Privacy policy
Last updated: 9 September 2026
1. Who is responsible for your data
Onebit Technology Solutions Limited (RC1919657), a company registered in Nigeria, is the data controller for personal data processed through domain.onebit.ng. Contact us at [email protected].
2. What we collect
Account information. Your name, email address, and the contact and billing details you give us when you create an account or place an order.
Domain information. The domains you register or transfer, their registration and expiry dates, nameservers, and the DNS records you configure.
Payment information. Payments are processed by Paystack. We receive confirmation that a payment succeeded and the details needed for invoicing. We do not store your card number.
Usage information. Pages requested, approximate location derived from your IP address, and basic device and browser information, collected by our analytics so we can tell which pages are used and which are not.
3. Why we process it
To register, transfer, renew and manage domains for you — which necessarily includes passing the details the registry requires to the registry. To take payment and issue invoices. To send you notices about your domains, including expiry and renewal. To answer your support requests. To keep the service secure and to detect abuse. To understand which parts of the site are used, in aggregate.
The legal bases are the performance of our contract with you, compliance with our legal and registry obligations, and our legitimate interest in operating and securing the service.
4. Who we share it with
NiRA, the .ng registry, and its systems — a domain registration cannot happen without the registry receiving registrant details.
Paystack, our payment processor, which handles card and transfer payments under its own privacy terms.
Service providers that host our infrastructure, send our email and provide our analytics, acting on our instructions.
Authorities, where we are legally required to disclose information.
We do not sell your personal data.
5. Registrant details and public records
Registering a domain means providing registrant details to the registry. Since 16 June 2025 the .ng registry redacts registrant contact details from public lookups in line with the Nigeria Data Protection Act, so those details are not published to the world — but the registry itself holds them, and may disclose them where its policies or the law require.
Nameservers remain public, because the domain name system needs them to be.
6. Cookies and analytics
We use cookies that are necessary to keep you signed in across OneBit panels and to carry a session through checkout. Turning these off will stop the service working.
We use OneBit's own self-hosted analytics to count page views and understand which pages are used. We also run a Meta advertising pixel on this site, which lets us measure whether our advertising reaches anyone; you can limit this through your browser or your Meta ad preferences.
Where a link carries an advertising click identifier, we store it in a cookie so that a signup can be attributed to the advertisement that produced it.
7. How long we keep it
Account and domain records are kept for as long as you hold a domain with us and afterwards for as long as we are required to keep them for tax, accounting and registry purposes. Analytics data is kept in aggregate.
8. Your rights
Under the Nigeria Data Protection Act you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it where we are not required to keep it, object to processing based on our legitimate interests, and withdraw consent where processing relies on it.
Write to [email protected]. Note that deleting the registrant details attached to a live domain is not always possible while the registration exists, because the registry requires them.
You may also complain to the Nigeria Data Protection Commission.
9. Security
We use encrypted connections, restrict access to personal data to people who need it, and keep payment card handling with our processor rather than on our own systems. No system is perfect; if a breach affects you we will tell you and the regulator as the law requires.
10. Changes
We may update this policy. The version in force is the one on this page, with the date at the top. See also our terms of service.