Whois Disclosures

REQUEST FOR DISCLOSURE OF NON-PUBLIC REGISTRANT

For privacy reasons, personal information in registration data is no longer displayed in our public WHOIS. However, as an ICANN-accredited registrar, NicNames.com is contractually required to allow third parties to request access to non-public registration data ("NPRD"). This policy outlines the general guidelines for requesting NPRD based on a legitimate interest ("Legitimate Interest").

This policy safeguards the fundamental rights, interests, and freedoms of data subjects, in accordance with the General Data Protection Regulation ("GDPR") or other applicable privacy laws. It is not a substitute for less-intrusive mechanisms (see Main Points to Consider, Section 2 below), which should be exhausted before submitting any NPRD request. NPRD requests should only be pursued as a last resort due to their potential impact on data subjects.

Main Points to Consider

Legitimate Interest

You must demonstrate Legitimate Interest in the NPRD you seek, ensuring it does not infringe upon the fundamental rights, interests, and freedoms of the relevant data subject, consistent with GDPR or other applicable privacy laws. This involves conducting a three-part balancing test ("Legitimate Interest Assessment" or "LIA") and submitting your results for review by NicNames.com. For guidance on LIA, please consult your legal advisors or review relevant resources from the UK Information Commission’s Office: https://ico.org.uk/.

Non-Intrusive Approaches

NicNames.com provides several less-intrusive mechanisms to address abuse or infringement:

Reporting abuse
UDRP or court dispute (subject to our subpoena policy)

The fundamental rights and freedoms of data subjects outweigh a third party's legitimate interest when reasonable and less-intrusive alternatives exist.

Data Protection

You must demonstrate that you have implemented appropriate technical and organizational measures to ensure that any NPRD obtained through this process is handled in compliance with GDPR or other applicable privacy laws. NicNames.com may, at its discretion and expense, require an audit of your data processing practices to verify compliance.

Handling of NPRD

You are responsible for properly disposing of any NPRD within 15 business days of receipt or once you can no longer rely on Legitimate Interest as the lawful basis for processing NPRD, whichever occurs first.

How to Submit a Request for NPRD

To submit your NPRD request, please follow these steps:

Log in to DocSend and fill out the NPRD Request Form. You may also download the form and use it as a template to create your own version if preferred.
Complete all fields, sign the form, and download the finalized version.
Email the completed form along with all supporting materials to whoisdisclosures@nicnames.com.

Required Format and Content of Disclosure Requests

A Disclosure Request must include the following information:

Requestor’s full name and contact details (email address and phone number);
Company or organization, if applicable;
The domain name concerned (one (1) domain name per request, under NicNames management);
A clear explanation of the legitimate interest forming the basis of the request, including any supporting documentation;
Confirmation that less intrusive mechanisms (such as abuse reporting, UDRP proceedings, or court actions) have been considered and are insufficient;
Identification of the specific Non-Public Registration Data elements requested;
Justification demonstrating that each requested data element is necessary and proportionate to the stated purpose;
An affirmation that the request is submitted in good faith;
An agreement to process any disclosed data lawfully and in compliance with applicable data protection laws.

Requests from law enforcement or government agencies require additional verification. Please contact whoisdisclosures@nicnames.com for details.

Means of Providing a Response

NicNames will communicate its decision regarding a Disclosure Request via email to the requestor’s specified email address.

The response may include:

disclosure of approved Non-Public Registration Data;
a reasoned denial referencing the applicable provisions of the ICANN Registration Data Policy; or
a request for additional information required to process the request.

Where appropriate, disclosed data may be provided via a secure download link or encrypted email.

Anticipated Timeline for Response

Response will be provided within fifteen (15) business days of receiving a complete Disclosure Request. Requests pertain only to current domain registrations. Historical or archived Non-Public Registration Data will not be provided. Disclosure decisions are made on a case-by-case basis following a balancing test that considers the legitimate interests of the requestor and the rights and freedoms of the data subject.

Important Guidelines:

Requests must pertain to current domain registrations only; historical or archived NPRD is not available.
Requests must include the exact domain name; partial match requests are not fulfilled.
Requests are reviewed per domain; we do not provide search results across multiple domains.
Only the following contact details may be provided: registrant, admin, or technical name and email address.

If NicNames.com determines, at its sole discretion, that you have demonstrated a legitimate interest, we will provide a WHOIS Access Agreement to sign. Upon signing, you will receive limited access to the requested NPRD.

If your legitimate interest is not established, no information will be provided.