer without undue delay after becoming aware of a confirmed breach involving Customer Personal Data, and provide the information needed for the customer’s assessment and any legally required notifications. Where Register.ly acts as a controller, we will notify the competent supervisory authority and affected individuals when and within the period required by the GDPR. A notification may be provided in phases as information becomes available. Data-subject rights Subject to the GDPR’s conditions and exceptions, individuals may have rights to: Receive information about processing. Access their personal data. Correct inaccurate or incomplete data. Request erasure. Restrict processing. Receive portable data in applicable circumstances. Object to certain processing. Withdraw consent where consent is the lawful basis. Receive safeguards relating to qualifying solely automated decisions. Complain to a competent supervisory authority. Rights are not absolute. Register.ly may need to verify identity and authority and may retain or continue processing information where permitted or required by law. Submitting a rights request For personal data that Register.ly controls, submit a request to cs@register.ly or through https://my.register.ly. Describe the request and the relevant account or relationship, but do not send passwords, private keys, or unnecessary identity documents through ordinary email. We normally respond without undue delay and within one month after receiving a valid request. Where permitted because a request is complex or numerous, the period may be extended by up to two additional months, and we will provide the required notice. For Customer Personal Data that Register.ly processes on behalf of a customer, the customer is responsible for responding. We may direct the requester to that customer and will provide reasonable assistance as required by the DPA and applicable law. Subprocessors Register.ly uses service providers and subprocessors to support infrastructure, payments, communications, security, support, and service delivery. When Register.ly acts as a processor, it applies the subprocessor authorization and notice procedure in the DPA and requires subprocessors to protect Customer Personal Data through written obligations appropriate to their role. Current subprocessor information is available on our website, in the client area, in contractual documentation, or upon request to cs@register.ly. Customers may object to a new subprocessor on reasonable data protection grounds, as described in the DPA. International transfers Register.ly and its providers may process personal data outside the EEA. Where the GDPR restricts a transfer to a country that is not recognized as providing adequate protection, Register.ly uses an applicable transfer mechanism. Depending on the transfer, safeguards may include the European Commission’s Standard Contractual Clauses, another approved contractual mechanism, or a legally recognized derogation. We assess relevant transfer risks and apply supplementary measures where reasonably necessary. Retention and deletion Register.ly retains personal data only for as long as reasonably necessary for the stated purpose, the Agreement, security and fraud prevention, dispute resolution, registry or supplier requirements, and legal, tax, accounting, or regulatory obligations. Specific retention periods are described in the Privacy Notice, DPA, Terms of Service, and service-specific terms. When data is no longer required, it is deleted, anonymized, or isolated until secure deletion under applicable backup cycles. Records and accountability Where required, Register.ly maintains records of relevant processing activities, processing purposes, categories of personal data and recipients, international transfers, retention criteria, and security measures. We review relevant privacy and security controls, maintain policies and procedures, train appropriate personnel, and cooperate with customers and competent authorities as required by law. Data-protection impact assessments Register.ly assesses privacy risk when introducing processing that may create a high risk to individuals. Where Register.ly acts as a processor, we provide reasonable information and assistance available to us so the customer can complete a legally required data-protection impact assessment or prior consultation. Automated processing Register.ly may use automated tools to detect fraud, abuse, account compromise, payment risk, service misuse, or prohibited activity and to prioritize review. We do not make decisions based solely on automated processing that produce legal or similarly significant effects without an applicable lawful basis, required notice, and appropriate safeguards. Cookies and consent Our websites and client services may use cookies and similar technologies. Strictly necessary technologies support requested services, account access, security, checkout, and consent settings. Where the GDPR and applicable electronic communications law require consent for non-essential analytics, preference, or advertising technologies, Register.ly will request consent and provide a method to withdraw or change it. See the Cookie Notice for details. Children The Services are not directed to children. Register.ly does not knowingly solicit account registration directly from children. If we learn that personal data was collected from a child in violation of applicable law, we will take appropriate steps to delete or otherwise address it. Supervisory-authority complaints Where the GDPR applies, an individual may complain to the supervisory authority in the EEA country where the individual lives or works or where the alleged infringement occurred. We encourage individuals to contact us first so we can investigate, but doing so does not remove the right to contact a supervisory authority. EEA representative and data-protection contacts Where Article 27 of the GDPR requires Register.ly to appoint an EEA representative, the representative’s contact details will be published in our Privacy Notice or otherwise made available as required by law. Register.ly has not described any person as a data protection officer unless their appointment and contact details are expressly published. General privacy requests may be sent to cs@register.ly. Legal notices may be sent to legal@register.ly. Customer compliance Register.ly provides contractual and technical measures that can support customer compliance. Customers remain responsible for their own GDPR obligations, including: Determining their controller or processor role. Selecting a lawful basis. Providing privacy notices. Managing consent where required. Responding to data-subject requests. Configuring access, retention, security, and backups. Completing impact assessments. Ensuring their applications and content comply with law. Using an appropriate international-transfer mechanism. Changes to this Statement We may update this Statement to reflect changes in law, guidance, services, or our practices. Material changes will be communicated as required by the Agreement or applicable law. Contact Privacy and GDPR inquiries: cs@register.ly Legal notices: legal@register.ly Client area: https://my.register.ly Provider: ASTRO REGISTER DOMAINS INC., 3537 Green Moss Lane, Regina, Saskatchewan S4V 1L5, Canada. Official references General Data Protection Regulation: https://eur-lex.europa.eu/eli/reg/2016/679/oj EU Standard Contractual Clauses: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj/eng #### Privacy Policy Who we are ASTRO REGISTER DOMAINS INC., trading as Register.ly (“Register.ly,” “we,” “us,” or “our”), is a Saskatchewan corporation with corporation number 102080612. For the personal information described in this Privacy Notice, Register.ly generally acts as the organization responsible for that information and, where applicable, as the data controller. Scope of this Notice This Privacy Notice explains how we collect, use, disclose, retain, and protect personal information when you visit or interact with our websites; create or administer an account; search for, register, renew, transfer, or manage a domain; purchase or use hosting, cloud, SSL, backup, licensing, or related services; contact sales, billing, support, abuse, or security teams; receive communications; or otherwise interact with Register.ly. This Notice applies when Register.ly determines the reasons and methods by which personal information is processed. If we process personal information contained in Customer Content solely on a customer’s documented instructions, the customer generally acts as the controller, and Register.ly acts as the processor or service provider. That processing is governed by the applicable Data Processing Addendum (“DPA”). Third-party registries, certificate authorities, payment providers, licensors, and other organizations may independently determine how they process personal information. Their own privacy notices apply to that independent processing. Personal information we collect The information we collect depends on your relationship with us, the Service, legal and registry requirements, and the features you use. CategoryExamplesTypical sourceIdentity and contactName, organization, job title, postal address, email address, telephone number, country, language, and authorized-user information.You; account administrators; business contacts; registries or other providers.Account and authenticationCustomer and account identifiers, usernames, authentication status, permissions, account settings, recovery details, and login history.You; account administrators; our systems and security tools.Orders and servicesProducts, domains, service configurations, renewal settings, transaction history, licences, resource use, and service interactions.You; our systems; registries; certificate authorities; vendors.Billing and paymentBilling contact and address, currency, tax information, invoice and payment status, transaction identifiers, payment method type, and limited card details such as brand or last digits where provided by a processor.You; payment processors; banks; fraud-prevention providers.Domain registrationRegistrant and contact data, domain, nameserver and registration details, eligibility evidence, verification records, correspondence, and registry transaction history.You; registrant or account contacts; registries; registrars; public or restricted registration-data services.Verification and complianceIdentity or authority