gTLD	Full Legal Name	E-mail suffix	Detail
.heart	American Heart Association, Inc.	heart.org	View

Fundraising and health education have changed significantly with the Internet. For over a decade, AHA has used domain names to reach a community of universities, hospitals, donors and individuals. We have collected online donations from over 90,000 donors, worked closely with thousands of corporate customers who have supported our mission, and shared public health information with millions of people in the US and around the world. The overall benefits of the .HEART gTLD will be:
o streamlining AHAʹs communication and campaigns on a single, unified TLD as a communications platform;
o extending and deepening relationships with key AHA Stakeholders;
o reinforcing key AHA messages; and
o raising the funds we need to continue the life-saving research and education to prevent and treat cardiovascular disease.
Quite simply, the key benefit of the .HEART TLD will be saving lives.
Benefits for Internet users
The .HEART TLD will benefit Internet users by enabling individuals worldwide to quickly and easily find everything we do, including AHAʹs:
o community-based programs to fight cardiovascular disease;
o targeted initiatives that reach diverse populations with educational, scientific and developmental opportunities;
o safe and secure locations for online donations;
o local events where they can join other volunteers in education and fundraising efforts; and
o online health assessments (e.g. “My Life Check”) and free patient management tools.
o hospitals operating under the AHAʹs high standards of care for cardiovascular treatments;
o corporations receiving certification for their “heart-healthy” foods, and;
o cutting-edge research in cardiovascular science from universities receiving research funding from our grants.
Benefits for Registrants
The .HEART TLD is envisioned as a restricted namespace. Registrations in the .HEART TLD will bring together organizations, institutions and individuals whose work furthers our goals and mission specifically:
o hospitals following the “Get with the Guidelines” program of cardiovascular care;
o top-tier donors whose donations fund research and education to prevent and treat heart disease;
o local centers in the US and around the world providing CPR and emergency cardiovascular care following AHA education and training;
o instructors and individuals who have received certification for CPR and ECC following AHA programs:
o corporations supporting AHAʹs campaigns and earning the “heart-healthy” certification;
o universities and schools engaged in AHA-supported cardiovascular research;
o scientific institutions who are members of AHA;
o individuals engaged with AHA through journals, meetings and professional education; and
o our corporate campaigns to raise money for research and education.

