At all times, Registrar shall maintain a privacy policy on its website that is compliant with all applicable national, regional (e.g. European Union) and international laws, rules, regulations, ordinances and decrees stating the manner in which any Personal Data of or other information regarding Registrants will be collected, stored, used, marketed and/or disclosed to third parties (including Administrator) and comply with such policy as well as with any other terms of use or service policy provided to its customers, including, without limitation, as may be posted on any website operated by or on behalf of Registrar, none of which may be in conflict with any term or provision of the Agreement or with any applicable policies or Governmental Requirements set forth or referenced (including, without limitation, as set forth in the Administrator Privacy Policy).

The Registration Agreement shall provide that any disputes, claims or controversies regarding the registration, ownership, use, transfer, assignment, loss, cancellation, or suspension of any Registered Name or otherwise relating to the .CO TLD between Registrant and Registrar shall be governed by the laws of Colombia or the laws of the jurisdiction in which the principal office (or residence for individual Registrants) or place of organization/incorporation of either Registrar or Registrant is located. No other jurisdiction’s laws may govern.

Registrant shall be the only person authorized to: a) transfer the registration for any Registered Name; b) update or change any information related to the registration (though the designated technical contact shall be authorized and able to change the date related to DNS servers); or c) request the permanent cancelation of the registration of a Registered Name.

Registrar also agrees to incorporate the following text (or translation of such text into relevant language) into the Registration Agreement:

“Registrant acknowledges having read and understood and agrees to be bound by the terms and conditions of the Uniform Domain Name Dispute Resolution Policy adopted by ICANN, (the “UDRP”), as the same may be amended from time to time and which is hereby incorporated and made an integral part of this Agreement.”

The UDRP policy, which is hereby adopted by Administrator as an Adopted ICANN Policy, sets forth the terms, conditions and procedures that govern disputes between a Registrant and any party other than the Administrator or Registrar over the registration and/or use of a Registered Name. Administrator will not review, monitor, or otherwise verify that any particular Registered Name is being used in compliance with the UDRP process, any other Administrator Policy or any Governmental Requirement.

.CO Internet understands that business dynamics in the Registration services provides that some Registrars or their Resellers offer Privacy Services through the use of a Proxy Registration to keep their contact information private and not accessible to the general public via the WHOIS or any other related tools. While this is a common practice for many TLDs, for the .CO domain, Registrars will need to use their best efforts to provide such non-private Registrant information if requested by .CO Internet, or by any Colombian governmental entity, law enforcement agency or any authority performing a legal mandate.

Therefore, the following is a clarification of the policy:

It is the direct responsibility of each Registrar to maintain the accuracy and precision of the information presented in the WHOIS for.CO domain names using any acceptable methods.

.CO Internet may ask Registrars to demonstrate the methods used to maintain the accuracy of the WHOIS information as well as reveal the non-private contact information of a .CO domain name directly registered through the Registrar or through any of their Resellers.

Requests for Non-private Registrant information will be sent directly to the Registrar for their own or of their associated Resellers’ registrations, and in turn Registrars need to provide the non-private Registrant information in a period no longer than 48 hours after the request is made. Registrars also need to ensure that Registrants registering a domain directly or their Resellers’ still abide by the specific .CO Internet SAS terms and conditions as defined in the ARA even while using or subscribing to a Proxy or Privacy service.

.CO Internet SAS may also require that Registrars provide aggregate statistical information based on the non-private Registrant information included the ones that are using privacy or Proxy Registration services.

Put into effect on December 1, 2010, the Rapid Domain Compliance Process gives the .CO Registry the ability to quickly suspend any .CO domain name, if it’s being used in a manner that appears to threaten the stability, integrity or security of the .CO Registry, or any of its registrar partners – and/or that may put the safety and security of any registrant or user at risk. The process also allows the Registry to take preventive measures to avoid any security threat.

