NIC.EC POLICIES

IMPORTANT: In accordance with ICANN requirements, REGISTRARS must send three renewal reminders and an expiration notice five days after expiration.

Domain name structure

COMMERCIAL: .ec/.com.ec/.net.ec/info.ec/tech.ec

Registration of domain names with these extensions does not require the Registrant to meet any special requirements.

The registration fee that NIC.EC charges the REGISTRAR is $30, and the renewal fee is $28

LOCAL: uio.ec, gye.ec, gal.ec, cue.ec, rio.ec,

Registration of domain names with these extensions does not require the Registrant to meet any special requirements.

The registration and renewal fee that NIC.EC charges the REGISTRAR is $15

SPECIAL: med.ec / fin.ec /edu.ec/org.ec/ k12.ec

The med.ec extension may be registered only by healthcare professionals and healthcare facilities in Ecuador, attaching the following documentation to the registration:

Healthcare professionals (physicians, dentists, psychologists, psychiatrists):

1. 1. Electronic certificate of university degree registration issued by SENESCYT,
2. 2. Identification document,
3. 3. Certificate of professional practice authorization for healthcare personnel issued by the Agency for Quality Assurance of Health Services and Prepaid Medicine (ACESS)

Healthcare facilities:

1. 1. Operating permit for public and private healthcare facilities of the National Health System, issued by the Agency for Quality Assurance of Health Services and Prepaid Medicine (ACESS),
2. 2. Electronic RUC Certificate,
3. 3. Copy of the legal representative's identification document.

The fin.ec extension may be registered only by institutions of Ecuador's Financial System, such as banks, financial companies, savings and credit cooperatives, and mutual associations. It also includes financial services and auxiliary institutions, attaching the following documentation to the registration:

Agreement or Resolution of establishment issued by the Superintendency of Banks or the Superintendency of Popular and Solidarity Economy, as applicable, 2. RUC certificate, 3. copy of the legal representative's identification document

The k12.ec extension may be registered only by early childhood educational institutions in Ecuador, attaching the following documentation to the registration:

1. Ministerial Agreement establishing the institution,
2. RUC Certificate,
3. Copy of the legal representative's identification document

The edu.ec extension may be registered only by educational institutions in Ecuador, attaching the following documentation to the registration:

1. Ministerial agreement establishing the institution,
2. RUC Certificate,
3. Copy of the legal representative's identification document

The org.ec extension may be registered by foundations and corporations (associations, clubs, committees, federations, confederations), attaching the following documentation to the registration:

1. Agreement or Resolution granting legal personality to Non-Profit Social Organizations issued by the Ministry of Economic and Social Inclusion (MIES),
2. RUC Certificate,
3. Copy of the legal representative's identification document

PROFESSIONAL: abg.ec / chef.ec /vet.ec

The abg.ec extension may be registered only by Law and Legal Studies professionals in Ecuador, attaching the following documentation to the registration:

Professionals:

1. 1. Electronic certificate of university degree registration issued by SENESCYT,
2. 2. Identification document,

The chef.ec extension may be registered only by certified Chefs, attaching the following documentation to the registration:

1. 1. Electronic certificate of university degree registration issued by SENESCYT,
2. 2. Identification document,

The vet.ec extension may be registered only by Veterinary professionals and Veterinary Clinics in Ecuador, attaching the following documentation to the registration:

Professionals:

1. Electronic certificate of university degree registration issued by SENESCYT,
2. Identification document,

Healthcare facilities:

1. Operating permit for public and private healthcare facilities of the National Health System, issued by the National Agency for Health Regulation, Control, and Surveillance (ARCSA)
2. Electronic RUC Certificate,
3. Copy of the legal representative's identification document.

RESTRICTED: gob.ec / mil.ec

The gob.ec extension may be registered only by Government entities of Ecuador, attaching the following documentation to the registration:

1. 1. Electronic RUC Certificate of the Government entity,
2. 2. Appointment letter and copy of the legal representative's identification document.