The registrants will benefit from identification with AHA, and the added credibility and assurance it brings. As a result, Internet users will benefit from knowing that the information residing on the .HEART TLD is provided by trusted and reputable sources within the AHA community.
i) What is the goal of your proposed gTLD in terms of areas of specialty, service levels, or reputation?
AHA’s goal is to make .HEART a unified, consistent communications and fundraising platform to help advance our mission of saving people from heart disease. We are mindful of the need to provide a safe and secure platform as Internet users seek information about care for themselves and their families, evaluate their own lifestyle choices, seek out our campaigns, and donate so generously to our work. To that end, AHA will:
1) Consistently maintain and exceed the ICANN’s compliance requirements as set forth in the New gTLD Registry Agreement (specification 9 and 10). This would require accurate and timely monthly reporting to ICANN.
2) Monitor and enforce service level agreements with the registry back-end provider of choice: Afilias. Please see answer to Questions 30 to 43
Monitor and enforce Abuse Mitigation policies in a timely manner. See Answer to Question 28 (“Abuse Prevention and Mitigation”).
3) We will set clear eligibility criteria for scientific institutions, hospitals, universities local centers, donors, corporations, campaigns, and individuals authorized to register .HEART domain names.
ii) What do you anticipate your proposed gTLD will add to the current space, in terms of competition, differentiation, or innovation?
The .HEART TLD is a clear and identifiable namespace, something that has not been available to those seeking to support the AHAʹs mission of preventing heart disease. The single TLD will clearly identify our work, enable Internet users to easily find our AHA research and educational materials, and bring together our AHA community in a single TLD platform.
Through the central platform of a .HEART TLD and its clear taxonomy for organization of sites and information for hospitals, local centers, schools, donors, institutional members, and ECC providers, the .HEART TLD will improve cooperation and communication between members of our community and with Internet users and their families. Consumer choice will be served by enabling consumers worldwide to quickly, easily and authoritatively find AHA educational and research materials, and information about hospitals and local centers providing AHA standards of care for cardiovascular disease. This information, in turn, will support knowledgeable choices by consumers about treatment facilities --- “competition” at its most best and most informed level.
Further, the .HEART TLD will make it easier and faster for consumers to find:
o hospitals and local centers featuring AHA programs and standards of care for cardiovascular diseases;
o schools working with AHA to implement our educational curriculums or host our elementary or middle school fundraising programs;
o Universities or Academic Centers receiving research grant funding from the AHA;
o corporate customers will have .HEART secondary domain names on which to present their “heart-healthy” certifications together within information about their healthy foods and products; and
o award-winning hospitals will be able to present their cardiovascular care specialists, facilities and treatment information on a .HEART domain name.
All registrants will be able to leverage their affiliation with AHA for greater visibility and enhanced reputation.
iii) What goals does your proposed gTLD have in terms of user experience?
The user experience we envision for .HEART will be far more safe and trusted than what is possible today. As described above, users will rapidly find authoritative and credible life-saving information, heart-healthy choices, local campaigns for health, and safe ways to donate online.
The .HEART TLD will give us control over all aspects of our namespace, and this will allow us to improve the user experience, strengthen the AHA community, and ensure that users searching for hospitals and local centers that meet treatments meeting AHA-guidelines are easily findable.
The clear taxonomy of the .HEART TLD greatly improves the safety and security of our online fundraising and donations. AHA, like many organizations, suffers from confusion as donors encounter “copycat websites” and phishing scams. The .HEART TLD will make it far harder to scam our online donors (over 90,000 to date), and far easier for any existing and prospective donor to locate the credible and authorized AHA fundraising websites.
We fully expect that the ease and speed with which patients and their families can find information about the treatment and care of those with heart disease will save lives. They will be able to quickly, easily and authoritatively find the hospitals and local centers in their area that provide the highest level of cardiovascular care, and seek out the treatment in these facilities.
Further, the ease of access and privacy of the online personal assessment tools will enable more people to find these resources, and help foster the high level of trust necessary to enter personal information about health and lifestyle into the online tools. The resulting assessment and education will help prevent heart disease and improve lives.
Additionally, consumers will be able to more quickly to find foods by companies operating under the AHA certification for “heart-healthy food,” and those corporate customers, should they choose to register, will have an additional opportunity to share information about their products on a .HEART domain name. Such registrations might include General Mills, Kashi Company and Quaker Oats Company. .
For those millions of volunteers hoping to take part in one of our many campaigns, the .HEART domain name websites will provide assurance that the campaigns are indeed affiliated with AHA, and will serve to further AHAʹs mission.
One of the most important aspects of the .HEART user experience is the ability to provide online donors with a means to easily identify credible and authorized campaigns associated with the AHA, before they input their credit card info or personal data.
iv) Provide a complete description of the applicant’s intended registration policies in support of the goals listed above.
As .HEART will be a restricted TLD, we strengthen the AHA community through the registration of domain names to organizations and individuals meeting AHAʹs high eligibility standards, including: donors, hospitals, universities, scientific institutions, corporations earning AHA certifications, Local Centers providing high standards of care, Individuals members and those engaged with AHA education, journals and meetings, CPR and ECC Trainers, and Individuals trained to provide updated CPR and ECC care.

First, AHA will offer a select group of organizations, institutions and top tier donors who are part of our core community, the opportunity to register .HEART domain names at no cost during the Limited Sunrise period. This select group includes AHAʹs top-tier donors, corporate customers, institutional members and award-winning hospitals providing cardiac care in accordance with AHA programs and guidelines. The Sunrise Period will then allow registration of .HEART domain names to a wider circle of our community, including some corporate, professional and institutional members for a fee.

Second, AHA will offer registrations of domain names in .HEART TLD to the larger AHA community of institutions, individuals and organizations, such as:
o hospitals providing care under the “Get with the Guidelines” AHA program⁄“unique hospitals”(over 2000 qualifying at this time);
o corporate customers furthering the AHA mission with support for campaigns, donations and food offerings meriting the AHAʹs “heart-healthy” certification (over 22,500 qualifying at this time);
o schools affiliated with AHA and involved with research, education, campaigns and development (over 35,000 qualifying at this time);
o Instructors providing professional education and training in AHAʹs updated guidelines for CPR and Emergency Cardiovascular Care (ECC) (180,000 qualifying at this time);
o Individual members of AHA, and those attending our professional education programs, subscribing to our journals and attending our meetings (over 1.028 million qualifying at this time); and
o individuals trained in the US and internationally to provide ECC care (13.5 million Qualifying at this time).
Lastly, General Registrations, will signal the opportunity for the larger AHA community, to register .HEART domain names.