documents, company documents, eligibility evidence, sanctions or fraud checks, consent records, and compliance decisions.You; authorized representatives; verification providers; public authorities or sources where lawful.Support and communicationsTickets, emails, chat or call records where enabled, attachments, survey responses, complaint records, and troubleshooting information.You; your users; support systems; service providers.Technical and usageIP address, device and browser data, timestamps, URLs, referring pages, session and security events, cookie identifiers, API activity, DNS or network events, and diagnostic logs.Your device; our services; security, analytics, and network providers.Marketing preferencesSubscriptions, communication preferences, campaign engagement, and suppression records.You; communication and analytics tools.Customer ContentFiles, databases, messages, backups, hosted content, or other data placed in a Service. We generally process this on the customer’s instructions under the DPA.Customers and their authorized users. Information about other people If you provide personal information about a registrant, administrative contact, technical contact, employee, customer, or other individual, you must be authorized to do so and provide any notice required by law. You should not provide more information than the Service requires. Information we do not intentionally request Do not submit sensitive personal information, government identifiers, payment card data, health information, or special category data through support tickets or ordinary communications unless we specifically request it through an approved secure process and it is necessary for the stated purpose. How and why we use personal information We use personal information only for identified and appropriate purposes. Where the GDPR or a similar law requires a legal basis, the applicable basis is set out below. More than one basis may apply depending on the context. PurposeActivitiesGDPR basis where applicableProvide and administer ServicesCreate accounts; process orders; register or manage domains; issue certificates; provision cloud or hosting; deliver support; authenticate users.Contract; steps requested before a contract; legitimate interests in operating the Service.Billing and recordsInvoice, collect and reconcile payments; manage tax and accounting records; address billing disputes.Contract; legal obligation; legitimate interests in financial administration.Domain and provider complianceTransmit required data to registries, registrars, ICANN mechanisms, escrow providers, certificate authorities, licensors, or authorities; verify eligibility and contacts.Contract; legal obligation; legitimate interests; consent where specifically required.Security and abuse preventionProtect accounts and infrastructure; detect fraud, malware, spam and abuse; log events; investigate incidents; enforce policies.Legitimate interests; legal obligation; protection of rights and systems.Improve and operateMonitor reliability and performance; diagnose errors; understand feature use; plan capacity; improve support and user experience.Legitimate interests; consent for non-essential cookies or tracking where required.CommunicateSend service, renewal, security, policy, transaction, and support messages.Contract; legal obligation; legitimate interests.Market ServicesSend newsletters or offers; measure campaigns; maintain preferences and suppression lists.Consent where required; otherwise legitimate interests subject to opt-out and applicable law.Legal and corporateComply with law and valid process; establish, exercise or defend claims; conduct audits; manage transactions or reorganizations.Legal obligation; legitimate interests. Consent Where we rely on consent, you may withdraw it at any time using the method presented when consent was collected or by contacting us. Withdrawal does not affect processing already carried out lawfully, and it does not prevent processing based on another lawful ground. Domain-name registration data Domain services require information to be shared within the domain-name ecosystem. Depending on the extension and transaction, we may disclose registration data to the applicable registry, upstream registrar, registry service provider, data escrow provider, ICANN or an ICANN-designated mechanism, dispute-resolution provider, verification provider, and competent authority. For .LY domains, information is processed as required to submit and administer requests under the then-current NIC.LY Domain Name Registration Regulations and related .LY Registry procedures. Category-restricted or short names may require additional evidence of eligibility or authorization. Registration data is not necessarily published in full. Some data may appear in RDAP, WHOIS, or another registration data service; be redacted; or be disclosed through a lawful access request process, depending on the extension, registry policy, applicable law, and privacy or proxy service. We do not promise that a privacy or proxy service is available for every extension or registrant. Domain registration records may need to be retained after a registration ends to meet registry, ICANN, legal, accounting, security, dispute, or evidence requirements. Applicable retention must be documented in the retention schedule below. Payments Payments may be processed by third-party payment providers. Payment-card details are processed by payment providers. Register.ly does not intentionally retain card security codes and generally receives only limited transaction and payment-method information. We may receive a payment token, a transaction identifier, a payment status, a method type, a card brand, expiry information, and limited card digits. Payment providers process information in accordance with their own privacy notices and legal obligations. We use payment and billing information to complete transactions, prevent fraud, reconcile accounts, address disputes and chargebacks, and meet tax and accounting requirements. Cookies and similar technologies Our websites and client services may use cookies, local storage, pixels, or similar technologies. Our Cookie Notice and available privacy controls describe the active categories, purposes, choices, and retention periods. CategoryPurposeControlStrictly necessarySecurity, authentication, session management, load balancing, checkout, and saved privacy choices.Used where necessary to provide a requested service; blocking may prevent functionality.PreferencesRemember language, region, display, or user choices.Consent or browser controls where required.AnalyticsUnderstand traffic, performance, errors, and aggregated feature use.Activated only with consent where required.Advertising/marketingMeasure campaigns or personalize advertising, if such tools are actually used.Activated only with legally valid consent where required; must be verified before publication. You can change non-essential cookie choices through https://register.ly/privacy-policy/#cookie-preferences. Browser settings may also block or delete cookies, but they do not necessarily control all similar technologies. When we disclose personal information We do not sell personal information. We disclose it only as needed for the purposes described in this Notice, with consent where required, or as permitted or required by law. Recipient categoryReason for disclosureDomain ecosystemRegistries, registrars, ICANN mechanisms, escrow and registry service providers, dispute-resolution providers, and registration-data request services.Service deliveryInfrastructure, data-center, cloud, network, DNS, security, backup, email, certificate, license, and managed-service providers.Business operationsPayment, tax, accounting, banking, communications, customer support, CRM, analytics, KYC, fraud-prevention, and professional advisers.Account organizationsThe customer organization, its account owner and authorized users, or a person authorized to manage a domain or Service.Authorities and claimantsCourts, regulators, law enforcement, tax authorities, registry authorities, or other parties where disclosure is lawful and appropriately verified.Corporate transactionsA buyer, investor, lender, adviser, or successor in a proposed or completed financing, reorganization, merger, acquisition, or sale, subject to appropriate confidentiality and legal safeguards. Service providers Service providers may process information only for the contracted purpose and under appropriate confidentiality, security, and data-protection obligations. The DPA describes our subprocessor framework, and current subprocessor information is available through our website, client area, contractual documentation, or on request. International processing and transfers Register.ly serves customers internationally and may use providers or infrastructure in more than one country. Personal information may therefore be stored, accessed, supported, or otherwise processed outside your country. It may be subject to lawful access by courts, law enforcement, regulators, registries, or national authorities in those locations. Where European Economic Area, United Kingdom, Swiss, or other law restricts international transfers, we use an applicable safeguard, such as an adequacy decision, approved contractual clauses, or another lawful mechanism, together with supplementary measures where required. For relevant EEA transfers, this may include the European Commission’s Standard Contractual Clauses. Retention We retain personal information only for as long as reasonably necessary for the identified purposes, including service delivery, registry and license requirements, security, fraud prevention, backup cycles, accounting, tax, dispute resolution, legal claims, and compliance. We then delete, anonymize, or securely isolate it, unless longer retention is required or permitted by law. RecordRetention periodAccount and contract recordsActive account or contract plus 7 years.Invoices, payments, and tax records6 years after the relevant transaction or financial year, according to applicable law.Domain registration and verificationFor the period during which Register.ly sponsors or manages the registration and for at least 15 months after the sponsorship ends or an inter-registrant transfer occurs, as required by the applicable ICANN Registration Data Policy. Retain transaction and financial records separately where the six-year financial period applies.Support tickets and communications3 