Digital Safety, Copyright, Sanctions and Regulated Data Addendum

1. Purpose and priority

This Addendum forms part of the Terms, Acceptable Use Policy, Privacy Policy, Data Processing Addendum, Abuse Reporting Policy and applicable product schedules. It is designed to address evolving obligations affecting UK-based technology providers with international customers, including U.S. customers, EU users, online hosting, user-uploaded content, copyright complaints, platform-safety duties, sanctions, export controls and regulated data. If this Addendum conflicts with a more specific product schedule, registry rule, supplier term or legal requirement, the more specific or legally required term prevails for that component to the minimum necessary extent.

2. No general monitoring or active fact-finding duty

Rocket Domains provides technology, hosting, domain, email, workspace, registry, app, security, backup, booking and related services. It is not the author, publisher, editor, moderator, controller, guarantor or insurer of customer content merely because content is transmitted, stored, routed, backed up, scanned, filtered, indexed, cached, displayed, secured, delivered, restored, removed or disabled through the services.

Rocket Domains does not undertake a general obligation to monitor information that customers or their users transmit, store, publish or make available, or to actively seek facts or circumstances indicating illegal activity. Voluntary filtering, spam scanning, malware scanning, reputation checks, automated abuse detection, manual review, takedown actions, legal holds, customer support, backups or restoration attempts do not create a duty to monitor any other content or prevent any other harm.

3. Notice, action, restoration and redress

Rocket Domains may maintain online forms, email addresses, ticket processes or other mechanisms for notices of abuse, illegal content, infringement, malware, phishing, spam, child-safety issues, privacy issues, sanctions issues, security incidents, registry abuse and law-enforcement requests. A notice should be specific, evidence-based and proportionate. Rocket Domains may reject or deprioritise notices that are anonymous where identity is needed, inaccurate, unsupported, overbroad, automated at abusive scale, abusive, unlawful, impossible to action, outside Rocket Domains’ technical control, or designed to suppress lawful competition or expression.

Where Rocket Domains restricts content or services because of alleged illegality, abuse or incompatibility with the Terms, it may provide the customer with reasons and available restoration or appeal options where legally required and where doing so would not compromise security, safety, investigations, evidence preservation, law enforcement, rights of third parties, supplier obligations or legal privilege.

4. U.S. customers and DMCA position

Rocket Domains has customers in the United States but is a United Kingdom company. It does not need to incorporate or maintain a physical office in the United States merely to receive operational copyright complaints or serve U.S. customers. However, if Rocket Domains seeks to rely on U.S. DMCA online service provider safe-harbour protections for hosted or user-uploaded content, it should consider designating and registering a DMCA agent with the U.S. Copyright Office and publishing the same current agent contact information on its website.

Until Rocket Domains completes and publishes such a designation, legal@rocket.domains should be presented as Rocket Domains’ operational legal, abuse and copyright contact, not as a statutory DMCA designated agent. Rocket Domains may still remove or disable access to material following credible infringement complaints, terminate repeat infringers, process counter-notices where appropriate, and cooperate with rightsholders and competent authorities. Customers remain fully responsible for their content and must indemnify Rocket Domains and the Rocket Protected Parties for infringement claims arising from customer content, customer websites, customer apps, customer domains, customer uploads, customer users or customer instructions.

5. Sanctions, export controls and restricted persons

Customers represent on an ongoing basis that they, their administrators, beneficial owners, end users and payment sources are not sanctioned persons, are not located in a prohibited territory, are not acting for or on behalf of sanctioned persons, and will not use the services for sanctions evasion, restricted end uses, unlawful exports, military end uses, weapons of mass destruction end uses, terrorist financing, money laundering, controlled software or technology transfers, or any purpose requiring a licence that has not been obtained.

Rocket Domains may screen, block, reject, suspend, terminate, withhold, reverse, report, preserve or disclose transactions, accounts, domains, orders, content, data or services where sanctions, export-control, restricted-territory, anti-money-laundering, anti-bribery, fraud, payment-network, supplier or law-enforcement risk is identified. Rocket Domains is not liable for losses caused by good-faith sanctions/export-control compliance or supplier restrictions.

6. Regulated and sensitive data restrictions

The services are not configured or warranted as a regulated-data platform unless Rocket Domains expressly agrees in writing. Customers must not use the services to collect, store, process or transmit payment-card data, protected health information, medical records, clinical records, insurance records, biometric identifiers, genetic data, criminal offence data, children’s data at scale, government identifiers, classified information, export-controlled technical data, legal-professional-privilege repositories, financial-services records, regulated investment records or other highly regulated data unless the customer has obtained written approval and implemented all required legal, security, contractual, consent, audit, retention, breach-notification and data-protection controls.

Customers remain the controller or responsible party for regulated data they choose to place in the services. Rocket Domains may require removal, encryption, segregation, additional contracts, product changes, risk assessment, deletion, suspension or termination where regulated data creates legal, security, supplier, privacy, insurance, reputational or operational risk.

7. Consumer and business differentiation

For business customers, the dispute escalation, mediation, arbitration, venue, indemnity, cost-recovery, limitation of liability, no-refund, suspension and termination provisions apply to the fullest extent permitted by law. For consumers, nothing in the Terms excludes non-excludable statutory rights, unfairly restricts access to mandatory consumer remedies, removes cancellation rights that cannot legally be waived, or imposes arbitration, remote venue, cost-shifting or procedural barriers where such terms would be unenforceable under applicable consumer law.

If a customer uses a service for mixed business and personal purposes, Rocket Domains may treat the account as a business account where the account, domain, billing details, content, plan, use case, reseller activity, revenue activity, organisational email, website, booking portal or communications indicate trade, business, craft, professional or organisational use.