Get in touch

Privacy Policy

Last updated: April 2026

1. Introduction

Coaley Peak® Ltd, trading as Acquisition.co.uk ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website or engage with us regarding the purchase or sale of domain names, or in relation to any potential acquisition of a business by us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Data Controller

The data controller for the purposes of applicable data protection legislation is Coaley Peak® Ltd, a company registered in England and Wales, with its registered office in Cheltenham, Gloucestershire. Coaley Peak® Ltd trades on this website under the name Acquisition.co.uk. For data protection enquiries, contact us at acquisition@coaleypeak.co.uk.

3. What Data We Collect

We may collect the following categories of personal data:

  • Identity data: full name, company name
  • Contact data: email address, telephone number
  • Transaction data: details of domain names purchased or sold, purchase price, payment method
  • Communication data: records of correspondence and enquiries
  • Technical data: IP address, browser type, operating system, and website usage data collected via server logs

4. How We Collect Data

We collect personal data through:

  • Enquiry forms on our website
  • Direct email correspondence
  • Telephone conversations
  • Domain purchase transactions
  • Automated server logs when you visit our website

5. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the UK GDPR:

  • Contract: Processing is necessary for the performance of a contract for the sale or purchase of a domain name, or to take steps at your request prior to entering into a contract (Article 6(1)(b)).
  • Legitimate interests: Processing is necessary for our legitimate business interests, such as responding to enquiries, managing our domain portfolio, and improving our website, provided these interests do not override your rights and freedoms (Article 6(1)(f)).
  • Legal obligation: Processing is necessary to comply with legal obligations, such as tax and accounting requirements (Article 6(1)(c)).

6. How We Use Your Data

We use your personal data to:

  • Respond to domain enquiries and negotiate sales
  • Process domain purchases and transfers
  • Communicate with you about transactions
  • Comply with legal, tax, and regulatory obligations
  • Maintain records of transactions for accounting purposes
  • Improve our website and services

We will not use your personal data for automated decision-making or profiling. We will not send unsolicited marketing communications unless you have given explicit consent.

7. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

  • Domain registrars: To facilitate domain transfers (e.g., IPS tag changes via Nominet-accredited registrars)
  • Payment processors: To process payments securely
  • Escrow services: Where an escrow transaction has been agreed by both parties
  • Professional advisors: Accountants and legal advisors, where necessary
  • Law enforcement or regulatory bodies: Where required by law or to protect our legal rights

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Enquiry data (no purchase): Deleted within 12 months of the last communication unless you request earlier deletion.
  • Transaction data: Retained for a minimum of 6 years after the transaction to comply with HMRC requirements and the Limitation Act 1980.
  • Technical/server log data: Retained for a maximum of 90 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted email communications, secure data storage, and access controls.

10. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your data, subject to legal retention requirements.
  • Right to restriction: Request restriction of processing in certain circumstances.
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at acquisition@coaleypeak.co.uk. We will respond within one calendar month of receiving your request.

11. Cookies and Local Storage

This website does not set any tracking cookies, advertising cookies, or third-party analytics cookies. We may use strictly necessary cookies or local storage for basic website functionality. These do not require consent under PECR.

12. Third-Party Services and International Transfers

We do not routinely transfer personal data outside the United Kingdom. However, this website loads typography from Google Fonts (operated by Google LLC and Google Ireland Limited). When your browser requests these font files, your IP address and basic technical request data are processed by Google. The legal basis for this transfer is our legitimate interest in serving consistent typography across devices (Article 6(1)(f) UK GDPR). Google operates under the UK adequacy regime and Standard Contractual Clauses where applicable. Google's privacy policy is available at policies.google.com/privacy.

If any other transfer of personal data outside the UK becomes necessary, we will ensure appropriate safeguards are in place in accordance with Chapter V of the UK GDPR.

12a. Personal Information Shared in Connection with Potential Business Acquisitions

Where you contact us in relation to a potential sale of a business or domain portfolio, the personal data and commercial information you share will be processed for the purpose of evaluating the proposed transaction. We will use reasonable endeavours to keep such information confidential. Information provided prior to the execution of a non-disclosure agreement is shared at your own risk; we recommend that a mutual NDA is agreed before sharing sensitive commercial information.

13. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO. Please contact us at acquisition@coaleypeak.co.uk in the first instance.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be indicated by updating the "Last updated" date. We encourage you to review this page periodically.