years after the ticket or matter is closed. Delete unnecessary identity documents and sensitive attachments within 90 days after resolution. Passwords, private keys, recovery codes, and other credentials should be removed immediately after use and should not ordinarily be requested through tickets.Security and access logs12 months from collection. High-volume diagnostic logs that are not security-relevant may be kept for 90–180 days.6 years after the investigation or related account action is closed, where needed to establish, exercise, or defend legal claims. Records unrelated to a substantiated incident should be deleted earlier.KYC and eligibility documentsWhile the relevant domain or restricted Service remains active and for 2 years after it ends. For rejected requests, retain for 12 months. Extend retention only where required by a registry, law, active dispute, fraud investigation, or legal hold. Store the verification result longer where necessary instead of retaining the complete identity document.Marketing recordsUntil consent is withdrawn, the person opts out, or there has been 24 months of inactivity, whichever occurs first. Evidence of consent and relevant campaign records should be retained for 6 years after the last marketing communication or withdrawal where needed to demonstrate compliance.Customer Content after terminationProvide a 30-day export window after termination, unless immediate restriction or deletion is required for security, abuse, law, or the nature of the Service. Delete active production copies within 30 days after the export window ends. Delete remaining backup copies through normal rotation within a maximum of 90 days after production deletion. Retention periods may differ if a dispute, legal hold, security incident, chargeback, or authority request requires preservation. Aggregated or irreversibly anonymized information may be retained longer because it no longer identifies an individual. Security We use administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the information and the risks involved. These may include access controls, authentication, encryption in transit, logging and monitoring, vulnerability and patch management, backups, personnel confidentiality, vendor review, and incident-response procedures.  No method of transmission, storage, or security is guaranteed to be completely secure. You are responsible for protecting account credentials, using multi-factor authentication where available, managing authorized users, securing devices and applications under your control, and promptly notifying us of any suspected compromise. Your privacy rights Your rights depend on where you live and the law applicable to the processing. They may include the rights listed below, subject to identity verification and lawful exceptions. Ask whether we hold personal information about you and request access to it; Request correction of inaccurate or incomplete information; Request deletion or erasure; Request restriction of processing; Object to processing based on legitimate interests or to direct marketing; Receive certain information in a portable format; Withdraw consent where processing relies on consent; Request information about disclosures, safeguards, or automated decisions where applicable; and Complain to an applicable privacy or data-protection authority. To exercise a right, contact cs@register.ly. Describe your request and the account or relationship involved. We may request information reasonably necessary to verify identity and authority. We will respond within the period required by applicable law. We may deny or limit a request where law permits, including to protect another person’s rights, preserve security, meet registry or legal duties, or establish or defend claims, and will explain the decision where required. Canadian privacy complaints You may first raise a concern with our Privacy Officer. If unresolved and PIPEDA applies, you may contact the Office of the Privacy Commissioner of Canada. Provincial privacy authorities or other regulators may also have jurisdiction depending on the circumstances. EEA and UK rights Where the GDPR or UK GDPR applies, you may lodge a complaint with the supervisory authority in the country where you live or work or where the alleged infringement occurred. Where required by applicable law, details of any appointed representative or data protection officer will be published in this Notice. Marketing communications Service, security, billing, renewal, policy, and support messages are not marketing and may continue while needed to administer your account or Services. You can unsubscribe from marketing email through the link in the message or by contacting us. We may retain a minimal suppression record so we do not send marketing you declined. We do not combine acceptance of the Terms with optional marketing consent. Where consent is required for electronic marketing or tracking, we will request it separately. Automated decision-making We may use automated tools to detect fraud, abuse, account compromise, payment risk, or prohibited activity and to prioritize review. We do not make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate notice, safeguards, and a lawful basis. If that changes, we will provide the information and rights required by applicable law. Children The Services are intended for adults and organizations and are not directed to children. You must be at least 18 years old to create an account or purchase Services. We do not knowingly collect personal information directly from children for their own use of the Services. If you believe a child has provided information contrary to this Notice, contact us so we can investigate and take appropriate action. Personal-information incidents We maintain procedures to investigate and respond to suspected loss, unauthorized access, use, alteration, or disclosure of personal information. Where required, we will notify affected individuals, customers acting as controllers, privacy authorities, or other competent bodies within the applicable timeframe. If an incident affects Customer Personal Data processed on a customer’s behalf, the DPA governs our notification and cooperation obligations. Third-party services and links Our Services may link to or integrate with third-party websites and services. We do not control their independent privacy practices. Review their privacy notices before providing information or enabling an integration. A link does not mean that Register.ly endorses the third party’s privacy practices. Changes to this Notice We may update this Notice to reflect changes in our Services, practices, providers, technology, or legal obligations. We will post the revised Notice with a new “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice where required, such as by account message or email. We will request new consent if required by law; continued use is not treated as consent where valid consent is legally required. Contact us Questions, requests, or complaints about this Notice or our privacy practices should be directed to: Privacy Officer — ASTRO REGISTER DOMAINS INC., trading as Register.ly Email: cs@register.ly Postal address: 3537 GREEN MOSS LANE, REGINA, SASKATCHEWAN, CANADA, S4V 1L5 Support portal: https://my.register.ly We will acknowledge and investigate privacy complaints in accordance with applicable law. Please do not send identity documents or sensitive information by ordinary email unless we specifically instruct you to use an approved secure method. #### Refund Policy Cancelling renewal Request cancellation through https://my.register.ly before the renewal or billing cutoff shown for the Service. Cancellation is effective when confirmed in the client area or by Register.ly. It normally stops future renewal; it does not reverse a completed transaction or erase accrued charges. Before cancellation takes effect, export Customer Content and complete required transfer, migration, or unlock steps. Access, deletion, and backup retention are governed by the Terms, service description, and DPA. General refund rule Fees are refundable only where this Policy, the applicable Order or service description, a written promotion, supplier or registry rules, or mandatory law expressly provides. Approved refunds may be returned to the original payment method or, with Customer agreement, applied as account credit. Bank and payment-provider processing times are outside Register.ly’s control. Domain names 3.1 Completed transactions A successfully registered, renewed, transferred, restored, redeemed, or otherwise completed domain transaction is generally non-refundable because registry transactions are usually immediate and irreversible. This applies even if the name is unused, misspelled, unwanted, or registered for the wrong term, except where mandatory law or registry policy requires otherwise. 3.2 Failed or rejected requests If a domain transaction fails or is rejected before completion, Register.ly will reverse or refund the amount actually received for the failed transaction, less any non-refundable registry or payment cost that may lawfully be retained. An availability search or order acknowledgment is not registration confirmation. 3.3 Premium and restricted names Premium, reserved, short, restricted, and eligibility-based names may have special prices, documentation, or approval rules. A completed premium or registry-approved transaction is non-refundable unless mandatory law or registry policy requires otherwise. 