What is WHOIS privacy?
By Ash, Founder, HosteazePublished 3 min read
The short answer
WHOIS privacy keeps your personal details, such as your name, home address, phone number and email, out of the public record that anyone can look up for a domain. Since GDPR, most registries and registrars hide this for individuals by default, so a paid privacy add-on is often unnecessary. Check what your own lookup shows first.
When you register a domain, you have to give the registrar your real contact details. For years, many of those details were published in a public directory called WHOIS, which meant a sole trader's home address could be one search away. WHOIS privacy is the fix: your details stay on file with the registrar, but the public sees a placeholder instead.
Who can see my domain details?
Anyone can look up a domain's registration record, and the tool for doing it is changing. As of 28 January 2025, ICANN no longer requires registries and registrars for generic domains (such as .shop or .online) to run WHOIS at all, except for .com, .name and .post. Its replacement is RDAP (Registration Data Access Protocol), which does the same job in a more structured way. Nominet has also declared the .uk WHOIS end of life and points people to its RDAP lookup at rdap.nominet.uk.
Most people still say "WHOIS" for both, so we do too.
What does WHOIS privacy hide?
| Detail | .uk domains (Nominet) | .com and other generic domains | With a privacy or proxy service |
|---|---|---|---|
| Your name | Hidden unless you opt in | Redacted where the law requires it; many registrars redact anyway | Replaced by the service's details |
| Postal address and phone | Hidden unless you opt in | Redacted in the same way | Replaced by the service's details |
| Email address | Hidden; requests go through Nominet's data release process | Replaced by an anonymised address or contact form | Replaced by a forwarding address |
| Registrar, dates and nameservers | Shown | Shown | Shown |
The .uk column comes from a real lookup. When we checked bbc.co.uk in October 2026, even the BBC's registrant name came back blank, with the email marked "redacted for privacy". The registrar, registration date, expiry date and nameservers were all public.
For generic domains, ICANN's Registration Data Policy (in force since 21 August 2025) says registrars must redact personal data where the law requires it, such as under UK GDPR, and may do so for other commercially reasonable reasons. You can still choose to publish your details.
Do I still need to pay for WHOIS privacy?
For most UK and EU individuals and small businesses, probably not, but don't take anyone's word for it, ours included. Check what your own record shows.
- Find your domain's lookup page. Use rdap.nominet.uk for .uk domains, or ICANN Lookup for .com and other generic domains.
- Enter your domain and run the search.
- Look at the registrant section. If your name, address, phone and email are hidden or redacted, the free default is already covering you.
- If your personal details do appear, ask your registrar to switch on its privacy option or withdraw your consent to publish.
One thing to watch: the registrant organisation field is treated differently from personal data, and ICANN's policy lets a registrar publish it if you agree. If you registered a domain in your company's name, the company name may show, which is usually fine for a business. For the other side of this, see how to find out who owns a domain.
Does WHOIS privacy stop me transferring my domain?
No. Your registrar still holds your real details, and transfer confirmations go to the contact on your account, not to the public record. The practical rule is to keep the email address on your registrar account current, because that's where codes and approvals land. Our guide to transferring a domain name covers the steps.
More plain-English guides are in Email and domains.
Frequently asked questions
Is WHOIS privacy the same as giving false details?
No, and false details are a bad idea. Registrars require accurate contact information. For .uk domains, Nominet can suspend a domain whose details look wrong and can't be validated. Privacy hides correct details from the public; it doesn't replace them.
Can someone still contact me if my details are hidden?
Usually yes. Under ICANN's rules for domains like .com, a registrar that redacts your email must offer an anonymised email address or a web form instead, so genuine enquiries can still reach you.
Can the police or a court still find out who owns my domain?
Yes. Hidden data is still held by the registrar and registry, and both have processes for releasing it to people with a legitimate reason, such as law enforcement or someone with a legal claim.
