Skip to content

Understanding Contacts, Handles & Ownership

Every domain carries a small cast of contacts — the people or organisations behind it — and getting that model right on the first attempt saves a great deal of rework later. Contacts are one of the most common onboarding stumbling blocks: it is easy to treat them as an afterthought, then hit a registry validation error at registration time and have to refactor. This guide walks you through how CentralNic Reseller thinks about contacts so you can design your data model once and trust it.

The core idea is simple. A contact is a reusable object with its own ID — a handle — that you create once and then attach to as many domains as you like. A domain does not store contact details directly; it references handles for each role it needs. Understand handles, and everything else falls into place.

Every domain registration recognises four contact roles. Whether a given TLD requires all four or just the registrant, the roles always mean the same thing:

RoleCentralNic Reseller termWhat it represents
RegistrantOwnerThe legal holder of the domain — the person or organisation that owns it. This is the contact that carries legal weight.
AdministrativeAdminThe person authorised to manage the domain and make decisions about it on the registrant’s behalf.
TechnicalTechThe contact responsible for the technical operation — DNS, nameservers and the like.
BillingBillingThe contact responsible for payment and renewal matters.

Of the four, the registrant/owner is special. The admin, tech and billing contacts can be updated with an ordinary contact change. The registrant cannot: changing who owns a domain is a distinct operation — an owner change (often called a trade) — because it transfers legal control. Depending on the TLD it can involve a confirmation exchange, and sometimes a fee or identity documents. Model the registrant with that in mind from the start. See ICANN Owner Change for how the process works across gTLDs.

CentralNic Reseller stores each contact as a first-class object identified by a handle — its contact ID. You create the contact once, the system returns a handle, and from then on you reference that handle from any domain that needs it. A single handle can serve as Owner, Admin, Tech and Billing all at once, or you can assign a different handle to each role.

When you supply the data for a natural person — a first, (optional) middle and last name together with address details — the system creates a P-Handle in the form P-WWW####, where each W is an uppercase letter (A–Z) and each # is a digit (0–9), for example P-ABC123. This is the kind of handle you want.

To use the same handle for every role you simply reference it four times. To use different handles per role, create each contact separately (one per handle) first, then reference them. Full guidance and the related API commands are on the Managing Contacts page; over EPP the same objects are created and referenced as described in the EPP integration guide.

Reuse an Existing Handle, or Create a New One?

Section titled “Reuse an Existing Handle, or Create a New One?”

This is the decision that trips people up. Because a handle is a shared object, reusing one propagates: update a reused handle and the change reaches every domain and every role it is attached to. That is a feature when the contacts are genuinely the same, and a hazard when they are not.

Use this to decide:

  1. Same real-world entity, many domains? Reuse one handle. A single registrant who owns a hundred domains should be one handle referenced a hundred times — one place to keep the address current, and one contact that stays LINKED (see the caution below).

  2. Same entity, all four roles on one domain? Reuse one handle across the roles unless the TLD needs them to differ. Fewer objects, less to maintain.

  3. Different real people or organisations? Create separate handles. Never share a handle between two entities just to save a step — a later update to one would silently rewrite the other, and disentangling them after the fact is painful.

  4. A one-off or short-lived contact? A new handle is fine, but know that unused handles do not linger forever (see below).

GDPR: What You Collect Versus What Is Published

Section titled “GDPR: What You Collect Versus What Is Published”

Here is the distinction that matters most, because the two things are separate:

  • What you collect — CentralNic Reseller still needs full, accurate contact data. That obligation has not gone away under GDPR: the data is required for our own legitimate business purposes and for the data controllers we work under, such as ICANN and the registries. Always provide complete, correct details.
  • What is published — by default we do not disclose personal data in WHOIS. Contact fields transmitted to registries and returned by our WHOIS server are redacted or replaced (for example with REDACTED FOR PRIVACY), and the contact email is replaced with a generic address so people can still make contact through domain-contact.org.

In other words: collect everything, publish nothing by default. The background, benefits and scope of this are on the General Data Protection Regulation page, and the exact field-by-field behaviour — thick versus thin registries, which fields are redacted and which are replaced — is in Reduced publication and transmission of WHOIS data.

WHOIS itself is part of ICANN’s broader Registration Directory Services (RDS) framework, which governs registrant, administrative, technical and billing contact data for gTLDs — background is on the Registration Directory Services page, and you can shape your own output as described in Customise your WHOIS output.

The four roles are universal, but the data each TLD demands is not. What one registry accepts, another rejects — and these rules are TLD-dependent, so always check the requirements of the specific TLD before you build. A few patterns to plan for:

  • Extra fields for certain TLDs. Some registries require additional contact data beyond the standard set — for instance a state/province, a national identifier or PIN, or personal details such as a birth date or city. These are supplied as registry-specific parameters. The EPP integration guide shows how such fields are passed (for example a France or Italy extension), and the per-TLD pages state exactly what each registry expects.
  • Contact verification. Many gTLDs require the registrant’s email to be verified after registration, or the domain risks suspension. Plan for the verification flow rather than being surprised by it — see Contact Verification.
  • Keep the organisation field empty for private individuals. For a private person, leave the organisation field blank. Do not enter placeholder text such as “private” or “none”: some registries treat the organisation field as the registrant’s identity, so bogus data can end up published in WHOIS or, worse, cause the registry to suspend or delete the domain for invalid data.

You now have the mental model: reusable handles, four roles, a special registrant, and data you always collect but rarely publish. Put it to work: