We will request consent from someone when:

1. We give the option of processing any piece of personal data that isn’t essential or necessary to provide the service. For example, for most domain registrations, we don’t require the owner to provide their phone number, but by collecting this piece of data we are able to provide a backup verification method.
2. The data is required by a third party, with whom we do not yet have a GDPR-compliant contract. For example, a registry might require that the domain owner’s postal address be on file in order to complete a domain registration. If we don’t have a GDPR-compliant contract with this particular registry, we would have to request consent from you to process and share this extra piece of personal data before completing the registration.