3.4 Expiry and restoration Expiry, grace, redemption, restoration, and deletion periods vary by extension and are not guaranteed. Completed renewal or restoration fees are non-refundable. Register.ly does not guarantee recovery after expiry. Hosting, cloud, and usage-based services Charges for elapsed subscription periods, consumed compute, storage, bandwidth, IP addresses, managed work, setup, migration, or other usage already supplied are non-refundable. Cancellation stops future renewal when completed before the cutoff. Unused prepaid fees are refunded only where the Order, service description, or mandatory law expressly provides. SSL certificates, licenses, and third-party products SSL certificate fees are generally non-refundable after issuance. Software licenses, vendor subscriptions, and third-party products are generally non-refundable after provisioning or supplier commitment. Failed validation, rejection, revocation, or vendor cancellation is handled in accordance with applicable supplier rules and mandatory law. Professional and managed services Completed work, booked time, onboarding, setup, migration, and custom services are non-refundable. If Register.ly cancels unperformed work without Customer breach, it will refund prepaid fees allocable to the unperformed portion. Customer-requested cancellation may remain chargeable where resources were committed, as stated in the Order. Service credits SLA credits are not cash refunds and apply only as described in the applicable SLA, Order, or service description. A credit does not extend a domain expiry date or offset third-party, tax, or registry charges unless expressly stated. Consumer withdrawal and remedies Where mandatory consumer law grants a cooling-off or withdrawal right, exercise it through the client area or cs@register.ly. If you expressly requested immediate performance, you may be charged a proportionate amount for Services supplied before withdrawal. A right may be lost for fully performed services or supplied digital content only where the legally required request, consent, acknowledgment, and confirmation were obtained. Nothing in this Policy limits mandatory rights for non-conforming digital content or services, including correction, price reduction, termination, or refund where applicable. Billing errors and duplicate payments Report suspected duplicate charges or billing errors to billing@register.ly within 30 days of the statement where reasonably possible. Register.ly will investigate and correct confirmed errors. This period does not remove a mandatory right or longer legal period. Chargebacks and disputes Contact billing support before initiating a chargeback. A chargeback does not itself cancel a Service. Register.ly may suspend affected Services while a dispute is pending where permitted by law and may contest unsupported or fraudulent chargebacks. How to request a cancellation or refund Submit the request through https://my.register.ly and identify the account, Service, invoice or transaction, requested action, and reason. Register.ly may require identity, ownership, or payment verification. Decisions will be communicated through the client area or account email. Contact Billing and refunds: billing@register.ly General support: cs@register.ly Client area: https://my.register.ly #### Renewal and Expiration Policy This Renewal and Expiration Policy forms part of the Register.ly Terms of Service. It explains how recurring services renew and what happens when payment or renewal is not completed. Mandatory consumer rights and binding registry or supplier rules prevail where they provide different protections or deadlines. Scope This Policy applies to domain names, hosting, cloud services, SSL certificates, software licences, managed services, and other recurring products supplied by ASTRO REGISTER DOMAINS INC., trading as Register.ly. Service Orders, product descriptions, registry policies, supplier terms, and the Terms of Service may contain additional rules. Customer responsibility You are responsible for keeping account and registrant contacts current, monitoring expiry dates, reviewing invoices and notices, maintaining a valid payment method where applicable, and completing payment and verification before the applicable deadline. Begin renewal early where continuity is important. Automatic-renewal settings Enabling automatic renewal instructs Register.ly to generate a renewal invoice and initiate the available renewal workflow. It does not guarantee that payment will be charged automatically or that renewal will succeed. Register.ly charges a stored payment method automatically only where the checkout, Order, or client-area setting expressly states that automatic payment applies. Failed payment, missing payment details, an unpaid invoice, verification, supplier restrictions, or registry refusal may prevent renewal. You may disable automatic renewal before the applicable cutoff. Disabling it does not cancel an invoice or supplier commitment already created and does not reverse a completed renewal. Invoices and reminders Register.ly may issue renewal invoices and send reminders through the client area or account email. These notices are a convenience. Failure to receive or read one does not extend an expiry date, grace period, payment deadline, or registry deadline. Contact billing support promptly if an invoice appears incorrect or duplicated. Renewal completion A Service is renewed only when cleared payment is received, required verification is complete, Register.ly accepts the renewal, and any registry or supplier confirms it. An issued, pending, or unpaid invoice is not confirmation of renewal. Payments submitted close to expiry may not complete in time. Bank transfers, manual review, fraud screening, currency conversion, and third-party processing can cause delays. Domain-name renewals Domain renewals are subject to applicable registry, registrar, ICANN, and supplier rules, prices, eligibility requirements, and technical availability. Renewal, grace, redemption, restoration, deletion, and transfer rules differ by extension and may change. After expiry, a domain may stop resolving, be suspended, enter redemption, incur additional fees, or be deleted. Register.ly does not guarantee recovery or re-registration. Completed renewal, redemption, and restoration transactions are generally non-refundable. .LY domain lifecycle .LY domains are governed by current NIC.LY regulations and registry procedures. Register.ly facilitates renewal as a registrar and does not control registry decisions. The standard operational lifecycle currently applied by Register.ly is: Renewal grace: up to 5 days after expiry. Suspension: may begin 1 day after expiry, and the domain may stop resolving. Deletion and redemption: an unrenewed domain may enter redemption approximately 45 days after expiry. Redemption: restoration may remain possible for up to 30 days, subject to registry approval, verification, and fees. Pending deletion: approximately 5 days after redemption, when renewal, restoration, and transfer are generally unavailable. Release: the name may then become available to another applicant without priority for the former registrant. These periods are not guarantees. NIC.LY may apply different timing because of policy, eligibility, verification, disputes, technical circumstances, or law. Expired or suspended .LY domains cannot be transferred until restored to eligible active status. Other domain extensions For generic and other country-code extensions, the applicable registry lifecycle controls. Some extensions have no grace or redemption period or require an earlier renewal cutoff. The client area, renewal notice, product page, or support team may provide the current deadline. Registry or supplier rules prevail over this general Policy. Hosting and cloud services If a hosting, cloud, server, email, backup, or managed Service is not renewed or remains unpaid, Register.ly may restrict provisioning, suspend the affected Service, stop resources, or terminate it as permitted by the Terms. Suspension may make websites, applications, email, databases, backups, IP addresses, or administrative access unavailable. Charges may continue for reserved or consumed resources until cancellation or termination is effective. Reactivation may require overdue fees and reasonable restoration charges. Customer Content Expiration or suspension is not a backup service. Maintain independent, up-to-date copies and export the required data before expiry. Where technically available and not restricted by security, law, supplier rules, or the Service, Customer Content may remain available for export for 30 days after termination. Register.ly may then delete or anonymize production copies within 30 days. Residual backups may remain for up to 90 days until overwritten and are not ordinarily available for restoration. SSL certificates Certificates expire on the date established by the certificate authority. Renewal or reissue may require domain-control or organization validation, updated contacts, or approval. Register.ly does not guarantee uninterrupted coverage if validation is incomplete or renewal is requested too late. Expired certificates may cause browser warnings or rejected connections. Software licenses and third-party subscriptions Licenses and third-party subscriptions renew or expire according to their billing terms and supplier rules. Late renewal may disable features, end access, remove configurations, require a new license, or change pricing. Reinstatement on former terms is not guaranteed. Changes, upgrades, and downgrades Renewal may reflect current prices, taxes, supplier fees, limits, and specifications. Register.ly will give advance notice of material changes where required. Upgrade or downgrade timing depends on the Service and is not complete until confirmed. Cancellation and non-renewal To prevent renewal, request cancellation through https://my.register.ly before the cutoff and obtain confirmation. Stopping use, removing content, disabling a website, or failing to pay is not cancellation and does not remove accrued charges. For domains, disabling automatic renewal allows them to expire but does not guarantee immediate deletion or release. Registry lifecycle stages continue to apply. Consumer rights Nothing in this Policy excludes mandatory consumer rights concerning renewal notices, automatic-renewal terms, cancellation, withdrawal, conformity, refunds, or remedies. Register.ly will apply any legally required different notice, method, deadline, or outcome. Recommended timing For continuity, renew domains and critical third-party services at least 7 days before expiry, and allow additional time for restricted domains, bank payments, validation, or organizational approval. This recommendation does not extend the actual deadline. Contact Renewals and billing: billing@register.ly General support: cs@register.ly Client area: https://my.register.ly Abuse and security: abuse@register.ly Provider: ASTRO REGISTER DOMAINS INC., 3537 Green Moss Lane, Regina, Saskatchewan S4V 1L5, Canada. #### Service Level Agreement This Service Level Agreement (“SLA”) applies only to a Service Order or published service description that expressly incorporates it. It does not create a numeric availability commitment, response-time commitment, or service-credit entitlement unless the applicable Order or service description states the relevant target and