What data PanamaRegistrar holds about you, item by item

Why do you need an email address at all?

Because ICANN rules require the registrant's contact to be verified within 15 days of a registration, a transfer or a change. Our accredited registrar partner applies that rule to every domain, so the email is required. A domain whose email is not confirmed in time can be suspended until it is.

The email has three other uses. It receives renewal notices. It receives every complaint about the domain, before any action on your domain, unless the law or the court order forbids it. And messages sent to the public privacy contact are forwarded to your verified email; spam and bulk mail are not forwarded.

The email is never published in WHOIS/RDAP. You can use a different address for each domain. It is the only contact data we collect: see no-KYC domain registration.

What does a crypto payment reveal?

We keep the amount, the coin and the network of each top-up, and nothing that identifies a person.

We do not ask for your wallet addresses and do not keep a book of them. A blockchain is public by design, though. Anyone who knows a transaction can see its amount and the addresses involved, on the chain itself. That is a property of the coin, not of our records.

Coins accepted: BTC, USDT, USDC, ETH, SOL, LTC. Minimum top-up: $25. Prices per extension are on the pricing page.

Who else keeps a copy of my data?

Four parties besides us can hold registration data, each under its own rules.

• Our registrar partner. Domains are registered through our ICANN-accredited registrar partner, shown in the RDAP record of each domain. It keeps the registration record and its own legal duties and abuse contact, and it answers to the courts of its own country.
• The escrow agent. Every accredited registrar, our partner included, deposits registration data of generic domains with an escrow agent approved by ICANN. The deposit lets another registrar take over the domains if a registrar stops operating.
• The registry. Each registry keeps the registration under the law of its own country. Thick registries such as .org (Public Interest Registry, United States) or .io (Identity Digital) hold the registrant record. The .com and .net registries (Verisign, United States) are thin: they receive no registrant contact data. The registry jurisdiction index lists every country.
• Our hosting provider. Our own records sit on servers we rent; we do not name the provider. The authorities of the country where those servers are can act on that provider under its own law, without going through us.

ICANN can also audit our registrar partner under the Registrar Accreditation Agreement. With Domain protection (+$29 per year and per domain), the registry holds our company's details instead of yours, and the only item about you behind the registration is the verified email.

Who can make you hand over my data?

Our rule fits in one sentence: We release the data we hold only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case.

In detail, the routes are:

1. a Panamanian court order;
2. a prosecutor's order: a Ministerio Público preservation or production order under arts. 338-A and 338-C of the Code of Criminal Procedure, added by Law 478 of 2025;
3. a UDRP or URS provider, which receives the registrant details of record for the disputed domain.

Foreign courts, police forces, lawyers and companies go through Panamanian legal process first. Article 24 of Law 81 of 2019 obliges us to answer competent judicial authorities, and it never admits bulk requests. Your messages to us are private correspondence too. Article 29 of the Constitution lets private documents be examined or retained only by order of a competent authority. Our rule: we confirm every order with the court or prosecutor's office that issued it, through its official contact details, before acting. Details: data disclosure.

How long do you keep my data?

As long as the domain is registered with us, and for the period ICANN rules require after that.

• Email and domain records: while the domain is with us, then for the period set by ICANN rules.
• Complaints, orders and our answers: as long as the decision they relate to can be challenged, so that the procedure can be checked.
• Support messages that concern no complaint or order: deleted when they are no longer needed for the service.

These periods are those of our privacy policy. Panama's telecom data-retention law, Law 51 of 2009, sets six months for telephony operators, internet cafés and similar providers. It does not name domain registrars.

What are my rights over this data?

Article 42 of the Constitution of Panama gives you the right to access, correct, protect and delete your personal data. It also says personal data may be collected only with your consent or by order of a competent authority.

Law 81 of 2019, in force since 29 March 2021, organises these rights. The national transparency authority, ANTAI, decides when data is inaccurate (art. 17), hears complaints (art. 18) and imposes sanctions (art. 36). Article 44 of the Constitution adds the habeas data action before the courts. It covers private registers of businesses that serve the public.

To use these rights, write to [email protected] from the verified email of the domain. Data that ICANN rules oblige us to keep for a set period cannot be deleted before it ends. An active domain always needs one verified email.