WHOIS and Privacy: What Every .eu Domain Owner Should Know

When we first registered a .eu domain, we were surprised by how much of our personal data was publicly visible — until GDPR changed everything. Before May 2018, anyone with an internet connection could look up a .eu domain and see the registrant’s full name, postal address, phone number and email address. For small business owners and individuals alike, that felt like leaving a business card taped to a lamppost. Today the picture is very different, but the details still matter — especially for UK-based owners of .eu domains. In this guide, we walk through how WHOIS works for .eu, what EURid now publishes, and how to check and manage your own record.

What Is WHOIS and Why Does It Matter for .eu Domains?

WHOIS is a public directory that lists who owns or controls a domain name. When you query a WHOIS database, you typically see the registrar, key dates (creation, expiry, last update), name servers and — historically — the registrant’s contact details. It exists so that people with a legitimate interest, such as trademark holders, security researchers or law enforcement, can identify who is responsible for a domain.

For .eu domains, the registry is EURid, a not-for-profit organisation based in Brussels that operates under a contract with the European Commission. EURid runs its own WHOIS service at whois.eurid.eu, and it is the authoritative source for .eu registration data. Anyone can query it, which is exactly why privacy concerns arise in the first place.

How WHOIS Works for .eu Registrations

The chain works like this: you register a .eu domain through an accredited registrar (Namecheap, Gandi, IONOS and GoDaddy are common choices), the registrar passes your data to EURid, and EURid stores it in the central registry. When someone runs a WHOIS lookup, EURid returns the information it holds. Registrars may also run their own WHOIS service, but for .eu the registry record is the one that counts.

The Difference Between Thick and Thin WHOIS

Registries operate either a “thick” or “thin” WHOIS model. A thin registry (like .com historically) stores only basic technical data and pushes registrant details back to the registrar. A thick registry stores the full set of registrant contact data centrally. .eu is a thick registry, which means EURid itself holds your name, address and contact details — not just your registrar. That centralisation is why GDPR compliance at the registry level mattered so much for .eu owners.

GDPR and the Big WHOIS Privacy Shift

When the EU’s General Data Protection Regulation came into force on 25 May 2018, it upended the WHOIS landscape overnight. Publishing a private individual’s name, home address and phone number to the entire internet, without a clear legal basis, was no longer defensible. Registries and registrars across Europe scrambled to comply, and EURid was among the first to act.

In the UK, the Information Commissioner’s Office (ICO) is the data protection authority that enforces GDPR-equivalent rules under the UK GDPR. Even though the UK left the EU, UK registrants dealing with an EU registry like EURid still benefit from the redaction EURid applies, because the data processing happens within the EU.

What EURid Now Shows (and Hides)

Run a WHOIS query on a typical .eu domain today and you will see:

• The domain name, registrar and registration/expiry dates
• Name servers and domain status codes
• “Not disclosed” or similar placeholders where the registrant’s name, address, phone and email used to appear
• A contact form or web-based channel for legitimate parties to request the underlying data

In other words, GDPR forced EURid to redact personal data from public WHOIS output. Technical data stays public; personal data does not.

How UK Registrants Are Affected Post-Brexit

Brexit created a wrinkle: since 1 January 2021, UK individuals and businesses can still register .eu domains, but they must meet eligibility criteria — generally, you need to be an EU citizen, or a business or organisation established in the EU, Iceland, Liechtenstein or Norway. Many UK owners hold .eu domains registered before Brexit, or register through an EU-based entity. Either way, the WHOIS redaction EURid applies still covers them, because the registry’s GDPR obligations attach to the data it holds, not the nationality of the registrant.

WHOIS Privacy vs. Proxy Services: What You Can Do

There are two distinct tools people confuse: WHOIS privacy (redaction performed by the registry or registrar) and WHOIS proxy services (a third party’s details are published in place of yours). With .eu, EURid already redacts most personal data, so a proxy is often redundant.

When You Might Still Need a Proxy

Registrars like Namecheap and Gandi offer optional WHOIS proxy services. You might consider one if:

1. You are registering as a business and want to hide a trading address from competitors.
2. You operate in a sensitive sector (activism, journalism, certain e-commerce niches) and want an extra layer between your name and the domain.
3. You hold the domain on behalf of a client and prefer not to expose your own details.