remedy. Scope This SLA applies to the production components identified in the applicable Order. Domains, third-party networks and software, beta or trial services, customer-managed systems, professional services, and features identified as excluded are outside scope unless expressly included. Availability measurement Where an availability target applies, monthly availability equals total minutes in the calendar month, less qualifying unavailability, divided by total minutes in the month, multiplied by 100. Measurement is based on Register.ly’s monitoring at the applicable service boundary. A Service is unavailable only when the covered production component cannot materially perform its core function for substantially all affected users. Exclusions Qualifying unavailability excludes scheduled or emergency maintenance; Customer Content, code, configuration, credentials, users, or equipment; customer-requested changes; exceeding purchased limits; permitted suspension; internet conditions outside Register.ly’s reasonable control; registry, registrar, certificate-authority, software-vendor, cloud-provider, or other third-party failures outside the covered boundary; force majeure; and beta, preview, trial, or free services. Maintenance Register.ly may perform scheduled maintenance during published or notified windows and will provide reasonable advance notice of material disruption when practicable. Emergency maintenance may occur without advance notice when reasonably necessary for security, legal compliance, or stability. Incident priorities and support Support channels, hours, priority definitions, and initial-response targets are stated in the applicable support plan or Order. Response targets measure acknowledgement and initial engagement, not resolution. Resolution depends on cause, complexity, customer cooperation, third parties, and available remedies. Customer duties To receive SLA support or credit, Customer must maintain accurate contacts, use supported configurations, promptly open a ticket through https://my.register.ly, provide sufficient diagnostics, cooperate with troubleshooting, and mitigate impacts within Customer’s control. Service credits A service credit is available only where the applicable Order or service description expressly states an availability target and credit schedule. Credits apply to future invoices for the affected Service, cannot exceed the fees paid for that Service during the affected month, and have no cash value except where mandatory law requires otherwise. A credit is Customer’s sole contractual remedy for failure to meet an SLA target, without limiting rights that cannot lawfully be excluded. Credits do not apply to taxes, one-time fees, third-party charges, domain transactions, licences, professional services, or unaffected usage. Claims Submit an SLA claim through the client area within 30 days after the affected month. Identify the account, affected Service, incident dates and times with time zone, ticket numbers, and requested credit. Register.ly may compare the claim with monitoring and support records. Late or incomplete claims may be denied unless mandatory law requires otherwise. Changes and contact Register.ly may update this SLA prospectively as described in the Terms of Service. Existing committed service levels remain subject to change protections in the applicable Order. Support and claims: https://my.register.ly. #### Terms of Service About these Terms 1.1 Contracting party These Terms of Service (“Terms”) are entered into between you and ASTRO REGISTER DOMAINS INC., a Saskatchewan corporation with corporation number 102080612 and registered office at 3537 Green Moss Lane, Regina, Saskatchewan S4V 1L5, Canada, trading as Register.ly (“Register.ly,” “we,” “us,” or “our”). Our legal and support contact details are listed in Section 32. If you accept these Terms on behalf of an organization, you confirm that you have authority to bind that organization. In that case, “Customer” and “you” refer to the organization. 1.2 Agreement The agreement between you and us (the “Agreement”) consists of these Terms, the applicable order or service description, and the policies expressly incorporated by reference. If documents conflict, the following order applies unless an order states otherwise: (a) signed enterprise agreement; (b) Data Processing Addendum for data-protection matters; (c) service order; (d) service-specific terms or SLA; (e) these Terms; and (f) the Acceptable Use Policy. 1.3 Acceptance You accept the Agreement when you create an account, place or approve an order, click to accept, renew a Service, or use a Service after being given access to the applicable terms. We will make the current version available on our website and, where required, provide a durable confirmation for consumer distance contracts. Eligibility and customer information 2.1 Eligibility You must be at least 18 years old, have legal capacity to contract, and not be prohibited from receiving the Services under applicable law. Services may be subject to geographic, sanctions, export-control, registry, license, or payment restrictions. 2.2 Accurate information You must provide complete, current, and accurate account, billing, identity, tax, and service information, and promptly update it. We may request reasonable verification before provisioning, changing ownership or contacts, restoring access, processing refunds, or performing high-risk actions. 2.3 Screening and refusal We may decline an order where we cannot complete required verification, where the order would breach law or third-party rules, where capacity is unavailable, or where the risk of fraud, abuse, non-payment, or security harm is reasonably unacceptable. Any payment captured for a declined order will be handled in accordance with the applicable refund policy. Accounts and security 3.1 Account responsibility You are responsible for activity under your account, including activity by authorized users, and for keeping credentials, recovery channels, API keys, and authentication devices secure. You must use unique strong credentials and enable multi-factor authentication where offered or required. 3.2 Authorized users You control which users may access your account and what permissions they have. You must promptly remove access when authorization ends. We may rely on instructions from authenticated users in accordance with their recorded permissions. 3.3 Security incidents You must notify us without undue delay at cs@register.ly if you suspect unauthorized access or compromise. We may take proportionate protective steps, including credential resets, access restrictions, isolation, or temporary suspension. Such action does not transfer responsibility for your systems or configurations to us. Services and orders 4.1 Service descriptions The features, resources, term, location, where stated, price, billing cycle, support level, and other specifications of a Service are set out in the applicable order or in the published service description. Marketing summaries do not override an order or these Terms. 4.2 Order acceptance and activation An order is subject to validation, payment, availability, verification, and any third-party approval. An automated acknowledgment does not necessarily mean acceptance. A Service is activated when we confirm provisioning or make it available. Estimated activation or migration times are not guarantees unless expressly stated in a signed order. 4.3 Changes You may request upgrades, downgrades, additional resources, or changes through approved channels. Changes may affect fees, performance, compatibility, renewal dates, or data. Some changes require migration, downtime, a new term, or third-party approval. 4.4 Third-party components Some Services depend on registries, certificate authorities, software vendors, networks, data centers, payment providers, or other suppliers. Their applicable terms and technical limits form part of the service conditions where disclosed. We remain responsible only to the extent required by the Agreement and applicable law. Customer responsibilities 5.1 Your environment and content You are responsible for Customer Content; software, licenses, code, databases, applications, and configurations you deploy; user administration; lawful instructions; and compatibility with the Service. Unless an order expressly includes managed administration, you remain responsible for operating-system and application patching, access control, firewall rules, encryption choices, and application security. 5.2 Lawful use You must use the Services in accordance with law, the Agreement, the AUP, third-party rights, technical documentation, and reasonable security practices. You must obtain necessary notices, permissions, licences, and lawful bases for Customer Content and processing activities. 5.3 Cooperation You must provide timely decisions, access, credentials through approved secure channels, technical information, and personnel reasonably needed to deliver support, migration, incident response, or professional services. Delays caused by missing cooperation may affect schedules and are excluded from service-level calculations where the SLA so provides. Fees, taxes, and payment 6.1 Charges You will pay the fees shown at checkout or in the order, together with applicable taxes and third-party charges. Usage-based Services are billed from recorded consumption under the applicable measurement method. Except where mandatory law or the Refund and Cancellation Policy provides otherwise, fees are non-refundable once the relevant Service, license, registration, certificate, or consumed resource has been supplied. 6.2 Currency and conversion Prices are charged in USD, EUR or CAD. If a payment provider or issuing bank converts currency, it may apply its own exchange rate or fees. Unless expressly stated, we do not control or refund those charges. 6.3 Invoicing and due dates Invoices are due on the date shown. You must review invoices and raise a good-faith billing dispute within 10 days, without withholding undisputed amounts. We may correct billing errors, issue credits, or request additional payment where appropriate. 