Privacy Policy
Last updated: October 9, 2026
Who we are
Secret Brokerage is operated by Arif Şengören, a sole proprietor trading as Secret Brokerage. He is the data controller for the personal data described in this policy. You can reach us at [email protected].
What we collect and how
- Request and contact forms. When you send us a request, we collect what you type into the form: the service you need, the domain name(s) or the kind of name you are looking for, your budget range, fee preference and timeline (where the form asks for them), whether you want an NDA first, your name and email address, and, if you choose to give them, your phone number, company and a message.
- Your IP address and the request form. We do not store your IP address with your request. To limit abuse, the form counts the requests coming from one IP address for up to one hour. The counter is kept as a hash, not as the address itself, and it expires automatically.
- Email delivery. Each request reaches us as an email sent through Mailgun, our email delivery provider.
- Website analytics, only with your consent. If you click "Accept" in the cookie bar, we load Google Analytics 4. It sets two cookies (_ga and _ga_54R6P7P8MC, valid for up to 400 days) and tells us how the site is used, for example which pages are viewed and what device and browser are used. If you click "Decline" or do nothing, Google Analytics is not loaded and our site sets no cookies.
- Your cookie choice. We save your choice (accepted or declined) in your browser's local storage so we do not ask on every page. You can change it at any time with "Cookie settings" in the footer.
- Cloudflare. Our site is delivered through Cloudflare, which processes visitor requests (including IP addresses) to deliver and protect the site, and provides visit statistics without cookies.
- Server logs. Our web server keeps technical logs for about 14 days: the address that connects to the server (for normal visits this is Cloudflare's address), the page requested, the time and the browser type.
We do not use session-recording or heat-map tools.
Why we use your data
- To answer your request, provide the service you ask for (domain acquisition, domain appraisal, portfolio management or selling a domain) and stay in touch with you about it.
- To keep the site secure and prevent abuse (the request limit, server logs and Cloudflare protection).
- To understand how the site is used, only if you accept analytics cookies.
Who we share it with
We do not sell your personal data. We share it only with the service providers we need to run the site and handle your request: our hosting provider (Hetzner), Cloudflare, Mailgun, and Google (only if you accept analytics cookies). If you go ahead with a domain purchase or sale that uses an escrow service, we share the details needed for the escrow process with the escrow provider.
How long we keep it
We do not delete requests automatically. We keep them for as long as we need them to handle your request and any work that follows, and we delete them when you ask us to. If you placed an order through our earlier online ordering system, we keep those order records for as long as accounting and legal obligations require. Analytics cookies last up to 400 days, server logs about 14 days, and the request counter at most one hour.
Your rights
Under applicable data protection laws, including the EU and UK GDPR, you can ask us to confirm whether we process your personal data and to give you a copy of it, to correct it, to delete it, to restrict our use of it, or you can object to how we use it. To use any of these rights, email [email protected] and we will reply within 30 days. You can withdraw your consent for analytics cookies at any time with "Cookie settings" in the footer.
You also have the right to complain to the data protection authority in the country where you live.
Changes to this policy
If we change this policy, we will update the date at the top of this page.
Contact