The Rapid Domain Compliance Process may be triggered through a variety of channels, including, among other things, private complaint, public alert, government or enforcement agency outreach, and the on-going monitoring of Registry Services’ industry leading security monitoring labs. In all cases, we will first alert our registrar partners about any identified threats, and will work closely with them to bring offending sites into compliance.

Domain Rules

The name is to be unique to the Registry

The name must be at least 1 character and no more than 63 characters not including the TLD, or the second level domain.

The name may be registered for terms of 1 to 5 years, inclusive Only unrestricted domains may be registered (.co, .com.co, .net.co or .nom.co) The name may contain only letters, numbers or the special character hyphen. However, a hyphen may not begin or end a name, nor have two or more consecutive hyphens, in the 3rd and 4th positions. No other special characters are permitted. The rules for Internationalized Domain Names (IDNs) may cause exceptions, and the specific IDN rules should be reviewed for the necessary detail.

Domain Lifecycle

The following are the 3 periods in the lifecyle of a .CO domain name: Registration Period, Suspension Period, Redemption Grace Period

Registration Period

Domain is registered, for up to 5 years. All standard EPP statuses may be applied by the Registrar. The domain may be renewed at any time, but overall term of the domain may not exceed 5 years. Domains may be transferred from one registrar to another, except during the first 60 days following the registration or within 60 days following a transfer

Suspension Period

Domain will be suspended upon expiration Domain will be re-delegated to a default web page managed by the Registry The domain will remain in a suspended state for up to 45 days During the suspension period, the domain may be renewed and in doing so taken off of suspension The domain may be deleted while in the Suspension Period The domain may be updated during the Suspension Period After 45 days of suspension, if the domain has not been explicitly deleted or renewed, the domain will be auto-renewed and original nameservers will be restored A 5 day (120 hours) Renew and Auto-Renew Grace period is granted and will result in a reversal of the renewal charge Domains deleted prior to the expiration date will NOT go into the suspension period, rather they will immediately go into the Redemption Grace Period

Redemption Grace Period

After any Delete the domain will enter the Redemption Grace Period While in the Redemption Grace Period, the domain will be in pendingDelete status The domain may be restored during the first 15 days, for a restore fee plus a renewal fee The domain will remain in pendingDelete status for an additional 5 days (following the initial 15 day period), in which the domain may NOT be restored

In marketing the .CO TLD, Registrars and Resellers shall not employ any marketing, branding or messaging (regardless of form) that, in Administrator’s sole discretion, is in conflict with Administrator’s objective of establishing a global, recognizable, and credible domain name extension. Without limiting the generality of the foregoing, Registrars and Resellers shall not use any marketing methods (including, but not limited to, keyword usage for pay-per-click advertising, landing page content, and email marketing), words, phrases or other forms of content (or any derivatives or combinations thereof) in its marketing, branding or messaging materials that directly or indirectly reference, imply, or allude to the suitability of domain names in the .CO TLD for any improper purpose, including, but not limited to, profiting from the generation of misdirected or unintended traffic (collectively, “Prohibited Marketing”). Examples of Prohibited Marketing words and phrases, include, but are not limited to, the following: “natural traffic”; “type-in traffic”; “typo traffic”; “traffic generation”; “direct navigation”; “mistype” “monetization”; “get traffic” “pay-per-click” “PPC”; and “PPC Revenue”. Registrars and Resellers may market the .CO TLD as suitable for “defensive registration” purposes so long as such suitability is expressed within the context of .CO being a global, recognizable, and credible domain name extension. Registrars and their Resellers agree to the terms and conditions described herein. This includes, expressly requiring any resellers, affiliates and/or agents that you contract with for the marketing and promotion of .CO domain names to similarly comply with these terms and conditions. If you are unwilling or unable to comply with the following terms and conditions, you are hereby prohibited from using the marketing materials provided.