The mil.ec extension may be registered only by military entities of Ecuador, attaching the following documentation to the registration:

1. 1. Electronic RUC Certificate of the Government entity,
2. 2. Appointment letter and copy of the legal representative's identification document.

gob.ec and mil.ec domain names are managed solely and exclusively by NIC.ec, in its capacity as Registrar. Services associated with domain names may be sold by Accredited Registrars under their own responsibility.

To register a domain name, regardless of the extension, the Registrant is required to provide truthful contact information and update it if it has changed, enter into a registration agreement, and comply with NIC.EC registration policies.

The Registrar is required to inform the Registrant about these policies and ensure compliance.

1. On the rights and obligations of the parties involved in the .ec domain name registration process

1.1. Obligations of the domain name holder

1. Enter into the registration agreement,
2. Provide accurate contact data and keep it properly updated, as these shall be the data NIC.EC uses in its communications with domain name holders; any falsehood in the data provided may be grounds for cancellation of the domain name.
3. Comply with NIC.EC registration policies

1.2. Rights of the domain name holder

• To receive information from the ACCREDITED REGISTRAR regarding current rules and procedures, fees and payment methods, and the requirements established for .ec domain name registration,
• To have their personal data processed in accordance with the Organic Law on Personal Data Protection, with respect to the processing of personal data and the free circulation of such data. The REGISTRAR shall be liable for claims filed against it or NIC.EC for violations of the Personal Data Protection Law attributed to the REGISTRAR or any of its subcontractors.
• To receive ethical, transparent, and effective treatment from their REGISTRAR
• To have their REGISTRAR possess the technical and professional capacity necessary to perform its functions
• To receive from their REGISTRAR three renewal reminders and one domain name expiration notice

1.3. Obligations of NIC.EC (Registry)

• To keep the system operational and guarantee the REGISTRAR telematic access to perform its function. In case of inaccessibility, NIC.EC shall undertake all necessary actions to resolve anomalies or failures.
• To provide the REGISTRAR with a monthly account statement detailing its fund balance.
• To provide its services under transparent and non-discriminatory conditions that guarantee free competition among Registrars.
• To maintain an updated list of accredited REGISTRARS on its website www.nic.ec
• To promptly notify the REGISTRAR of changes made to registration policies issued by NIC.EC
• To provide the technical support required by the REGISTRAR
• NIC.EC shall be responsible for processing the personal data file of DOMAIN NAME HOLDERS maintained in its REGISTRY system, as the Allocation Authority, and undertakes to comply with the provisions of Ecuador's Personal Data Protection Law.

1.4. Obligations of the Registrar

• To act in accordance with applicable provisions in this area and the procedural rules established for this purpose by NIC.EC in this guide and communicated by NIC.EC
• To inform the Registrant of current rules and procedures, fees and payment methods, and the requirements established for .ec domain name registration, and obtain their informed consent
• To collect the Registrant's personal data and administrative contact data, which must be submitted to the REGISTRY (NIC.EC). In performing this function, the REGISTRAR shall be responsible for processing personal data and must comply with the provisions of Ecuador's Organic Law on Personal Data Protection.
• To warn the Registrant that they must provide accurate contact data and keep it properly updated, as these shall be the data NIC.EC uses in its communications with domain name holders; any falsehood in the data provided may be grounds for cancellation of the domain name.
• The REGISTRAR shall be obligated to comply with the Organic Law on Personal Data Protection, with respect to the processing of personal data and the free circulation of such data. The REGISTRAR shall be liable for claims filed against it or NIC.EC for violations of the Personal Data Protection Law attributed to the REGISTRAR or any of its subcontractors.
• To obtain the Registrant's execution of the registration agreement, a mandatory document that enables domain name registration
• To cooperate in the proper execution of REGISTRAR changes that domain holders may decide to carry out
• To include, in contracts maintained by the REGISTRAR with its clients, clauses relating to data protection and the exclusive liability of the REGISTRAR.
• To act loyally and ethically in the performance of its functions, cooperating with NIC.EC in the transparency, effectiveness, and proper functioning of the .EC domain name allocation system
• To possess the technical and professional capacity necessary to perform its functions
• To maintain sufficient funds to allow NIC.EC to deduct the renewal fee for the domain names it manages, in accordance with the minimum fund schedule.
• To comply with the minimum annual registration and renewal of .ec domain names
• To send the Domain Holder three renewal reminders and one expiration notice

