DATA PRIVACY POLICY
of TM Domain Registry

1. Legal Framework

TM Domain Registry Limited, a company registered in England runs the .TM Registry (“NIC.TM”) takes into account UK Data Protection Act of 1998, the European Union's General Data Protection Regulation (2016/679), the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426) and the European Directive 95/46/EC.

2. Purpose

In the course of its Domain name Registration service NIC.TM needs to gather and process personal information (“the Data”) about the Registrant and/or Administrative Contact and/or Techical Contact and/or Billing Contact (“the Data Subject”):

- Name
- Organization Name (if applicable)
- Full Address
- Phone Number
- Fax Number
- e-Mail

The Data will be associated with the .TM Domain name to be Registered and can be used to supply information about the Domain Name(s) registered by the Data Subject following queries made using the WHOIS service.

3. Consent to the Processing of the Data

As part of the Domain name Registration Process, the Data Subject has the option to grant (or withhold) consent to NIC.TM to process and include the Data in the Registry Database.
This consent may be is expressed at the time of Registration by checking the “Terms and Conditions” box after having read the TERMS page. In the event that the Data Subject withholds consent for NIC.TM to process and include the Data in the Registry Database, then the application will be terminated, no charges imposed, no service given and any collected information deleted. Where consent is given by the Data Subject to process and include the Data in the Registry Database, service will be provided and the Data Subject has a further option relating to whether or not the collected data may be made public. With regard to public disclosure of parts of the Data relating to the Data Subject's registration the default is NO disclosure however the Data Subject may select to disclose their Data as the result of a WHOIS query on the Data Subject's Registered Domain name.

4. Rights of Data Subject

a) Defacto Right to Refuse publication of certain parts of the Data

The Administrative Contact has the right to Refuse publication of certain elements of the Data by leaving box 2b. checked at the time of Registration (see the from). However, by unchecking, box 2b. it is indicating to the Registry that the Data Subject expressely wants and grants consent for the public disclosure of registration data (to potentailly facilitate an on-line transaction by an external third party).
The Data will be processed by the Registry following the consent given at the time of registration (see 3. above) and/or after any modification of the Data made by the Data Subject (see b. below) but parts of it (Phone, Fax and e-Mail) will not be used in the result of WHOIS queries or made publicly available unless further and explicit consent is given.

b) Right to Rectify the Data

Once the Data has been processed by the Registry, the Data Subject has the possibility to verify, edit or delete the Data simply by using the appropriate form on the NIC.TM web site.
Using its Password and ID (“Nic Handle”), the Data Subject can access the relevant page to perform selected modifications on the Data, including withdrawing certain elements.
Additionally the Registrant is granted the possibility to nominate another Administrative contact (while remaining the Billing contact) by creating another Nic-Handle using the appropriate form.

c) Right to know what Data has been processed

At all times, the Data Subject has the right to check which Data is held or has been processed by NIC.TM.
The Data can be checked either by accessing the https://www.NIC.TM/mod.xzx page with the relevant Nic-handle and password, or using the WHOIS service on one or more of its Registered .TM Domain(s).

5. Third Parties

a) Registrars

If the Domain name Registration has been performed by a Registrar, the Data has been automatically transferred to NIC.TM as part of the registration process.
The Data Subject can either verify, edit or remove the Data from the NIC.TM database on the relevant page using its Password and Nic Handle or contact the Registrar directly to do so.

b) Transfer from a Registrar to another

Registrar Transfers are free in the NIC.TM Registry and can be performed simply by supplying a new Nic Handle as the Technical Contact for a selected Domain name on the relevant page.
Since the Data is still kept and processed by the Registry, transfers should have no implication regarding Data Privacy. However, the Data Subject is advised to obtain in writing a copy of the Data Privacy policy established by the new Registrar before transferring a Domain.

c) Agents

As specified in the Terms & Conditions of Registration: NIC.TM shall be permitted by the Applicant's Agent (who shall expressly obtain the consent of individuals whose personal data is to be held on the Register of .TM Domain Names and if such consent is withheld or withdrawn then the Agent shall immediately terminate the registration) to allow other organisations and members of the public to access the data for the purpose of obtaining information about the registration of the Domain Name or any other related purpose.

Should the Registrant not be willing to have their personal information associated with a registered domain they are able to use an Agent for Service as their representative. This action in effect transfers all rights in the domain name to the Agent as the Registry shall only record the Agent's details as associated with the domain. It is therefore recommended, if a Registrant uses this third party service, that the relationship between actual user/holder of the domain and Agent for Service is clearly documented with a signed agreement of each others undertakings in the event of a dispute. The Agent will be deemed the Data Subject and benefit from the relevant rights established by this Policy.

6. Cookies

NIC.TM does not use Cookies on its web site and does not collect information without the knowledge of its visitors.

7. Data Protection Office

TM Domain Registry Limited is a Registered Data Controller to the UK Data Protection office under the number Z722942X
Details can be accessed by following this link to the Data Protection Office