1. Controller
The data controller for domain-takedown.su is 78 OVER 37 LIMITED. Privacy contact: support@overload.su.
2. What we collect
Browsing this site: bunny.net's CDN logs request metadata (IP, URL, response code, user agent, referrer, timestamp) for security and aggregate traffic analysis. Treated as a transient operational log.
Engaging our services: business contact details, the abusive domain(s) and any supporting evidence you share with us, internal correspondence about the case, and artefacts produced during investigation (WHOIS snapshots, DNS records, screenshots, source HTML, redirection chains, certificate transparency artefacts, credential-flow recordings where applicable).
3. Lawful basis
Where the GDPR or analogous regimes apply: (a) contract — to perform the engagement; (b) legitimate interests — operating, defending and improving the service; (c) legal obligation — when required by law.
4. Evidence handling
Evidence is hashed and time-anchored at collection, stored in immutable archives, and accessible only to assigned investigators. We share with abuse contacts at registrars, registries, browser safe-browsing partners, ad networks, payment processors, mobile-operator abuse desks and (where relevant) UDRP providers, in the minimum quantity required to obtain action.
5. Sharing
We share information with: infrastructure providers required to operate the service (CDN, email, Telegram); abuse contacts and dispute providers handling our complaints; professional advisers under written confidentiality; law enforcement and regulators on lawful request. We do not sell personal data and do not transfer evidence to data brokers.
6. International transfers
Domain abuse is inherently cross-border. Transfers from the EEA or UK rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism, where applicable.
7. Retention
Engagement correspondence and case files: retained for the duration of the engagement plus a reasonable period for recurrence monitoring and audit (typically up to 36 months for retainers, longer where required by UDRP/URS records). CDN logs: configured at our infrastructure provider, typically not exceeding 30 days for unaggregated records.
8. Your rights
Subject to local law: access, correction, deletion, portability, objection, restriction. Contact support@overload.su. Where evidence is held in connection with an active case, deletion may be limited by our legal-interest basis and our duties to other affected parties.
9. Security
Role-based access control, hardware-backed multi-factor authentication for staff, encrypted-at-rest evidence archives, segregated environments per engagement. Breach notification per applicable law.
10. Children
This is a B2B service. We do not knowingly collect personal data from children under 16 except as part of evidence relating to an engagement.
11. Changes
Material changes will be posted here with a new "last updated" date.
12. Contact
78 OVER 37 LIMITED — support@overload.su — Telegram @OverSupBot.