1.5. Prohibitions for the Registrar

• May not request, directly or through third parties, domain names for the purpose of speculating with them.
• May not register in its own name domain names belonging to others that it has been asked to register in its capacity as Registrar
• Shall not process the allocation of domain names on behalf of non-existent applicants or applicants who have not previously requested the allocation.
• May not contact domain name holders whose domains are being managed by other Registrars accredited by NIC.EC to offer them the same services they receive from other Registrars.
• May not disclose information or documentation issued by NIC.EC for the development and execution of its REGISTRAR functions without prior written consent, as it is considered CONFIDENTIAL
• May not claim or use any trademark, trade name, distinctive sign, or logo of NIC.EC, except to indicate that it is an accredited REGISTRAR.

2. On domain name registration

2.1. Registration Agreement: Registration of a .ec domain name requires entering into a registration agreement with the REGISTRAR ACCREDITED by NIC.EC, which establishes: registration duration, renewal conditions, rights and responsibilities of the domain holder, dispute resolution, refund policy, domain name transfer policy, registration policies, and cost.

2.2. .ec Domain Name Registration Information

As part of the domain name registration process and in accordance with ICANN policies, the Registrant is required to provide the following "Registration Information":

• The domain registrant's name and postal address;
• The domain name being requested;
• Administrative contact information, including the name, postal address, email address, mobile phone number, and, if available, the fax number of the administrative contact for the domain,
• Technical contact information, including the name, postal address, email address, mobile phone number, and, if available, the fax number of the technical contact for the domain; and
• Billing contact information, including the name, postal address, email address, landline phone number, and, if available, the fax number of the billing contact for the domain.

2.3. Additional .ec domain name registration information

In accordance with ICANN policies, the REGISTRAR is required to submit and maintain updated, complete, and accurate additional information related to domain name registration to the REGISTRY (Ecuadordomain S.A. NIC.EC), which may include the following "Additional Registration Information":

• original creation date of the domain registration;
• date and time the registration was submitted to the Registry;
• Communications (electronic or paper) constituting registration, modification, or termination orders and related correspondence between you and us;
• Account records for the domain name registration, including dates and amounts of all payments and refunds;
• The IP addresses and names of the primary name server and any secondary name servers for the domain;
• The name, postal address, email address, and mobile phone number of the technical contact for the domain name;
• The name, postal address, email address, and mobile phone number of the administrative contact for the domain name;
• The registration expiration date

2.4. Use of registration information and additional registration information

The REGISTRAR shall make Registration Information and Additional Registration Information available to the Registry and consequently to ICANN as required or permitted by applicable laws.

ICANN and ECUADORDOMAIN S.A. NIC.EC, in its capacity as Registry, may establish guidelines, limits, and/or requirements related to the amount and type of information that the REGISTRAR must make available to the public or to private entities, and the manner in which such information is made available, for which informed authorization must be obtained from the Registrant.

2.5. Information updates and accuracy obligations

• If your information has changed, at the time of renewal the REGISTRANT must provide updated Registration Information.
• In addition, you must have the consent of any third party whose personal data you have provided as Registration Information.

2.6. Registrant verification

• The REGISTRY, directly or through the REGISTRAR, may verify the email address and/or mobile phone number of the registered Domain Name Holder whenever it deems necessary.
• Failure by the REGISTRAR to process contact information verification within 15 days of being required to do so shall result in immediate suspension of its accreditation.

2.7. Ownership of data recorded in the domain name registry database

The personal data of the Registrant and/or Domain Name Holder recorded in the .ec domain name Registry database belongs to the natural or legal person to whom it refers. Such data is submitted to the REGISTRAR and transmitted by the REGISTRAR to the REGISTRY/NIC.EC, and consequently to ICANN to form part of the public WHOIS database. It does not belong to the REGISTRAR, which is required to obtain from the Registrant, on behalf of the REGISTRY and ICANN, authorization for its use for the purpose of ensuring the management and renewal of domain names.