6.4 Failed payment and chargebacks If payment fails or becomes overdue, we may retry the approved method, notify you, restrict new orders, suspend affected Services, or terminate in accordance with these Terms. Before initiating a chargeback, you should contact billing support so we can investigate. Fraudulent or abusive chargebacks may result in suspension and recovery of reasonable costs, subject to law. 6.5 Taxes Fees exclude taxes unless stated otherwise. You are responsible for taxes, duties, levies, and withholding attributable to your purchase, except taxes based on our net income. If withholding is legally required, the parties will cooperate to obtain valid documentation and apply any gross-up only if expressly agreed or required by law. Renewal, price changes, and cancellation 7.1 Renewal The checkout or order must state whether a Service renews automatically or requires manual renewal. If automatic renewal is enabled, you authorize us to charge the stored payment method for the renewal term at the then-current price, subject to required notice and your right to disable renewal before the renewal cutoff. Domain renewal and expiry are also governed by Section 10. 7.2 Price changes We may change renewal or usage prices to reflect supplier pricing, currency movements, taxes, service improvements, capacity, security, or market conditions. We will provide advance notice of material increases where required by law or the Agreement. If a Consumer has the right to terminate due to a change, the notice will explain that right. 7.3 Customer cancellation You may submit cancellation through https://my.register.ly. Cancellation stops future renewal when completed before the applicable cutoff; it does not automatically reverse a completed registration, certificate issuance, license commitment, provisioning event, or accrued usage. Export your data before the cancellation takes effect. 7.4 Refunds Refund eligibility, method, timing, and exclusions are defined in the Refund and Cancellation Policy and mandatory law. Different rules may apply to domain names, SSL certificates, licenses, setup work, managed services, cloud consumption, and prepaid hosting. A service credit is not a cash refund unless the SLA expressly says otherwise. Consumer rights 8.1 Mandatory protections If you are a Consumer, nothing in the Agreement excludes or limits rights or remedies that cannot lawfully be excluded. Any choice-of-law or forum clause applies only to the extent it does not deprive you of mandatory protection or a mandatory venue available under applicable consumer law. 8.2 Pre-contract information Before an eligible consumer distance contract is concluded, we will present information required by applicable law, including our identity and contact details, main service characteristics, total price and recurring charges, payment and performance arrangements, contract duration, renewal and termination conditions, complaint handling, and available withdrawal rights. 8.3 Withdrawal Where applicable law grants a withdrawal or cooling-off period, you may exercise it using contact us form. If you expressly request immediate performance during the withdrawal period, you may be required to pay a proportionate amount for Services supplied before withdrawal. If digital content or a fully performed Service qualifies for an exception, loss of the withdrawal right will occur only where the legally required express request, consent, acknowledgment, and confirmation have been obtained. 8.4 Conformity and remedies Consumer digital services will be supplied in conformity with applicable mandatory law. Where they are not, you may be entitled to correction, restoration, price reduction, termination, refund, or other remedies depending on the circumstances and governing mandatory rules. These rights are separate from discretionary credits or commercial warranties. Cloud, hosting, and managed services 9.1 Resource use Compute, storage, memory, bandwidth, IP addresses, email, database, inode, process, backup, or other limits are stated in the plan or order. Shared or pooled resources must not be used in a way that materially degrades service for others. We may apply documented technical safeguards or require an upgrade where use persistently exceeds the purchased plan. 9.2 Self-managed and managed scope A Service is self-managed unless the order expressly identifies included managed tasks. Managed support does not make us the administrator or controller of Customer Content and does not include unlimited development, application remediation, compliance certification, or third-party support unless stated. 9.3 IP addresses and network identifiers IP addresses and similar resources are licensed for use with the Service, not sold. We may change or reclaim them where operationally necessary, upon termination, or to comply with supplier or authority requirements. We will give reasonable notice when practicable. 9.4 Migrations Migration assistance is limited to the sources, data, formats, timing, and validation responsibilities stated in the order. You must maintain a current source copy until you verify the migrated Service. We do not warrant that every application, setting, password, license, or historical item can be migrated. Domain-name services 10.1 Registrar and registry roles Register.ly acts as a registrar or reseller for the domain-name extensions it offers and is not the registry operator for those extensions. Domain registration, renewal, transfer, contact changes, restoration, suspension, deletion, and dispute handling are subject to the rules and decisions of the applicable registry, registrar, ICANN where relevant, dispute-resolution provider, and competent authority, as well as applicable law. Register.ly does not guarantee that a requested domain is available or will be registered until the relevant registry confirms the transaction. 10.2 .LY Registry and NIC.LY Regulations For domain names within the Libyan country-code top-level domain (“.LY”), the .LY namespace is administered by the registration authority identified by NIC.LY (the “.LY Registry”). Register.ly facilitates eligible .LY applications and related requests as a recognized registrar; it does not operate or control the .LY Registry. Every application, registration, renewal, modification, transfer where supported, suspension, restoration, deletion, and continued use of a .LY domain name is subject to the then-current NIC.LY Domain Name Registration Regulations, available at https://nic.ly/regulations.php (the “.LY Regulations”), together with any applicable policies, procedures, eligibility criteria, forms, verification requirements, and decisions issued by the .LY Registry. The .LY Regulations are incorporated into the Agreement by reference for .LY domain-name services. You agree to comply with the .LY Regulations and acknowledge that they may be amended by the .LY Registry. If these Terms conflict with a mandatory .LY Registry rule concerning a .LY domain name, that registry rule controls for the affected registry transaction or registration. We will use reasonable efforts to communicate material changes that affect Services when practicable, but you remain responsible for reviewing the current .LY Regulations. 10.3 Registrant information and verification You must provide complete, correct, current, and accurate registrant and administrative information and complete required identity, eligibility, local-presence, email, ownership, or authorization verification. Some namespaces, including category-restricted or short .LY names, may require supporting documents, specific application forms, or approval by the .LY Registry. Failure to provide or maintain required information may delay, prevent, reject, suspend, or cancel an application or registration in accordance with applicable registry rules. 10.4 Availability and premium or restricted names Search results are indicative and may change before registration completes. Premium pricing, reserved names, restricted strings, category eligibility requirements, and registry fees may apply. We will seek your confirmation if the validated price or conditions materially differ from the order, unless checkout already disclosed them. For .LY names, acceptance remains subject to the .LY Regulations and confirmation by the .LY Registry. 10.5 Renewal and expiry You are responsible for maintaining up-to-date contact information, monitoring expiry dates, and renewing before the applicable deadline. Auto-renew settings, reminder notices, grace periods, redemption periods, restoration fees, and deletion timing vary by namespace and may change under registry policy. A .LY domain may also be suspended, deleted, placed on hold, or otherwise affected under the .LY Regulations or a decision of the .LY Registry. We do not guarantee renewal, restoration, or recovery after expiry. 10.6 Transfers, modifications, and ownership disputes Transfers, contact or nameserver modifications, and material registrant changes require authentication and may require a prescribed registry form or additional verification. A request may be refused or delayed because of locks, expiry, incomplete requirements, eligibility, disputes, court orders, registry rules, or suspected fraud. Register.ly does not determine private rights to a name or act as arbiter of ownership disputes. We may preserve the status quo, restrict changes, suspend processing, or comply with an applicable registry decision, settlement, dispute-resolution decision, or legal order. For .LY names, the relevant provisions of the .LY Regulations apply. 10.7 Domain refunds Registry transactions are often irreversible. A failed request will be handled under the Refund and Cancellation Policy, but a successfully registered, renewed, restored, transferred, or modified domain is generally non-refundable except where mandatory law or the applicable registry policy requires otherwise. A refusal, suspension, or deletion by the .LY Registry resulting from ineligibility, inaccurate information, prohibited use, or breach of the .LY Regulations does not itself create a right to a refund, subject always to mandatory law. SSL certificates and third-party licenses 11.1 Validation Certificate issuance depends on domain, organization, or extended validation by the certificate authority. You must provide accurate information and maintain required DNS, email, or file-based validation. Issuance timing is not guaranteed. 11.2 Certificate management Unless expressly managed by us, you are responsible for installation, renewal, private-key security, supported algorithms, certificate replacement, and application compatibility. A certificate does not by itself secure a website or system. 