(Note: the numbers above indicate the potential number of institutions and individuals eligible to register domain names in .HEART at this time, but we do not expect registrations to reach these levels.)

AHA will establish clear criteria to ensure that only those meeting the strict registration criteria will be able to register the domain names. We will communicate the criteria clearly to the ICANN-Accredited and Registry-accredited Registrars offering the domain name registrations.

Entities eligible to register domain names by paying the registration fees may be registered for periods of 1, 2, 5 and 10 years, provided the institutions and individuals continue to meet the criteria. However, the standard registration term will be one year.

In all cases, AHA will monitor the use of all .HEART domain names to ensure that the content and use of the associated websites is consistent with the registration and use policies we have set out..


Reserved Names:
In .HEART, we will reserve the following classes of domain names, which will not be available to register via the Sunrise or subsequent periods:
• The reserved names required in Specification 5 of the new gTLD Registry Agreement.
• The geographic names required in Specification 5 of the new gTLD Registry Agreement, and as described in Q21 and Q22 (“Protection of Geographic Names”).
• Our own name and variations thereof, and registry operations names (such as nic.heart, registry.heart, and www.heart). This has been a standard practice in ICANN’s past gTLDs.
• Names related to ICANN and Internet standards bodies (iana.heart, ietf.heart, w3c.heart, etc.). Whereas AHA sees no practical reason to assign these domains to the relevant entities, should any of these organizations bring a valid consideration, or should ICANN require it, AHA will provision the domain accordingly.
• AHA will reserve a set of generic domain names for its own use and to further its mission and goals. Examples would include: “donate.heart”, “tribute.heart” etc.

Dispute Resolution Mechanisms:
• AHA will operate a Sunrise Dispute Policy to provide special protection of qualified trademark rights. See Q 29 for more detail.
• The ICANN required Uniform Dispute Resolution Policy (UDRP) will apply to .HEART. Should AHA lose a UDRP challenge, the default action will be to remove the domain from the registry and add it to the reserve list unless the challenging party qualifies to use the registration as defined under the .HEART domain use policy. See Q 29 for more detail..
• As required by ICANN, .HEART domains will also be subject to the Universal Rapid Suspension (URS) policy. See Q 29 for more detail.
• Although AHAʹs current operating model should make erroneous transfers unlikely, we will comply ICANN’s Registrar Transfer Dispute Resolutions Policy ( http:⁄⁄www.icann.org⁄en⁄transfers⁄dispute-policy-12jul04.htm ). Our technical and operational services are designed to support this dispute mechanism.
Limited Sunrise Period, Regular Sunrise Period and Indefinite Trademark Claims Services System:
We plan to implement a Sunrise period of 45 days for the purpose of complying with ICANN requirements. Prior to the regular Sunrise Period, there will be a Limited Sunrise Period where we will offer to our core members, as set out in section 18(b)(iv) above, .HEART domain names at no cost to the core of AHAʹs top-tier donors, corporate customers, institutional members and award-winning hospitals providing cardiac care in accordance with AHA programs and guidelines.

These domain name registrations will be checked against the trademarks in the Trademark Clearinghouse (TC) by a contracted third party (Note: AHA will comply with any ICANN requirements in the selection of said contractor). Should the mark be present in the TC, AHA will check whether the registered trademark owner meets the registration requirements of the restricted .HEART TLD. If it does, the trademark owner in the TC will receive priority for the domain name. If it does not meet the .HEART registration requirements, AHA, in its sole discretion, may check the credentials of the domain name requester and register the domain name.
AHA will strictly follow the ICANN Sunrise period of 45 days. Further, AHA will incorporate an indefinite Trademark Claims Services system from the start of Sunrise, exceeding requirements by ICANN. When the Claims Service is active, there will be a notice sent to the prospective registrant of any .HEART domain name, prior to its registration, should such domain name constitute an identical match of a mark registered in the Trademark Clearinghouse. Moreover the right owner or owners, as recorded in the Trademark Clearinghouse, will be informed once any such domain name has been registered following this event.
v) Will your proposed gTLD impose any measures for protecting the privacy or confidential information of registrants or users?
A restricted registration environment affords great control over the creation and maintenance of the .HEART TLD. AHA will take considerable measures to insure the security of online transactions while respecting and protecting private and confidential information. AHA will deploy DNSSEC in .HEART and comply with all of the other policies and practices required by ICANN in the Registry Agreement and⁄or via any Consensus Policy. AHA will also comply with all applicable laws and regulations relating to Internet security and the privacy of users’ confidential information.
AHA employs security and privacy practices that meet and exceed those of its industry. With respect to the security of its online donations, AHA complies with the Payment Card Industry Data Security Standards (“PCI DSS”) for financial transactions. For security purposes, its network is composed of access controlled measures, security monitoring tools, vulnerability management program, SSL encryption, scheduled network scans and internal and external penetration tests.
Dot-HEART will continue the Privacy Policy currently used by AHA and the respect for users’ private or confidential information. AHAʹs privacy policy is posted at: http:⁄⁄www.heart.org⁄HEARTORG⁄General⁄Privacy-Policy_UCM_300371_Article.jsp#.T3LxOtlLNCQ and summarized below:
“The American Heart Association values and respects an individualʹs right to keep certain Personal Information private. Likewise, the AHA values the need to collect and use Personal Information, which will enable the AHA to effectively deliver products and services leading to a reduction in disability and death from heart diseases and stroke. This Privacy Policy applies to activities of the AHA and additionally to persons visiting AHA Web sites, signing up for AHA publications and mailings, or entering into transactions with the AHA, and covers the collection, use, storage and disclosure of information and data as described in this Privacy Policy.”