The REGISTRAR is responsible for processing the data, and use for a purpose other than management and/or renewal of the domain name shall be grounds for termination of its accreditation.

2.8. Registration denial

Under no circumstances shall registration of a domain name be permitted when the name:

• Consists of terms or expressions that are offensive, vulgar, affect morality or public order, or are contrary to Ecuadorian law.
• Refers to official aspects or topics of the country without proper authorization.
• Matches protocol names, applications, and Internet terminology, for example: "http", "web", "www", "ftp", "telnet", "email", etc.
• Is identical, at the same level, to an existing domain name in the nic.ec database.

3. On domain name renewal

ICANN policy requires that REGISTRARS/REGISTRAR send the domain name holder two renewal reminders approximately one month and one week before a domain name expires, without prejudice to the policy adopted by the REGISTRY.

The REGISTRAR, without prejudice to actions taken by NIC.EC, shall adequately and promptly inform domain name holders whose domains it manages of the domain name expiration date and facilitate renewal. In addition, with each renewal it shall inform them of the obligation to keep contact information updated and the conditions for processing their data.

If the Registrar does not have sufficient funds to guarantee renewal of the domain names under its management, NIC.EC shall alert it to this non-compliance so that it may remedy it immediately.

If the domain name holder did not receive two renewal reminders and a notice from their REGISTRAR (or reseller), they have the right to submit a Domain Renewal Complaint Form.

Right to file a complaint regarding renewal

The Domain Holder may file a complaint with ICANN against the REGISTRAR at the following link,

https://forms.icann.org/en/resources/compliance/complaints/renewal/form

in the following cases:

• You did not receive renewal reminders from your registrar (or reseller) approximately one month before expiration and approximately one week before expiration.
• You did not receive a notice from your registrar (or reseller) within 5 days after your domain expired.
• You renewed your domain name and it does not work.
• You were unable to redeem an expired domain name during its Redemption Grace Period.
• Your registrar or reseller does not display its renewal and redemption policies and practices.

4. On the use of domain names

Abusive use of domain names refers to the registration or use of a domain name for illegal, fraudulent, or malicious purposes that harm third parties. This abuse may take various forms, including creating domains that imitate recognized brand names (typosquatting), using domains to conduct phishing, or registering domains with the intent of selling them to their rightful owners.

Upon report of abusive use of domain names, NIC.EC shall act in accordance with the UNIFORM DOMAIN NAME DISPUTE RESOLUTION POLICY (UDRP).

NIC.EC reserves the right to monitor domain name activity to detect possible abuse.

NIC.EC may cancel or suspend a domain name upon confirmation that it is being used to host illegal content such as child pornography or extremist content, in which case it shall notify the DOMAIN HOLDER of its resolution, with a copy to their REGISTRAR.

4.1. Domain name lock

Domain names may be locked to protect them against unauthorized changes. This status may be referred to as "registrar lock" or "client transfer prohibited," which NIC.EC may apply under the following circumstances:

• Upon report of domain name abuse, and it shall remain in effect until a resolution is issued,
• At the request of the domain holder

4.2. Domain name transfer

Policy on Transfer of Registration between Registrars

1. DOMAIN NAME TRANSFER

https://www.icann.org/es/contracted-parties/accredited-registrars/resources/domain-name-transfers/policy

1. What is a domain transfer?

A domain name transfer is the process by which a Registrar requests management of a .ec domain name that it does not currently manage, in response to a request from the domain name holder.

