Privacy Policy

Nodes Unlimited Inc., a DBA of Blooming Brands Inc., of 303 Pawtucket Blvd, Lowell, MA 01854, USA, is the controller responsible for the personal information described in this policy. You can reach us about anything privacy-related at privacy@nodesunlimited.com.

We collect the following categories of information:

• Account and contact information — name, email address, phone number, business name, and billing address.
• Domain registration information — the registrant, administrative, and technical contact details required by the registry for each domain you register through us.
• Technical and device data — IP address, browser type and version, device type, operating system, referring pages, and timestamps of your visits.
• Service data — server, hosting, and email account metadata, resource usage, and system logs generated while we operate your services.
• Payment information — card details are entered directly into our payment processor, Stripe, and are transmitted straight to Stripe.
• Communication data — records of support tickets, emails, and other correspondence with us.

We never see, handle, or store full payment card numbers on our own systems or in our database. Stripe processes and stores card data as a PCI-DSS Level 1 certified provider; we retain only non-sensitive records such as the last four digits, card brand, and transaction status needed for invoicing and support.

Please note that domain registrant details are submitted to the relevant registry and registrar as required by ICANN, and some of those details may be published in public WHOIS records unless you use a privacy service where the registry permits one.

We use the information we collect to:

• Provide, provision, maintain, and support your services
• Process transactions, issue invoices, and send related notices
• Register, transfer, and renew domains with the relevant registrars and registries
• Respond to your questions, tickets, and requests
• Monitor performance, capacity, and abuse across our network
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Send service announcements, and marketing communications where you have consented
• Comply with our legal, tax, and accounting obligations

We do not sell or rent your personal information. We share it only with the service providers that make our business run, and only to the extent each provider needs it:

• Stripe — payment processing and card storage
• Namecheap — domain registration, transfer, and renewal
• Hetzner — cloud VPS and server infrastructure
• cPanel / WHM hosts — shared and NVMe hosting infrastructure
• Microsoft and Google — business email services you purchase through us
• Resend — delivery of transactional and account email
• Google Analytics — website analytics
• Blooming Brands Inc. — affiliated company providing billing, accounting, and customer support functions

We may also disclose information when required by law, subpoena, or other legal process; to comply with ICANN, registry, or upstream provider requirements; to enforce our agreements or investigate abuse; to protect the rights, property, or safety of Nodes Unlimited, our customers, or the public; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).

We implement appropriate technical and organizational measures to protect personal information, including encryption in transit, access controls, least-privilege administration, and monitoring of our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we maintain an incident response process and will notify affected customers and regulators of a breach where the law requires it.

We use cookies and similar technologies to keep you signed in, remember your cart and preferences, and understand how our site is used. You can control cookies through your browser settings, though disabling essential cookies will break sign-in and checkout. Details are set out in our Cookie Policy.

Depending on where you live, including under the GDPR and the CCPA/CPRA, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Receive a portable copy of your data in a machine-readable format
• Object to or restrict certain processing of your information
• Opt out of marketing communications at any time
• Not be discriminated against for exercising any of these rights

To exercise any of these rights, email privacy@nodesunlimited.com. We will verify your identity and respond within 45 days, or within one month where the GDPR applies. Exercising these rights is free of charge, and we will never deny you service or charge you a different price for doing so. Note that some information must be retained to keep a domain registration valid or to meet our legal obligations.

We keep personal information only as long as needed for the purposes described in this policy. Account and billing records are retained for the duration of your service and for up to seven (7) years afterwards to meet tax, accounting, and contractual obligations. Domain registration records are retained as long as the registry requires. Server and access logs are retained for up to twelve (12) months, and website analytics for up to twenty-six (26) months. When information is no longer needed, we delete it or irreversibly anonymize it.

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact privacy@nodesunlimited.com and we will delete it promptly.

We are based in the United States, and the information we collect is processed and stored in the United States and other countries where our service providers operate, including within the European Union where our cloud infrastructure provider maintains data centers. If you access our services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism to protect your information.

We may update this Privacy Policy from time to time. When we do, we will revise the date shown at the top of this page, and for material changes we will provide additional notice by email or through a prominent notice on our website. Your continued use of our services after an update takes effect means you accept the revised policy.

If you have any questions about this Privacy Policy, or wish to exercise your privacy rights, please contact us:

Nodes Unlimited Inc., a DBA of Blooming Brands Inc.
303 Pawtucket Blvd, Lowell, MA 01854, USA
privacy@nodesunlimited.com
+1-888-898-8008