Free vs. Paid Privacy Options

EURid’s redaction is free and automatic. Registrar-level privacy is often bundled free with registration (Namecheap includes it on most TLDs) or sold as an add-on for a few pounds a year (Gandi charges for some privacy products). Given that .eu already hides registrant data by default, paying extra is usually unnecessary for individuals. Businesses with a specific reason to mask their identity may still find value in a proxy.

How to Check and Manage Your .eu WHOIS Data

Even with redaction, the data EURid holds must be accurate. Wrong details can lead to suspension under EURid’s terms and conditions, and they can complicate a transfer or renewal.

Step-by-Step: Using EURid’s WHOIS Tool

1. Go to whois.eurid.eu (or use the lookup linked from eurid.eu).
2. Enter your .eu domain name and complete the captcha.
3. Review the output: registrar, dates, status codes and any published contact channel.
4. If you need to see the redacted registrant data, use the contact form shown in the record — you will need a legitimate reason.

Updating Your Contact Information Safely

Log into your registrar’s control panel (Namecheap, Gandi, IONOS etc.) and edit the registrant contact there. The registrar will push the update to EURid. Expect the change to appear in WHOIS within a few hours. Keep the email address current — that is how renewal reminders and verification requests reach you.

Common Myths and Mistakes Around .eu WHOIS Privacy

We hear the same misconceptions repeatedly from clients. Here are the ones worth correcting.

Myth: Privacy Equals Anonymity

Redaction is not a cloak of invisibility. Law enforcement, courts and regulators such as the ICO can still obtain the underlying data through proper legal channels. EURid publishes a request process precisely for that purpose. If you are running a scam behind a redacted .eu, GDPR will not save you.

Mistake: Ignoring WHOIS Accuracy Requirements

The other common error is letting registrant details go stale — an old address, a dead email, a misspelled company name. EURid’s terms require accurate data, and registrars periodically run verification checks. Fail them, and your domain can be suspended. It is a boring admin task, but it protects your domain.

Our Team’s Verdict: Balancing Transparency and Privacy

For most UK-based .eu owners, EURid’s built-in GDPR redaction is enough. The registry already hides your name, address, phone and email from public view, so paying a registrar for an additional proxy is usually overkill — unless you have a specific commercial or personal reason to mask a business address. Our recommendation is simple: check your WHOIS record after every registration or renewal, make sure the data EURid holds is accurate, and skip the paid privacy add-on unless you genuinely need it. Transparency for technical data plus redaction for personal data is a sensible balance, and it is the one .eu has landed on.

WHOIS privacy for .eu domains has improved dramatically under GDPR, but it is not set-and-forget. UK owners should still review their public record regularly, understand exactly what EURid exposes, and keep their registrant details current. Do that, and you get the privacy protection without the unnecessary cost.

FAQ

Is my personal data visible in .eu WHOIS lookups?

No. Since GDPR came into force, EURid redacts registrant names, addresses, phone numbers and email addresses from public WHOIS output. You will see technical data such as the registrar, dates and name servers, but not personal contact details.

Do I need to buy WHOIS privacy for a .eu domain?

For most individuals, no. EURid already hides your personal data by default. A paid proxy from a registrar like Namecheap or Gandi only makes sense if you have a specific reason to mask a business address or add an extra layer of separation.

Can UK residents still register .eu domains after Brexit?

Yes, but eligibility rules apply. UK individuals and businesses must generally be EU citizens or have an establishment in the EU, Iceland, Liechtenstein or Norway. Domains registered before Brexit are typically grandfathered, but new registrations need to meet the criteria.

Can law enforcement still access my redacted WHOIS data?

Yes. Redaction is not anonymity. Courts, police and regulators such as the ICO can request the underlying data through EURid’s formal disclosure process, provided they have a legitimate legal basis.

How often should I check my .eu WHOIS record?

We recommend checking after every registration, renewal or contact detail change. Inaccurate data can lead to domain suspension under EURid’s terms, so a quick annual review is a sensible habit.