Gransy Sdn. Bhd. ("Gransy", "we", "us", or "our") is committed to protecting the personal information of our customers, domain name registrants, and other individuals who use our services.
This policy explains the types and categories of personal data collected by Gransy in connection with domain name registration, renewal, transfer, management, and related services.
Gransy collects and processes personal data in accordance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA), as amended, and applicable domain registry policies and requirements.
This policy applies to personal information collected from:
Depending on the services requested and applicable registry requirements, Gransy may collect the following categories of personal and registrant information.
3.1 Personal Identification Information
3.2 Contact Information
3.3 Organization Information
For domain names registered under organizations, Gransy may collect:
3.4 Domain Registration Information
Gransy collects and maintains information necessary to register and manage domain names, including:
3.5 Billing and Payment Information
For billing, invoicing, and payment administration, Gransy may collect:
Payment-related data will be collected and processed only to the extent necessary for the applicable payment method and service.
3.6 Technical and Service-Related Information
When customers access or use Gransy's services, we may collect:
Gransy collects personal and registrant data for the following purposes:
Personal information may be collected through:
Certain personal and registrant details are mandatory to complete domain registration or comply with applicable registry requirements.
Other information may be optional, depending on the domain extension, service requested, and applicable regulations.
Where mandatory information is not provided, Gransy may be unable to process the requested domain registration or provide the relevant service.
Gransy will seek to collect only information that is necessary and relevant for legitimate business, technical, contractual, or regulatory purposes.
Where necessary and permitted by applicable law, Gransy may share relevant personal and registrant information with:
Information disclosed will be limited to what is necessary for the relevant purpose and subject to applicable data protection requirements.
Gransy Sdn. Bhd. ("Gransy") acknowledges that certain domain registration information may be made publicly accessible through domain registration lookup services, including WHOIS, Registration Data Access Protocol (RDAP), or equivalent services operated by domain registries and registrars.
8.1 Publicly Available Domain Information
Depending on the applicable domain registry's policies, domain extension, and legal requirements, the following registration information may be publicly available:
Registered domain name.
Domain registration and expiration dates.
Domain registration status.
Registrar name and information.
Assigned nameservers.
Domain creation and last updated dates.
Registrant organization name, where publication is permitted or required.
Other technical or registration information permitted under applicable registry policies.
The information displayed may differ depending on the domain extension and the relevant registry's disclosure requirements.
8.2 Protection of Personal Registrant Information
Gransy recognizes the importance of protecting the personal information of individual domain registrants.
Personal information, including an individual's name, residential address, telephone number, email address, and identification details, will not be publicly disclosed where such disclosure is restricted by applicable data protection laws or registry policies.
Certain personal information may be redacted, withheld, or replaced with alternative contact information in publicly accessible WHOIS or RDAP records.
8.3 Disclosure to Authorized Parties
Although certain registrant information may not be publicly displayed, Gransy may disclose relevant domain registration information to authorized parties where permitted or required by applicable law.
Such parties may include:
Domain registry operators and upstream registrars.
Regulatory and law enforcement authorities.
Courts and other competent legal authorities.
Authorized dispute resolution service providers.
Other parties with a legitimate and lawful basis for requesting non-public registration information.
Any disclosure will be assessed in accordance with applicable laws, contractual obligations, and domain registry requirements.
8.4 Registry-Specific Requirements
The publication and disclosure of domain registration information may vary according to the requirements of the relevant domain registry.
For .MY domain names, Gransy follows the applicable requirements established by the Malaysian Network Information Centre (MYNIC).
For generic top-level domains (gTLDs), including .COM, .NET, and .ORG, applicable ICANN policies and registry requirements govern the publication and disclosure of registration data.
Gransy will comply with the applicable rules and requirements concerning the availability, protection, and disclosure of domain registration information.
Privacy and proxy services are mechanisms that may limit the public display of a domain registrant's personal contact details by using alternative contact information or a proxy registration arrangement.
Where such services are available and applicable to a particular domain extension, their use may affect the information displayed in public domain registration lookup services.
9.1 Collection of Registrant Information
The use of a privacy or proxy service does not necessarily eliminate the requirement to collect accurate registrant information.
Gransy and its authorized service providers may still be required to collect, maintain, or process the registrant's actual information for domain registration, verification, management, or regulatory compliance purposes.
9.2 Publication of Registration Information
When an applicable privacy or proxy service is used, certain registrant contact details may be replaced with information associated with the privacy or proxy service.
The extent of such substitution depends on the type of service, the applicable domain registry's requirements, and relevant legal obligations.
9.3 Disclosure of Protected Information
The use of a privacy or proxy service does not guarantee absolute anonymity.
Registrant information may still be disclosed where required or permitted under applicable laws, court orders, registry policies, or other lawful disclosure procedures.
9.4 Service Availability
The availability of privacy or proxy services depends on the applicable domain extension, registry policies, and services offered by Gransy or its authorized providers.
Customers should confirm whether such services are available for their chosen domain extension before registration.
Gransy is committed to implementing reasonable administrative, technical, and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.
Access to personal and registrant information is restricted to authorized personnel and service providers who require such access to perform their duties.
Gransy takes reasonable steps to maintain accurate and up-to-date personal and registrant information.
Customers and registrants are responsible for providing accurate information and informing Gransy of any changes.
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or to meet applicable legal, contractual, and registry requirements.
Subject to applicable laws, individuals may request access to or correction of their personal data and exercise other applicable data protection rights.
Requests concerning personal data may be submitted through Gransy's official customer support channels.
Gransy may review and update this policy periodically to reflect changes in applicable laws, domain registry requirements, industry standards, or business operations.
The latest approved version of this policy will apply to personal data collected and processed by Gransy Sdn. Bhd.