2. How to request a domain transfer?

• The domain holder must contact their current Registrar from the email address registered as the administrative contact and request generation of a transfer authorization code (EPP), which shall be sent by the current Registrar to the domain holder's administrative contact within a maximum of twenty-four hours.
• Once this code is received, the domain holder provides it to the new Registrar to which they wish to transfer management of the domain name, and the new Registrar initiates the transfer process.
• Once the process is initiated by the Registrar, NIC.EC shall send the domain holder's administrative contact an email notification containing a link to accept or deny the transfer.
• If the request is accepted, the domain name transfer shall be completed successfully and the domain holder's administrative contact and the Registrars (former and current) shall receive a confirmation email.
• If the administrative contact has taken no action on the request within 4 days of receiving the link to accept or deny the domain name transfer request, the request shall be automatically cancelled by the system and the domain name shall remain in the same state it was in before the transfer request was initiated.

3. TRANSFER PROCESS IN THE REGISTRY

This is performed by the Registrar to whom management of the domain name is to be transferred. The Registrar that has received the EPP code from the domain holder must log into its account in the Registry system, go to the "TRANSFER" section, enter the domain name, the character ","; and the EPP code. Example:

The system shall automatically send an email to the domain holder's administrative contact to confirm the transfer. Once the domain holder accepts the transfer, the domain name shall be transferred automatically; and the Registrar shall receive an email confirming that the domain name has been transferred for its management. If the domain holder does not accept the transfer and has taken no action on the request within 4 days of receiving the link to accept or deny the domain name transfer request, the request shall be automatically cancelled by the system and the domain name shall remain in the same state it was in before the transfer request was initiated.

IMPORTANT and MANDATORY

1. The domain name is transferred with the same validity period with which it was originally registered.
2. If an expired domain is transferred, the new Registrar must process its renewal immediately.
3. If, 24 hours after the transfer request, the current Registrar has not generated the EPP transfer code, the domain holder must request it from NIC.ec at jefesistemas@nic.ec, and it shall be sent immediately to their administrative contact. Failure by the Registrar to comply with this obligation three times shall be grounds for termination of the Registrar agreement.
4. Despite the transfer request having been archived, the domain name holder may request a new transfer as many times as required.
5. The transfer has no cost for the Registrar or for the domain holder.
6. If the domain name transfer gives rise to controversy or dispute between two or more Registrars, NIC.ec shall make available to the domain name holder the option to transfer the domain name to NIC.ec's Registrar for management by NIC.ec.

4.3. Deletion of a domain name

The Domain Name Holder has the right to request deletion at any point in its life cycle while it remains active. The request must be made in writing from the email address of the domain holder's contact, stating that they are aware that once deleted it may immediately become available for registration by another person.

Policy created by WIPO and adopted by ICANN in 1999 to resolve disputes between domain name holders and trademark holders regarding the registration and abusive use of domain names on the Internet. Consult the WIPO guide on the UDRP.

1. INTRODUCTION

NIC.ec, operated by ECUADORDOMAIN S.A., in its capacity as data controller, issues this Privacy Policy to govern the collection, use, retention, and transfer of personal data obtained through its web portal, digital forms, services related to ".ec" domain name registration, as well as hosting services, website development, corporate email accounts, and landing pages. This policy complies with Ecuador's Organic Law on Personal Data Protection and its Regulations, and aligns with international standards ISO/IEC 27001 and ISO/IEC 27701.

2. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

• Data controller: NIC.ec (ECUADORDOMAIN S.A.)
• RUC: 1792837626001
• Address: Repúblicas del salvador y, Suiza N34-127, Quito
• Email: atencionalciente@nic.ec

3. PURPOSES OF PROCESSING

Personal data collected shall be processed for the following purposes:

• Registration, administration, and renewal of ".ec" domain names.
• Provision of hosting, corporate email, and web design services.
• Creation and maintenance of customized landing pages.
• Network security, infrastructure, and access monitoring.
• Billing, collections, technical support, and contractual notifications.
• Compliance with legal and regulatory obligations.
• Promotion of own services, with the data subject's consent.

4. PERSONAL DATA COLLECTED

Among others, NIC.ec may collect the following personal data:

• User's first and last names
• Identification number (national ID or passport)
• Physical and email address
• Contact phone numbers
• Technical service data (IP, logs, DNS configuration)
• Hosted content and email activity
• Administrative, technical, and billing data

5. LEGAL BASIS FOR PROCESSING

Processing of personal data is based on:

• Performance of a contract (provision of Hosting services)
• Informed consent of the data subject
• Compliance with legal obligations
• Legitimate interest of the controller to ensure the security, continuity, and traceability of its services.