Prior to the rollout of the General Availability phase of the .CO Launch Plan, .CO Internet established business policies and procedures for a number of names that were not made available for general registration. These include Restricted, Premium and Reserved domain names. As the .CO brand has grown, the Registry has begun to make Premium Domain Names available to the public including second level 1 and 2 character domain names, keywords and generic terms. This means there are 1 and 2 character domain names that have been acquired and allocated and need to be supported by Registrars and their Resellers. It also appears there has been confusion regarding which .CO Domain Names are and are not considered Premium Names.

Therefore, the following is a clarification of the policy:

1 and 2 character domain names in the second level are considered Premium Names and are currently allocated to either Registrants or the Registry. They should be supported by Registrars and Resellers for Create, Renew and Transfer. For example, fx.co.

1 and 2 character domain names in the third level are available for Create, Renew and Transfer, are not considered Premium Names held back by the Registry and should also be supported by Registrars and Resellers. For example, ig.com.co.

Registrars should make their Technical Teams aware that the Create, Renew and Transfer Domain functions in the SRS database for .CO Domain Names may involve 1 or 2 character names and set their development system(s) accordingly.

Domains currently or previously used as extensions in third level domains will not be available for registration in the second level. For example, org.co, mil.co, edu.co, com.co, net.co, nom.co, arts.co, firm.co, info.co, int.co, web.co, rec.co and co.co.

Effective Date: January 1, 2014

In an effort to continue to ensure we fully partner with .CO Registrars to grow the awareness of the .CO domain, we have introduced two new rules into the .CO Accreditation Process. These two rules will not impact the vast majority of our Registrars. This update will be effective January 1, 2014 for all existing registrars (these rules are currently in effect for newly accredited registrars as of July 2013).

1. Minimum New Registration Fee
2. Reinstatement Fee

Minimum New Registration Fee: .CO is selective in its accreditation process to ensure registrar partners fully commit to market the .CO domain and grow the name space globally. Therefore, for Registrars that do not meet a minimum growth target of 500 new create registrations in a calendar year, a Minimum New Registration Fee of US$500 will be charged. If the minimum growth target or more is achieved, the fee will be waived. For registrars that signed the ARA prior to July 2013, the minimum requirement will be reviewed in January 2015 for the new registrations completed in the 2014 calendar year.

Reinstatement Fee: As .CO continues to grow and manage an increased number of registrars and to uphold the same standards with all partners, the registry has implemented the Reinstatement Fee. In the event a Registrar’s financial deposit account has been put on Hold Status more than once in a calendar year, a fee of US$1,000 will be charged every time thereafter.

For a full description of the ARA terms, please see below.

* * * * *

Minimum New Registration Fee. In the event Registrar fails to register at least 42 new Registered Names per whole calendar month of the first calendar year of the Term, or 500 new Registered Names in any subsequent calendar year of the Term, Administrator may, in its discretion, charge Registrar a fee of US$500 for each such failure (the “Minimum New Registration Fee”). All Minimum New Registration Fees will be debited from the Deposit Account.

Non-Payment of Fees: In the event the Deposit Account balance drops below the minimum requirement established in accordance with the Account Application Form (the “Minimum Balance”), or Registrar otherwise fails to pay any fees when due in accordance herewith or with any applicable Administrator Policies, Administrator reserves the right to take any action it deems appropriate in order to protect Administrator’s interest which may include any or all of the following: (a) suspend acceptance of new initial, renewal or transferred registrations from Registrar (“Hold Status”); (b) delete the Registered Names associated with the deficiency from the Registry database; and/or (c) pursue any other remedy under this Agreement and/or that may be available at law or in equity. In addition to the foregoing, in the event Registrar is put on Hold Status more than once in any calendar year, in addition to correcting any deficiency required by this Agreement, Administrator will charge Registrar a reinstatement fee of US$1,000 (the “Reinstatement Fee”) the second and each additional time Registrar is put on Hold Status in such calendar year. Registrar must pay the Reinstatement Fee in order to remove the Hold Status. All Reinstatement Fees will be debited from the Deposit Account and, therefore, must be factored into the amount of funds Registrar deposits into the Deposit Account to replenish the Minimum Balance in order to remove the Hold Status.