Quick answer
What personal data does PanamaRegistrar hold?
PanamaRegistrar holds one verified email per domain, the only contact data it collects, plus the account number we generate, your domains and your balance. No ID document. We release the data we hold only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. Panamanian law applies; version of 19 October 2026.
1. Controller
The controller is DomaineGoat LLC, incorporated in Panama, operator of PanamaRegistrar. Contact for any privacy question or request: [email protected].
2. What we hold, and why
- One email address per domain, which you confirm. It is required and it is the only contact data we collect. Purpose: ICANN rules require the registrant's contact to be verified within 15 days; we also use it for renewal notices, complaint notices and messages relayed from the public privacy contact.
- An account number that we generate at random, to identify your account.
- Your domains, their DNS settings and your balance, to provide the service.
- Payment records: the amount, the coin and the network of each top-up, as needed to credit your balance and keep accounts.
- Messages you send to support or abuse addresses, and complaints or orders received about your domains, kept as the written record of our procedure.
We do not ask for your name, postal address, phone number or an identity document. Where a registry requires a name and postal address, the domain is registered with Domain protection and the registry receives the details of DomaineGoat LLC.
3. Who receives data
- Our accredited registrar partner, shown in the RDAP record of each domain, through which domains are registered. It keeps the registration record under its own rules, its own legal duties and its own abuse contact.
- The registry of each extension receives the registration data that its policy requires: the registrant record built from your verified email (or our privacy contact where the extension allows it), and the details of our company with Domain protection. The .com and .net registries are thin and receive no registrant contact data. Each registry keeps its own copy under the law of its own country; the countries are listed in the registry jurisdiction index.
- The ICANN-approved data escrow agent receives from our registrar partner a copy of the registration data of generic top-level domains, so that domains can be moved to another registrar if a registrar ceases to operate. ICANN can audit our registrar partner.
- A dispute provider (UDRP or URS) receives the registrant details of the disputed domain.
- A Panamanian court or prosecutor (Ministerio Público), on an order. We release the data we hold only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. Foreign courts and authorities go through Panamanian legal process first. Bulk requests are never admitted (Law 81 of 2019, art. 24).
We do not sell data, rent it, or share it for advertising. The site has no advertising trackers.
4. How long we keep it
Your email and domain records are kept while the domain is registered with us and for the period ICANN rules require after that. Records of complaints, orders and our answers are kept as long as the decision they relate to can be challenged, so that the procedure can be checked. Support messages that do not concern a complaint or an order are deleted when they are no longer needed for the service.
5. Your rights
Article 42 of the Constitution of Panama gives everyone the right to access, correct, protect and delete their personal data, and Law 81 of 2019 on personal data protection (in force since 29 March 2021) organises these rights under the supervision of the national transparency authority, ANTAI. Article 44 adds the habeas data action before the courts. Ask at [email protected] from the verified email of the domain. Data that ICANN rules oblige us to keep for a set period cannot be deleted before the end of it. The Panama domain law page cites each text with its official source.
6. Security
Access to customer records is limited to the staff who handle support, abuse and legal requests. Account changes, transfers and DNS changes on domains with Domain protection must be confirmed from the account. We never ask for your password, your account number or transfer codes by email or chat.
7. Changes
A new version of this policy is published on this page with its date. A change that widens who can obtain your data is announced by email to every customer at least 30 days before it applies.