Privacy Policy

Last updated: 30 August 2026

Who we are

This website is operated by IPv4 Exchange International Ltd, trading as IPv4XI (“we”, “us”). We are the data controller for the personal data described below.

Registered in England and Wales, company number 8204639.
Registered office: Unit 3, Chartwell Business Park, Paulet Road, London SE5 9HW, United Kingdom
Email: info@ipv4xi.com
Telephone: +44 117 205 0611

What we collect, and when

When you use a form on this site. Our buyer, seller and contact forms ask for your name, company name, city and country, email address, and details of the IPv4 space you want to buy or sell – block sizes, registry (RIPE, ARIN, APNIC, LACNIC, AFRINIC), whether you require clean address space, your currency, your price expectation, and any comments you add. Only the name, city, country, email and your enquiry details are required; everything else is optional.

When you email or call us. We keep correspondence relating to an enquiry or a transaction, including the contact details you give us.

When a transaction proceeds. To complete a transfer we need the information the Regional Internet Registry and the escrow provider require: the legal identity of the buying or selling entity, company registration documents, and the name and authority of the person signing on its behalf. We collect these because the registry and the escrow provider require them to process the transfer – we do not carry out separate identity or background checks of our own, and we do not build a profile of you.

Automatically. Our hosting provider keeps standard server logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting.

Cookies and analytics

Your choice comes first. When you first visit, a consent banner asks whether we may use non-essential cookies. Nothing in the statistics or marketing categories below is set until you choose “Accept all” (or enable that category under “Preferences”). If you choose “Decline”, only the essential cookies remain. You can change your mind at any time – see Withdrawing consent below.

We group cookies into three categories:

Functional (always on). WordPress session and preference cookies, caching cookies set by our host, and the small cookie that remembers your consent choice. The site cannot work properly without these, and they need no consent.
Statistics (needs your consent). Google Analytics 4, used to understand how people find and use this site – which pages are read, which sources visitors arrive from, and where they leave. Once you consent to statistics, it sets cookies named _ga and _ga_… that let us recognise a returning browser and count visits. We use this only in aggregate; we do not use it to identify you personally, and we do not combine it with the details you send us through a form. We have switched off Google Signals and ad personalisation, so this analytics data is not used for remarketing or cross-device profiling.
Marketing (needs your consent). We intend to measure the effectiveness of Google Ads advertising. Once this is live, consenting to marketing cookies will allow Google Ads conversion tracking to set a first-party conversion cookie, so we can tell whether an advert led to an enquiry. Until you consent to marketing, no such cookie is set. There is no Meta pixel, Hotjar or LinkedIn insight tag on this site.

Google Analytics and Google Ads data is processed by Google, including on servers in the United States, and we retain it for the standard period offered by the service.

Withdrawing consent. You can withdraw or change your consent at any time: use the button here or the identical link in the site footer, and the banner reopens. You can also block or delete cookies in your browser settings, use private browsing, or install Google’s official opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking these cookies has no effect on your use of the site.

Why we process it, and our lawful basis

To answer your enquiry and quote for your block or requirement – our legitimate interests in responding to people who contact us about our services, and, once you engage us, performance of our contract with you.
To carry out a transfer – performance of a contract, and compliance with the requirements of the relevant Regional Internet Registry.
To meet legal obligations – tax and accounting law, and any disclosure we are legally required to make.
To keep the site secure – our legitimate interests in preventing abuse.
To understand how the site is used – our legitimate interests in improving it, via the analytics described above.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

Who we share it with

We treat everything you tell us about yourself, your company and your address space as confidential, and we work on a need-to-know basis: information goes only to the people who cannot do their part of the transaction without it.

Prospective counterparties, without identifying you. To match a block to a buyer, or a buyer to a block, we have to be able to describe what is available or what is wanted – typically the size, the registry, the region and the general condition of the space. We do this only in conversations with clients we judge to be serious, and we do not name you or your organisation. Who you are is disclosed to the other side only once you have agreed to go ahead with that particular transaction.
The escrow provider used for the transaction, and, for larger deals, the lawyers involved.
The Regional Internet Registries (RIPE NCC, ARIN, APNIC and others) and any sponsoring LIR, where a transfer requires it. Some registries publish transfer records; we will tell you in advance what will be public.
Our hosting and IT providers, who process data on our instructions. Our website is hosted by SiteGround, whose mail servers send the notification when you submit a form. Our own mailboxes are with Proton Mail, in Switzerland, where messages are held encrypted so that the provider cannot read them.
Google, as the provider of the analytics described above. Google receives website usage data; it does not receive the contents of anything you submit through a form.
Professional advisers, auditors and authorities where we are required to disclose.

International transfers

IPv4 transfers frequently cross regions. Where a transaction involves ARIN (United States), APNIC (Asia-Pacific) or another registry outside the UK and EEA, your information will be transferred to that registry to complete the transfer. Our analytics provider, Google, also processes data in the United States, and our email is held in Switzerland, which the UK recognises as providing an adequate level of protection.

Where we transfer personal data outside the UK or EEA we rely on the appropriate safeguards permitted by UK GDPR, such as the International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

How long we keep it

Enquiries that do not become transactions: 24 months from your last contact with us, unless you ask us to keep you on our buyer or seller list.
Completed transactions: at least six years from the end of the relevant financial year, because tax and company law require it, and because registry records may need to be evidenced long afterwards.
Form submissions stored in the website: a copy of each submission is kept in the site database as well as emailed to us. That copy is deleted automatically once it is 24 months old.

Your rights

Under UK GDPR you have the right to ask us for a copy of your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; and, where processing is based on consent or contract, to receive your data in a portable form. Where we rely on legitimate interests, you can object and we will stop unless we have compelling grounds to continue.

To exercise any of these, email info@ipv4xi.com. We will respond within one month.

If you are not satisfied, you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113. If you are in the EEA you may instead complain to your local supervisory authority.

Changes

We will post any changes to this policy on this page and update the date above.