6. TRANSFERS AND RECIPIENTS

Data may be transferred to:

• Technology providers (data processors).
• Judicial or administrative authorities, when applicable.
• Authorized strategic partners under secure contractual clauses.

International transfers shall comply with Ecuadorian legislation and international data protection standards.

7. RIGHTS OF THE DATA SUBJECT

Data subjects may exercise their rights of:

• Access to their personal data.
• Rectification and updating.
• Erasure (when there is no legal or contractual obligation to retain the data).
• Objection to processing.
• Portability.
• Suspension of processing.
• Withdrawal of consent.

Rights may be exercised by written request addressed to: atencionalcliente@nic.ec

8. RETENTION PERIOD

Personal data shall be retained:

• While the contracted services remain in effect
• For up to 7 years thereafter to comply with legal, tax, or regulatory obligations.
• For longer when disputes or pending administrative or judicial proceedings exist.
• When a regulation provides for a period longer than that stated herein

9. SECURITY MEASURES

NIC.ec applies technical and organizational protection measures, in accordance with applicable standards including:

• Encryption and access control.
• Access control backup
• Logging of events and traceability of actions.
• Enhanced authentication mechanisms.
• Internal audits and periodic controls.
• Vulnerability testing and operational continuity plans.

10. COOKIES AND TRACKING TECHNOLOGIES

The website www.nic.ec uses technical and analytics cookies. Users may configure their browser to restrict the use of cookies, although this may affect site functionality.

11. PUBLICATION AND UPDATES

This policy shall be published at https://nic.ec/politicas.php and may be updated in accordance with regulatory or technical changes. Users shall be informed of material changes.

12. INFORMED CONSENT

By accepting the hosting services contract and other supplementary services or by using the NIC.ec platform, you declare that you have read, understood, and accepted this privacy policy, authorizing the processing of your personal data under the terms set forth herein. The foregoing is without prejudice to collection of your informed consent in physical or digital form.

Policy implemented by ICANN that provides a legal framework for resolving disputes that may arise between REGISTRARS in the transfer of a domain name. Consult the TDRP on the ICANN website.

Filing of the Claim: the REGISTRAR that considers itself affected may initiate a process before the REGISTRY under the TDRP, submitting its claim to which it must attach any evidence it deems relevant. Consult the TDRP policy on the ICANN website.

Dispute Resolution: The REGISTRY shall notify the other REGISTRAR of the claim, notifying them at the email address registered as contact, so that they may respond within 48 hours, attaching any evidence they deem relevant.

Upon receipt of the response, it shall issue and notify its resolution within 48 hours.

Compliance with the Resolution: REGISTRARS are obligated to comply with the resolution; failure to do so shall be grounds for withdrawal of accreditation.

Three-character domain names require prior authorization for registration, as they are limited combinations that may coincide with acronyms, abbreviations, or identifiers of public institutions, official bodies, recognized entities, or designations of special interest.

The interested party must send the domain name they wish to register to gerenciaoperaciones@nic.ec.

ECUADORDOMAIN S.A. – NIC.EC will verify that the domain name is available and that it is not registered, reserved, blocked, restricted, or related to acronyms of public institutions or official bodies.

If the registration request is accepted, NIC.EC will temporarily enable the domain name on the website so the user can complete the registration process. These domain names are subject to a special fee, which will be shown on the website before purchase is completed.

When the request is handled by a Registrar, the Registrar must send the domain name they wish to register to gerenciaoperaciones@nic.ec. Once NIC.EC verifies availability, it will request the domain name holder’s information in order to proceed with registration and the applicable fee.

The request and the temporary enablement do not constitute a reservation. Registration is confirmed only when the user or the Registrar correctly completes the process.

Requests made by telephone, WhatsApp, social media, or other channels will not be processed and must be sent to the email address indicated above.