Non-Public Registration Data (NPRD) Disclosure Policy

Applies To: All domain names registered with Ultahost

This Non-Public Registration Data (NPRD) Disclosure Policy outlines Ultahost’s procedures for managing
requests to access non-public domain registration data, including data redacted from WHOIS records in
compliance with data protection regulations (e.g., GDPR).
Ultahost is committed to protecting the privacy of its registrants while balancing the legitimate interests of
third parties, including law enforcement, intellectual property holders, and cybersecurity professionals.


What is Non-Public Registration Data (NPRD)?
NPRD includes personal information of domain registrants that is not publicly visible in WHOIS records, such
as:

  • Full name
  • Email address
  • Phone number
  • Physical address
  • Organization details (if applicable)

How to Request NPRD
To request access to NPRD, submit a formal request to:

Your request must include:

  • The specific domain name(s) in question
  • The reason for the request
  • Legal basis or legitimate interest for accessing the data
  • Supporting documentation (e.g., trademark certificate, court order, law enforcement ID)
  • Your full name, organization, and contact details

Ultahost reserves the right to verify the identity and legitimacy of the requester.

 

Who Can Request NPRD?
NPRD requests may be considered from the following parties:

  • Law enforcement agencies with jurisdiction
  • Legal representatives with evidence of a dispute or claim
  • Intellectual property rights holders investigating potential infringement
  • Cybersecurity researchers or investigators addressing abuse (e.g., phishing, malware)
  • Other parties demonstrating a legitimate interest and lawful basis under applicable regulations


How Ultahost Evaluates Requests
Each request is reviewed manually to ensure:

  • It complies with applicable laws (e.g., GDPR, local privacy regulations)
  • It demonstrates a legitimate interest under Article 6 of the GDPR or other relevant legal standards
  • The scope of requested data is proportionate and limited
  • Disclosure is necessary and cannot be achieved by other means

Ultahost may request additional information before making a determination.


Disclosure Outcomes

Following review, Ultahost may:

  • Approve the request and disclose the relevant NPRD
  • Deny the request, citing insufficient legal basis or conflict with data protection laws
  • Request more information from the requester to clarify or validate the claim

Ultahost aims to respond within 15 business days, though complex or legal cases may take longer.


Law Enforcement Requests
Requests from law enforcement are given priority and may be expedited. Law enforcement agencies should
include:

  • A formal request on official letterhead
  • Investigating officer’s name and contact details
  • Case reference number
  • Applicable legal authority or jurisdiction

Emergency disclosure requests should be sent to:

[email protected] (Monitored 24/7)


Registrant Notification
Unless prohibited by law, Ultahost will notify the domain registrant when their NPRD is requested and may
be disclosed. Registrants may have the opportunity to object, depending on the legal context of the request.


Data Protection and Confidentiality
All NPRD disclosed is treated as confidential and shared only for the specific purpose outlined in the request.
Requesters are prohibited from redistributing disclosed data or using it for unrelated purposes.


Questions or Complaints
If you have questions about this policy or believe your data was improperly accessed, please
contact: [email protected].


Policy Updates
Ultahost may update this policy from time to time to reflect changes in legal or operational
requirements. Updates will be published at www.ultahost.com and take effect upon posting.