For the most part, you can pick whichever TLD you prefer, though a few have restrictions -- you can't buy a .edu domain unless you run an accredited post-secondary school. Many, but not all, country-specific domains (.us, .uk, .jp) are restricted to citizens of the country in question. Unrestricted country domains are often used for "domain hacks," where the extension becomes part of the title, such as YouTube's alternate address, "youtu.be."
General Data Protection Regulation (GDPR) will be enforced by the European Union (EU) on May 25th, 2018. The GDPR is a strict set of rules centered around customer privacy. Internet Corporation For Assigned Names and Numbers (ICANN) has released a temporary standard to comply with GDPR while it negotiates with GDPR. As of the 25th, Oracle will remove the contact information from it’s whois server to comply with the GDPR as a temporary measure until the full ICANN standard is released.
Many registrars reserve the right to revoke your domain name for specific reasons, typically if you use the domain for illegal purposes or purposes deemed unacceptable (such as spamming). Many contracts contain a clause letting the registrar delete your domain name for no apparent reason. The implication, of course, is that the domain name is the registrar's, not yours.
GoDaddy — This extremely popular registrar (probably the biggest today) offers .com domain names for $9.99 (plus 20 cents) per year (or $6.99 plus 20 cents if you transfer from another registrar). They have a web interface to manage your domains, free web redirection (where people who visit your domain will get transferred to another web address of your choice), free starter web page, free parked page or free "for sale" page, and an optional private domain registration where your domain is registered in the name of a proxy company. Besides .com, they also sell .us, .biz, .info, .net, .org, .ws, .name, .tv, .co.uk, .me.uk and .org.uk, etc. Note that (as with all registrars) the exact price varies depending on which domain you are registering (for example some domain suffixes are more expensive than others). Both credit card and PayPal payments are accepted.
Anyone can buy a domain name. To do so, you visit a domain name registrar, such as GoDaddy or Namecheap, key in the domain you want to buy, and pay a fee. You can't buy just any domain, of course—only one that isn't already registered by another person or business and that bears a valid domain suffix. In general, you'll want to buy something that is catchy and short so that it's both easy for people to remember, and easy for them to type in—like "PCMag," for example. That good search engine optimization (SEO) and it's also common sense. You might also want to do some research on key terms for your business. If you can get a good one into your site's name, that's all the better, from an SEO perspective.
In order to register any domain, you must provide certain personal information that you may not wish to be publically searchable in the Whois database. Signing up for WhoisGuard is a great way to keep your registration data private. WhoisGuard acts as a "shield" for your searchable information, displaying the address, phone number, and email of the domain registrar (Namecheap, e.g.) instead of your own. Keep in mind that WhoisGuard is an optional security add-on that must be renewed separately when you renew your domain.