Non-public registrant data (NPRD) request policy

For privacy reasons, personal information contained in registration data is no longer displayed in our public RDAP (previous WHOIS). However, as an ICANN accredited registrar, Hostinger is required to provide a process for third parties to request access to non-public registration data ("NPRD"). This NPRD request policy (“Policy”) sets forth the general guidelines for submitting such requests based on demonstrated  legitimate interest ("Legitimate Interest"). This Policy fully respects and protects the  fundamental interests, rights and freedoms of data subjects, in line with the General Data Protection Regulation ("GDPR") or other applicable privacy laws. 

This Policy is established in accordance with the ICANN Registration Data Policy, accessible here.

A Disclosure Request for  NPRD should be considered only when other avenues are not sufficient,given the potential impact to the data subject’s privacy.

Key Considerations:

• Legitimate Interest. You must demonstrate Legitimate Interest in the NPRD  being requested. This must be done in a manner that does not jeopardize the fundamental interests, rights and freedoms of the relevant data subject, in line with the GDPR or other applicable privacy laws. To establish Legitimate Interest, you should conduct a three-part balancing test ("Legitimate Interest Assessment" or "LIA") and submit your results for review by Hostinger.
• Data Protection. You must demonstrate that you have implemented appropriate technical and organizational measures to ensure that any NPRD received through this process will be performed in a manner compliant with GDPR or other applicable privacy laws. Additionally, Hostinger, at its discretion, but at your expense, may require an audit of your data processing practices to ensure such practices comply with GDPR or other applicable privacy laws.
• Data Handling of NPRD. You will be responsible for properly disposing of the NPRD within 30 days of receipt or when you can no longer rely on Legitimate Interest as the lawful basis of processing NPRD; whichever is sooner.

How to submit a request for NPRD

• Requests for disclosure of NPRD (“Disclosure Requests” or “Requests”) may be submitted via email to: RDDS@hostinger.com.
• Required Format and Content. Disclosure Requests must include:
  • Identity of the requestor
    • Contact details (full name, address, email, phone number).
    • Nature/type of entity (e.g., law enforcement, attorney, IP rights holder, private individual).
    • Proof of authorization (e.g., Power of Attorney or similar, if applicable).
  • Data requested - list of data element values.
  • Legal rights & rationale - explanation of the legal rights relied upon and justification for disclosure.
  • Good faith affirmation - statement that the request is made in good faith.
  • Lawful processing agreement – confirmation that any disclosed data will be processed in accordance with GDPR or other applicable law.

Requests missing required elements will not be processed until corrected.

• Acknowledgement and timeline. A substantive response will be provided within thirty (30) calendar days from the date of acknowledgement, unless exceptional circumstances require additional time.
  • Requests must only be for current domain registrations. We do not provide historical or archived NPRD through this process.
  • Requests must include the exact domain name under review. We do not fulfill partial match requests through this process.
  • Requests are reviewed and fulfilled on a per-domain basis. We do not provide search results across multiple related domains or NPRD using this process.
  • We will not provide any additional contact details aside from the following: registrant, admin or tech name and email address.
• If Hostinger concludes, at its sole discretion, that you have demonstrated a Legitimate Interest for the NPRD requested, we will provide you limited access to the requested NPRD.
  • If we conclude you have not demonstrated a Legitimate Interest to NPRD, no information will be provided.