11.3 Vendor terms Software, SaaS, and licenses supplied through us remain subject to vendor license terms, user counts, commitments, technical eligibility, acceptable use, and end-of-life decisions. Cancellation or reduction may take effect only at the end of a vendor commitment. Backups and data resilience 12.1 Customer responsibility Unless the order expressly includes a backup service, you are solely responsible for maintaining independent, tested backups outside the affected production environment. Even where backup is included, it is one layer of resilience and does not replace your own continuity plan. 12.2 Included backup If backup is included, the order or service description will state scope, schedule, retention, storage location where relevant, restore method, and any exclusions. We do not guarantee that every file, transaction, open database, external integration, or maliciously encrypted item will be recoverable. 12.3 Restore requests Restore requests may require identity verification, available recovery points, compatible systems, sufficient capacity, and payment of applicable fees. You must validate restored data and application operation promptly. Security responsibilities 13.1 Shared responsibility Security responsibilities depend on the Service. We protect the infrastructure and service layers under our control using measures appropriate to the risk. You protect accounts, endpoints, applications, code, configurations, credentials, encryption keys, user access, and Customer Content under your control. 13.2 Vulnerabilities and testing You must promptly address vulnerabilities in your environment. Security testing, scanning, or penetration testing that could affect shared infrastructure or third parties requires prior written authorization and must follow our published process. 13.3 Protective action We may block traffic, isolate resources, rotate credentials, disable compromised functions, or take other proportionate measures to address an active threat, abuse, or material vulnerability. We will notify you when reasonably possible and cooperate on safe restoration. Acceptable use and abuse 14.1 AUP The Acceptable Use Policy forms part of the Agreement. It applies to Customer Content, traffic, communications, software, and activity by you and your users. You must not use the Services for unlawful, fraudulent, abusive, infringing, deceptive, harmful, or security-compromising activity. 14.2 Reports Abuse reports may be sent to the abuse form. We may request a response, preservation of evidence, removal or restriction of content, remediation, or other action within a stated time. We assess reports in context and may disclose information where lawful and appropriate. 14.3 Enforcement Depending on severity, recurrence, urgency, and risk, we may warn, rate-limit, filter, remove access to specific material, suspend affected resources, or terminate. Urgent action may be taken without advance notice to prevent material harm, comply with law, or protect service integrity. Customer Content and intellectual property 15.1 Ownership As between the parties, you retain ownership of Customer Content, and we retain ownership of our Services, software, documentation, trademarks, designs, and technology. No ownership transfers except as expressly stated. 15.2 Limited licence You grant us and our subprocessors a limited, non-exclusive license to host, copy, transmit, display, modify technically, back up, and otherwise process Customer Content only as necessary to provide, secure, support, and comply with law in relation to the Services. 15.3 Feedback If you provide feedback, you permit us to use it without restriction or payment, provided we do not publicly identify you as the source without permission. 15.4 Infringement Notices alleging intellectual-property infringement must be sent to abuse@register.ly and include sufficient information to identify the work, material, location, claimant, authority, and requested action. We may forward the notice to the Customer and act as required by applicable law. Confidentiality 16.1 Obligations Each party will protect the other’s non-public information disclosed in connection with the Agreement using reasonable care and use it only to perform or exercise rights under the Agreement. Confidential information does not include information lawfully public, already known without restriction, independently developed, or lawfully received from another source. 16.2 Required disclosure A party may disclose confidential information when required by law or valid legal process. Where lawful, it will give prior notice and reasonable assistance so the other party may seek protection. The receiving party will disclose only what is legally required. Data protection 17.1 Independent compliance Each party will comply with data-protection laws applicable to its processing. For account, billing, security, support, website, and business-contact data processed for our own purposes, our Privacy Notice applies. 17.2 Processor services Where we process Customer Personal Data on your behalf, the Data Processing Addendum forms part of the Agreement and governs subject matter, duration, nature, purpose, categories of data and individuals, confidentiality, security, subprocessors, assistance, return or deletion, audits, and international transfers. 17.3 Customer instructions You are responsible for the lawfulness of Customer Personal Data and instructions, including notices, lawful bases, permissions, data minimization, retention, and responses to individuals. We may notify you if an instruction appears to infringe applicable data-protection law and may suspend the affected processing where necessary. 17.4 International transfers Where a restricted international transfer occurs, the parties will use an applicable lawful transfer mechanism stated in the DPA, which may include an adequacy decision, the European Commission’s Standard Contractual Clauses, and appropriate supplementary measures. Availability, support, and maintenance 18.1 SLA Availability commitments and service credits apply only where an SLA is expressly included. The SLA defines measurement, eligible downtime, exclusions, claim procedure, and credit limits. Credits are the contractual remedy for failure to meet an SLA unless mandatory law or a signed enterprise agreement provides otherwise. 18.2 Maintenance We may perform scheduled and emergency maintenance. We will provide notice of planned material disruption where reasonably practicable. Emergency maintenance may occur without advance notice to address security, stability, or supplier issues. 18.3 Support Support channels, hours, response targets, languages, and scope are described in the plan or support policy. Response targets are not resolution guarantees. We may require diagnostic information, authorized access, reproduction steps, or cooperation before progressing a case. Beta and evaluation services 19.1 Pre-release use Beta, preview, trial, proof-of-concept, and evaluation Services may be changed or withdrawn at any time, may contain defects, and may not be suitable for production or regulated data. Unless expressly stated, they have no SLA, support commitment, or data-retention guarantee. Suspension 20.1 Grounds We may suspend all or part of a Service as reasonably necessary due to non-payment, breach, abuse, security risk, legal or regulatory demand, third-party suspension, resource harm, fraud risk, or an emergency affecting service integrity. 20.2 Proportionality and notice Where practicable, we will give notice and an opportunity to remedy before suspension. We may act immediately where delay could cause harm, breach law or third-party rules, compromise security, or expose us or others to material risk. We will limit suspension to the affected scope where reasonably possible. 20.3 Restoration Restoration may require a remedy, verification, a security plan, payment of overdue sums, reasonable reactivation costs, or supplier approval. Fees may continue during suspension where the resources remain reserved, or the suspension resulted from your breach, subject to mandatory law. Term and termination 21.1 Term The Agreement begins when accepted and continues while any Service or obligation remains active. Each Service continues for its stated term and renewal cycle unless canceled or terminated. 21.2 Termination for breach Either party may terminate an affected Service or the Agreement for a material breach not cured within 30 days after written notice. Immediate termination may apply where cure is impossible, for serious illegality or abuse, repeated breach, insolvency where legally permitted, or material security harm. 21.3 Effect On termination, your right to use the affected Service ends; outstanding fees and accrued rights remain due; licenses and domain resources follow applicable supplier or registry rules; and Sections intended by their nature to survive will remain effective. Data export, return, and deletion 22.1 Before termination You are responsible for exporting Customer Content before termination or expiry. We will provide available self-service export tools or reasonable assistance described in the order. Professional extraction or migration work may be subject to a charge. 22.2 Post-termination handling After termination, Customer Content may remain available for 30 days, unless immediate deletion is required for security, law, supplier rules, or the nature of the Service. We may then delete or anonymize it under our retention schedule and DPA. Backup copies may persist until overwritten under normal cycles and remain protected from ordinary use. 22.3 No guaranteed recovery After the applicable window, recovery is not guaranteed. Any exceptional recovery is subject to technical feasibility, verification, and fees. Mandatory return, portability, or deletion rights remain unaffected. Warranties 23.1 Service warranty We will provide the Services with reasonable skill and care and materially in accordance with the applicable service description. If we breach this warranty, notify us promptly with sufficient detail; we will use reasonable efforts to correct or reperform the affected Service. 