Legal

Privacy Policy

What We Collect, Why We Collect It, And What You Can Ask Us To Do With It.

Last Updated — 7 October 2026

Who This Policy Covers

GoDotly is a brand naming and domain acquisition practice, operated from Gurugram, India, with a team working across US, EU and India hours. Formerly Domaincool, we have been naming companies since 2011. This policy explains what personal data we collect through godotly.com and in the work it leads to, why we collect it, how long we keep it, and the choices you have over it.

It covers the forms on this site — a naming brief, a domain listing for the Dotlier programme, a request for one of our reports, and an enquiry about a domain we represent — and the client engagements, listings and domain transactions that follow from them. It also covers people we contact on someone else's behalf: the holder of a domain we approach for a client, and businesses we approach about a name listed with us.

Some links on this site lead to services with their own privacy notices — PlumJob, where our open roles are listed, our profiles on X and LinkedIn, and the escrow providers and registrars a domain transaction runs through. Once you are on one of them, its notice governs what it collects, not this one.

In this policy, 'we', 'us' and 'our' mean GoDotly. 'You' means anyone visiting the site, submitting information through it, or working with us.

Information We Collect

We collect only what a given interaction needs. Most visitors never give us anything beyond the technical data every website receives.

Category	What it includes	How we get it
Contact details	Name, work email, company, job title, phone or Signal number, and country.	You give them to us in a form or by writing to us.
Naming briefs	What you need from us, the business and its market, the dot you are aiming for, and any working titles, names or domains you already have in mind.	You give it to us through the brief form or in conversation.
Domain listings	How many domains you hold, your main extensions, and the listing template you upload: your domains, their asking prices and any notes or special instructions.	You give it to us through the listing form.
Domain enquiries	The domain you are enquiring about, whether you are a business, an investor or a broker, whether you want a price or are making an offer, the amount of any offer, and your message. We also record your acceptance of the Digital Asset Enquiry Terms, with a timestamp, your IP address, a session reference and the version of the terms you accepted.	You give it to us through the enquiry form. The acceptance record is created when you submit it.
Report requests	The report you asked for, and whether you agreed to receive occasional research from us.	You give it to us through the report form.
Domain holders and prospective buyers	The public registration and contact details for a domain, business contact details from public sources such as company registries, funding announcements and trade mark filings, and our correspondence with the person.	From public sources, and from the exchange that follows.
Technical data	IP address, browser and device type, operating system, referring page and timestamps, and the signals our security check reads to tell people from automated traffic.	Collected automatically by our hosting provider and by the security check on our forms.
Usage data	Pages viewed, how you move through the site, the device you use, your broad region, and the page and link that brought you to a form.	Collected automatically by Google Analytics, and by the site itself when you submit a form.
Correspondence and engagement records	Emails, call and meeting notes, proposals, and the records of a domain transaction or a Dotlier sale.	Created in the course of working with you.

We do not ask for sensitive personal data — government identifiers, financial account numbers, health information or biometric data — through this website. Please do not send it to us in a form or an attachment. Where a domain transaction needs identity or payment details, the escrow provider collects them through its own process, under its own notice.

How We Use Your Information

We use personal data for the following purposes, and no others:

To answer your brief or enquiry, and to carry on the conversation it starts.
To deliver an engagement: inventing and screening names, researching and approaching domain holders, negotiating and closing an acquisition, building the identity around the name, and planning a migration.
To run the Dotlier programme: reviewing the inventory you send, listing the names we accept, approaching businesses they fit, showing each name's status in your dashboard, applying the ten-day hold, and telling you when a buyer is interested.
To pass an enquiry about a domain we represent to the domain's owner, and to administer any negotiation or sale that follows.
To email you a report you requested and, if you ticked the box, occasional research from us, until you tell us to stop.
To consider an application for one of our open roles.
To provide, operate and secure this website, including checking that form submissions come from people and preventing abuse.
To understand which pages and topics are useful, and which pages lead people to a form, so we can improve them.
To keep records of our dealings with you, and to meet legal, tax, audit and regulatory obligations.
To establish, exercise or defend legal claims, including in a domain name dispute, where that becomes necessary.

Names and shortlists you send us for screening are run through Dotly.ai, the naming platform our screening is built on, to test them for pronunciation, spelling under dictation, meaning across languages, trade mark exposure and availability.

We do not sell personal data. We do not rent or trade mailing lists. We do not use your briefs, names or enquiries to train third-party machine learning models.

Our Legal Basis For Processing

Where the Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of the consent you give when you submit it, or for legitimate uses recognised under that Act. You may withdraw consent at any time; withdrawal does not affect processing already carried out.

Where the UK or EU General Data Protection Regulation applies to you, we rely on the following bases:

Consent — for research email you opt into.
Performance of a contract, or steps taken at your request before entering one — for answering briefs and enquiries, delivering engagements, running Dotlier listings and completing domain transactions.
Legitimate interests — for site security, fraud prevention and aggregate analytics; for approaching a domain holder on a client's behalf, or a business about a name listed with us, using contact details from public sources; and for ordinary business administration. We balance these against your rights each time.
Legal obligation — for retention, tax and regulatory record-keeping.

Cookies, Analytics And Security Checks

A cookie is a small file a site stores in your browser. Browser storage works in a similar way; session storage is cleared when you close the tab. We use as little of either as we can.

