Non-Public Registrant Data (NPRD) Disclosure Request As an ICANN-accredited registrar, Gname is contractually obligated to accept and assess third-party requests for access to non-public registration data (“NPRD”) in accordance with the ICANN Registration Data Policy (“RDP”) and applicable data protection and privacy laws. Disclosure of limited NPRD may be considered on the basis of legitimate interest, in accordance with the RDP, the Personal Data Protection Act 2012 of Singapore (“PDPA”), and other applicable privacy laws. All NPRD requests are assessed on a case-by-case basis to ensure that the legitimate interests asserted by the requestor do not override the rights and interests of the data subject. Minimum Information Required (RDP Section 10.2) To enable Gname to assess a Disclosure Request in accordance with the RDP, requestors must provide complete and accurate information, including but not limited to: the exact and active domain name concerned; a clear description of the specific non-public registration data requested; the purpose for which the data is sought; the legal basis and applicable statute or law relied upon; a factual explanation demonstrating the requestor’s legitimate interest and the necessity and proportionality of the disclosure; and any relevant supporting documentation. Incomplete requests or requests that do not provide sufficient information for assessment may be denied or result in a request for additional information. Assessment Principles Before submitting an NPRD request, you must ensure that: 1.You can demonstrate a legitimate and proportionate interest in the NPRD requested; and 2.Less-intrusive alternatives (such as public WHOIS lookup, applicable dispute resolution mechanisms, or abuse reporting) have been exhausted. Where reasonable and less-intrusive alternatives remain available, the rights and interests of the data subject will prevail over a third party’s asserted legitimate interest. How It Works 1. Submission Submit a complete request relating to a current active domain name only. Requests must specify the exact domain name and are reviewed on a per-domain basis. Bulk, partial-match, expired domain or historical data requests are not supported. 2. Acknowledgment Upon receipt of a complete request, Gname will issue a confirmation email and a case reference number acknowledging receipt of the Disclosure Request. 3. Review (Anticipated Timeline – Up to 30 Calendar Days) Gname conducts a case-by-case assessment based on the legitimate interest asserted and applicable data protection and privacy laws. Additional information may be requested where necessary to complete the assessment. 4. Outcome Approved: Limited NPRD will be disclosed strictly within the approved scope and subject to applicable data-use conditions. Denied: No data will be disclosed where the request does not meet the required threshold, including circumstances where Gname is unable to properly assess or balance the asserted legitimate interest against the rights and interests of the data subject based on the information provided. 5. Response Delivery (RDP Section 10.1(b)) All responses to Disclosure Requests, including any approved disclosures or denial decisions, will be provided via email to the email address submitted in the request form.