WHOIS privacy: what it hides and when you need it
WHOIS privacy hides your name, address, phone and email from the public record of a domain and shows a service's details instead. For .com-style domains, much personal data is already redacted by default, so you may not need to pay for it. For .pk and .com.pk, PKNIC runs its own public WHOIS search, so plan on your details being visible and check PKNIC's current rules before you register.
What WHOIS and RDAP actually show
Every domain has a registration record. It says who holds the name, which registrar or registry manages it, when it was created and when it expires. It can also list contact details for the owner and for technical and billing contacts.
WHOIS is the older way to look this up. RDAP is the newer one. ICANN describes RDAP as the main source of gTLD registration data in place of the retired WHOIS services since 28 January 2025. RDAP is a new way to reach the data, not different data.
So when someone says 'check the WHOIS', they usually mean any public lookup of the registration record.
What GDPR changed for .com, .net and other gTLDs
Before 2018, a lookup on a .com name often showed the owner's full name, home address, phone number and email. That made it easy to spam or find people.
ICANN's Board adopted a Temporary Specification on 17 May 2018, effective 25 May 2018. It was written so that registrars and registries could follow Europe's GDPR. Under it, fields such as the registrant's name, street, city, postal code and phone are redacted unless the holder agrees to publish them. Email addresses are not shown either; a contact web form or an anonymised address is used.
People with a legitimate interest can still ask the registrar or registry for the hidden data. So the data is stored. It is just not shown to everyone.
What a registrar privacy service adds
A privacy service is an extra product some registrars sell or include. It replaces your details in the public record with the service's own details. Mail and enquiries are then forwarded to you.
After GDPR redaction, the gap between 'with' and 'without' privacy is smaller for gTLDs than it used to be. Rules vary by registrar, so read what your registrar actually hides and what it charges. Do not assume you must pay.
Privacy does not change who legally owns the domain. It also does not stop the registrar, the registry or a court from knowing who you are. It only limits what random visitors can read.
- Hides: public view of name, address, phone, email
- Does not hide: that the domain exists, its dates, its name servers
- Does not change: legal ownership
How .pk and .com.pk differ
Country extensions set their own rules. They are not bound by the gTLD policy above. PKNIC, which runs .pk, offers a public WHOIS search tool on its site and tells holders to keep their contact details current.
We could not find a privacy option described on PKNIC's public site. So treat anything you give for a .pk or .com.pk registration as something that may be visible. Use a business email and phone number you are happy to show, not a personal one.
Two more points. PKNIC fixes the registrant name at registration. The minimum term is two years. So choose the right name for the holder before you file, because it is not a detail to fix later.
When you need it, and when you do not
You probably want privacy if you register a .com or similar name in your own name from home, and your registrar does not already hide your details. A freelancer working from a family address is a clear case.
You probably do not need to pay if the registrar already redacts by default, or if you want customers to see a real company name. Some buyers like that.
For .pk names, privacy is not the main tool. Instead, keep a shared business email, use a business address, and register in the true owner's name. That also helps in a dispute, because the record matches who you are.
- Home-based freelancer on .com: check what is already hidden
- Registered company: showing it can build trust
- Any .pk: assume details may be public
How we handle this at SastiDomains
We are a small Pakistani company. We run a marketplace where owners sell existing domains, with payment held in escrow, and a registration service that checks availability live and registers new names in your own name through PKNIC or a registrar. We are not a registrar and we are not connected to PKNIC or ICANN.
If you plan a .pk name, see /pk-domain/ and /register-pk-domain/ first. PKNIC's fee is Rs 2,100 per year for Pakistan-based registrants from 1 August 2026, and USD 15.99 per year for overseas ones. For a .com, see /com-domain/. To compare extensions, read /pk-vs-com-pk-vs-com/ or search at /domains/.
Tell us on WhatsApp which contact details you want on the record, before we file.
Common questions
Is WHOIS privacy free?
It depends on the registrar. Some include it and some charge a yearly fee. Since much gTLD personal data is now redacted by default, check what your registrar already hides before you pay.
Can I hide my details on a .pk domain?
We could not find a privacy option on PKNIC's public site, and PKNIC runs a public WHOIS search. Assume details may be visible and use a business email and phone number.
What is the difference between WHOIS and RDAP?
Both are ways to look up a domain's registration record. RDAP is the newer one and is now the main source for gTLD data. It reads the same stored data.
Does privacy mean I am not the owner?
No. Privacy only changes what the public sees. The registrar and registry still hold your real details, and you stay the legal holder.
Which name goes on a .pk registration with SastiDomains?
We register new domains in your own name. PKNIC fixes the registrant name at registration, so tell us the correct holder before we file.