Strictly necessary

These make the site and its forms work. Every form is protected by Cloudflare Turnstile, a security check that reads signals from your browser to tell people from automated traffic. The page and link that brought you to a form are held in your browser's session storage for up to 30 minutes and sent with the form, and a domain enquiry carries a session reference held the same way. Our reports library may set a cookie so it can recognise a returning visitor and, for some reports, send the file without asking for your details again. None of these has an advertising function.

Analytics

We use Google Analytics 4, loaded through Google Tag Manager, to see which pages are read, how people move through the site and which devices they use. It sets cookies in your browser and sends this information to Google. We use it for aggregate reporting only: we do not use it to identify you, and we do not join it to anything you submit in a form.

Your controls

Every mainstream browser lets you see the cookies a site has set, delete them, and refuse new ones. Google offers a browser add-on that stops Google Analytics from collecting data about your visits, at https://tools.google.com/dlpage/gaoptout. Blocking analytics will not affect how the site works; blocking the security check will stop our forms from sending.

We do not show advertising on godotly.com, and we do not use what we learn about your visit to advertise to you.

Third-Party Services We Link To

Following a link to one of these takes you outside this policy:

Our open roles are listed on PlumJob, which collects and holds applicant data under its own notice.
Our profiles on X and LinkedIn are run under those platforms' own terms and notices.
Escrow providers and registrars used in a domain transaction hold account, identity and payment details under their own notices.
The registries, marketplaces and publications we cite in our insights and blog are linked as sources, and run their own sites.

We choose the services we work with carefully, but we do not control what they collect. Read their notices before you submit anything to them.

How Long We Keep It

We keep personal data only as long as the purpose we collected it for lasts, then delete it or anonymise it.

What	How long
Briefs, enquiries and report requests that do not progress	Up to 24 months from the last exchange.
Client engagements, domain transactions and Dotlier sales	For the relationship, then 7 years for legal, tax and audit purposes.
Dotlier listings	While your names are listed with us, then up to 24 months after you withdraw them, so any question about a buyer our outbound reached can still be answered.
Records about domain holders and businesses we approached	Up to 24 months from our last contact, unless a transaction follows.
Applications that are not taken forward	Up to 12 months, so we can come back to you about a later role.
Research email you opted into	Until you unsubscribe, plus a suppression record so we do not re-add you.
Server and security logs	Up to 12 months.

Where a longer period is required by law, or where information is needed for a claim that is live or reasonably anticipated, we keep it for that period instead.

How We Protect It

We treat a brief, its working titles and its domain targets as confidential from the moment they reach us, and we limit access to them to the people working on the engagement. We apply technical and organisational measures proportionate to the data we hold: encryption in transit, authentication on administrative systems, logging and monitoring, vendor review, and staff obligations of confidentiality.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal data and the law requires it, we will notify you and the relevant authority within the time the law allows.

Email is not a secure channel. Please do not send passwords, identity documents, bank details or other confidential material to us by ordinary email.

Your Rights

Subject to the law that applies to you, you may:

Ask what personal data we hold about you and get a copy of it.
Ask us to correct data that is inaccurate, incomplete or out of date.
Ask us to erase data we no longer have a reason to hold.
Withdraw consent you previously gave, including for research email.
Object to, or ask us to restrict, processing we carry out on the basis of legitimate interests — including asking us not to approach you again about a domain or a listed name.
Ask for a portable copy of data you gave us, in a machine-readable format.
Nominate another person to exercise these rights on your behalf in the event of your death or incapacity, where the Digital Personal Data Protection Act, 2023 applies.
Complain to us, and then to your data protection authority or to the Data Protection Board of India, if you are not satisfied.

Use our contact page to exercise any of these. We will verify your identity before acting, and respond within 30 days. There is no charge unless a request is manifestly excessive or repetitive.

Every research email we send carries an unsubscribe link, and it works. You will still receive replies to briefs and enquiries you started, and messages about a live engagement, listing or transaction.

International Transfers

We operate from India, with a team working across US, EU and India hours, and with clients, domain owners and partners in many countries. Some of our service providers store or process data outside the country you are in.

Where personal data moves across a border, we transfer it only to a country not restricted by the Central Government under the Digital Personal Data Protection Act, 2023, and — where UK or EU rules apply — under an adequacy decision or Standard Contractual Clauses with the additional safeguards those clauses require.

Children

This site is built for a professional audience. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

If you believe a child has given us personal data, tell us through our contact page and we will delete it.

Changes To This Policy

We update this policy when our practices, our services or the law change. The date at the top of the page is the date of the current version, and it is the authoritative one.

Where a change materially affects how we handle data you have already given us, we will tell you directly rather than rely on this page.

Contact And Grievance Redressal

For anything in this policy — a question, a rights request or a complaint — use our contact page, or write to GoDotly, Gurugram, Haryana, India.

Our Grievance Officer, appointed under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, is reached the same way. Mark your message for the Grievance Officer and we will acknowledge it within 48 hours and resolve it within 30 days.

If we cannot resolve it, you may escalate to the Data Protection Board of India, or to the supervisory authority in your country if you are outside India.

This policy is a general description of our practices and is not legal advice. Our registered entity details and the name of our Grievance Officer are available on request through our contact page.