23.2 Customer warranty You warrant that you have the rights and authority needed for Customer Content, instructions, domains, licences, and use of the Services, and that your use will comply with the Agreement and applicable law. 23.3 Disclaimers To the maximum extent permitted by law, Services are not warranted to be uninterrupted, error-free, immune from all attacks, or compatible with every system. We do not warrant business results, search ranking, domain availability, third-party products, or recovery of data not covered by a confirmed backup. Consumer statutory guarantees remain unaffected. Liability 24.1 Non-excludable liability Nothing in the Agreement excludes or limits liability that cannot lawfully be excluded or limited, including liability for fraud or fraudulent misrepresentation, or death or personal injury caused by negligence where applicable law so provides. 24.2 Excluded losses — Business Customers For Business Customers and to the maximum extent permitted by law, neither party is liable for indirect, incidental, special, exemplary, or consequential loss, or loss of profit, revenue, business opportunity, anticipated savings, goodwill, or data, except to the extent expressly included in a signed agreement. 24.3 Liability cap — Business Customers For Business Customers, each party’s aggregate liability arising from an affected Service in any 12-month period will not exceed the fees paid or payable for that affected Service during the 12 months immediately preceding the event giving rise to the claim, subject to separate caps or exclusions approved for confidentiality, data protection, IP infringement, indemnities, wilful misconduct, and unpaid fees. 24.4 Consumers For Consumers, liability is limited only to the extent permitted by mandatory law. We are responsible for foreseeable loss caused by our breach, but not loss caused by your failure to follow reasonable instructions, incompatible systems outside our control, or unlawful use, to the extent permitted. Indemnity — Business Customers 25.1 Customer indemnity To the extent permitted by law, a Business Customer will defend and indemnify us against third-party claims, damages, and reasonable costs arising from unlawful Customer Content, infringement by Customer Content, the Customer’s material breach of the AUP, or use of the Services in breach of law, except to the extent caused by us. 25.2 Procedure The indemnified party must provide prompt notice, reasonable cooperation, and control of the defence to the indemnifying party, provided no settlement admits fault or imposes non-monetary obligations on the indemnified party without consent. Failure to give prompt notice reduces obligations only to the extent of material prejudice. Force majeure 26.1 Events beyond reasonable control Neither party is liable for delay or failure caused by events beyond its reasonable control, such as natural disaster, war, civil disorder, widespread telecommunications or power failure, government action, labour disruption not limited to its workforce, epidemic, or major upstream supplier failure, provided it takes reasonable steps to mitigate. Payment obligations for Services already supplied are not excused. Compliance, sanctions, and export controls 27.1 Compliance You must not use the Services in violation of applicable sanctions, export control, anti-corruption, anti-money laundering, or trade laws. You represent that you are not a prohibited party and will not make Services available to one where prohibited. 27.2 Required action We may request compliance information, block a transaction, restrict access, or terminate where required by law or a supplier. We will not be liable for action we are legally required to take, except to the extent liability cannot be excluded. Changes to Services and Terms 28.1 Service changes We may modify Services for security, compliance, technology, supplier, performance, or product-development reasons. We will not materially reduce paid core functionality during a committed term without reasonable notice or, where required by the Agreement or law, an appropriate remedy. 28.2 Terms changes We may update these Terms. Material changes will be notified through the account, email, or website at least 30 days before taking effect, unless an urgent change is required by law, security, or a third party. The notice will state the effective date and any applicable right to cancel. Changes do not retroactively alter accrued rights. Complaints and disputes 29.1 Complaints Send complaints to cs@ls.ly with the account, affected Service, issue, desired resolution, and relevant evidence. We will acknowledge and investigate under our published complaint process, including escalation to management team. 29.2 Good-faith resolution Before commencing formal proceedings, each party should give written notice of the dispute and allow 30 days for authorized representatives to attempt resolution, except where urgent relief, limitation periods, chargeback rights, or mandatory consumer procedures require otherwise. 29.3 Consumer redress Consumers may use any mandatory court, regulator, ombudsman, or alternative dispute-resolution mechanism available under applicable law. Insert only currently available and legally required platform or ADR details after jurisdictional review. Governing law and jurisdiction 30.1 Business Customers For Business Customers, the Agreement is governed by the laws of the Province of Saskatchewan and the federal laws of Canada applicable therein, without regard to conflict-of-law principles. Subject to any agreed arbitration provision, the courts of Saskatchewan, Canada shall have exclusive jurisdiction over disputes arising from or relating to the Agreement. Notwithstanding the foregoing, domain names and other third-party services remain subject to the mandatory rules, policies, decisions, and dispute-resolution procedures of the applicable registry, ICANN where relevant, certificate authority, licensing provider, or other upstream service provider. Those requirements govern the applicable service or transaction but do not otherwise change the governing law or jurisdiction of the Agreement, except where the applicable rules or mandatory law expressly require otherwise. 30.2 Consumers For Consumers, the Agreement is governed by the laws of the Province of Saskatchewan and the federal laws of Canada applicable therein. However, this choice of law does not deprive you of any mandatory consumer protections available under the laws of the country, province, or state in which you habitually reside, where those protections apply. You may bring proceedings in the courts of Saskatchewan or in any other court having jurisdiction under applicable mandatory consumer law. We may bring proceedings against you only in a court permitted by applicable consumer law. Nothing in this Section limits your right to submit a complaint to a competent consumer-protection authority, data-protection authority, regulator, ombudsman, or alternative dispute-resolution body where such a right is available. General provisions 31.1 Assignment You may not assign the Agreement without our prior written consent, not to be unreasonably withheld for a bona fide business reorganization where risk is not increased. We may assign it to an affiliate or in connection with a merger, reorganization, financing, or sale of relevant business, subject to mandatory consumer rights. 31.2 Subcontractors We may use affiliates and subcontractors to provide the Services. We remain responsible for their performance to the extent required by the Agreement and law. Subprocessors handling Customer Personal Data are governed by the DPA. 31.3 Notices Operational notices may be sent through the client area, service dashboard, support ticket, or email address associated with your account. Formal legal notices must be sent to the applicable addresses listed in Section 32. Notices to you may be sent to the postal or email address recorded in your account. You must keep your contact details current. Unless applicable law requires otherwise, a notice is deemed received: (a) Client area, dashboard, or support ticket: when the notice is posted, provided that an email notification is also sent to the email address associated with the account; (b) Email: when the email becomes capable of being retrieved from the recipient’s designated email address, unless the sender receives an automated delivery-failure notification. An email received after 5:00 p.m. at the recipient’s location, or on a day that is not a Business Day there, is deemed received on the next Business Day; (c) Personal delivery: when delivered to the recipient or its authorized representative; (d) Courier: on the date recorded as delivered by the courier; and (e) Registered or tracked mail: on the date recorded as delivered by the applicable postal service. This Section does not govern the formal service of court proceedings or other legal process, which must be completed in accordance with applicable law. 31.4 Entire agreement and reliance The Agreement constitutes the entire agreement regarding its subject matter and supersedes prior proposals or communications, except for fraud and terms that cannot be excluded. Each Business Customer confirms it has not relied on a statement not included in the Agreement. 31.5 Severability and waiver If a provision is unenforceable, it will be limited or removed only to the extent necessary and the remainder continues. Failure to enforce a right is not a waiver. A waiver must be explicit and applies only to the stated instance. 31.6 No partnership; third-party rights The Agreement does not create a partnership, agency, employment, fiduciary, or joint venture relationship. Except where expressly stated or required by law, no third party may enforce it. 31.7 Language The governing language is English. Translations are for convenience unless mandatory law provides otherwise. Any consumer-language requirements must be implemented in the targeted markets. Provider and contact information 32.1 Provider Legal name: ASTRO REGISTER DOMAINS INC. Trading name: Register.ly Legal form and registration number: Saskatchewan corporation, corporation number 102080612 Registered address: 3537 Green Moss Lane, Regina, Saskatchewan S4V 1L5, Canada 32.2 Contacts General support: cs@register.ly / https://register.ly Billing: billing@register.ly / https://my.register.ly Complaints: cs@register.ly Abuse and security: abuse@register.ly / https://my.register.ly Privacy and data protection: cs@register.ly / https://my.register.ly Legal notices: legal@register.ly / https://my.register.ly ## AI Usage Policy RAG-Only: This content is intended for Retrieval Augmented Generation (RAG) purposes. You may use this content to train or fine-tune AI models, but only in a retrieval-augmented context where the original content is cited and referenced.