The following Section, not currently on the AHA website will also be added.
Children’s Privacy Policy
From time to time, the AHA collects information about children who enroll in the AHA’s campaigns. The AHA is committed to protecting the privacy of children under the age of thirteen who live in the United States as required by the Federal Trade Commission. The AHA does not operate commercial websites which are solely aimed at children under 13. Federal laws and FTC regulations apply only to commercial websites. The AHA does have websites (for fund raising, not commercial purposes) directed to children who participate in Youth Market events. The AHA strives to comply in good faith with all applicable laws and regulations, including but not limited to the Children’s Online Privacy Protection Act, to the extent it may be applicable to the AHA’s charitable operations. The AHA is also interested in addressing the spirit of the law by providing practical notices to parents on the Youth Market sites that explain the programs.
Privacy and Proxy Services
Please reference our answer to Q28, we describe our proposed policies to limit the use of privacy and proxy services by malicious parties.

Registry lock services
AHA will offer a “Registry Lock” service. This service protects registrant data from unauthorized modifications and transactions such as domain transfer and delete.

gTLD	Full Legal Name	E-mail suffix	Detail
.stroke	American Heart Association, Inc.	heart.org	View

Fundraising and health education have changed significantly with the Internet. For over a decade, AHA has used domain names to reach a community of universities, hospitals, donors and individuals. We have collected online donations from over 90,000 donors, worked closely with thousands of corporate customers who have supported our mission, and shared public health information with millions of people in the US and around the world.
The overall benefits of the .STROKE gTLD will be:
o streamlining AHAʹs communication and campaigns on single, unified TLD as a communications platform;
o reinforcing key AHA messages; and
o raising the funds we need to continue the life-saving research and education to prevent and treat stroke
Quite simply, the key benefit of the .STROKE TLD will be saving lives.
Benefits for Internet users
The .STROKE TLD will benefit Internet users by enabling individuals worldwide to quickly and easily find everything we do, including ASAʹs:
o community-based programs to fight cardiovascular disease;
o targeted initiatives that reach diverse populations with educational, scientific and developmental opportunities, such as the “Power to End Stroke” ;
o safe and secure locations for online donations;
o directions on how to find AHA stroke certified hospitals
o online health assessments (e.g. “Top 10 signs”) and free patient management tools.
In addition, Internet users will benefit greatly from quick and easy navigation to:
o hospitals operating under the AHAʹs high standards of care for stroke treatments;
o cutting-edge research in cardiovascular science from universities receiving research funding from our grants.
o information and educational materials on how to prevent or recognize stroke or deal with its aftermath
o caregiver information on how to best manage and care for stroke victims


Benefits for Registrant (AHA)
.STROKE will be a single registrant TLD and will only have registrations that are specific to and managed by AHA directly. The .STROKE TLD will provide AHA with a consistent, visible and secure platform for all of our communication, education and fundraising efforts. The AHA’s Stroke Association website is under www.strokeassociation.org. We do not own stroke.org , nor stroke.com (the latter redirects to a site for Plavix, a pharmaceutical drug) . Both these domain names were registered by other entities with no ties to AHA. This of course causes some confusion for internet users who may expect to find us under “stroke” related addresses. A single .STROKE platform will provide a central repository for AHA libraries of educational and research materials, reinforce our key educational and advocacy messages, highlight hospitals medical centers providing high levels of care, and increase our fundraising efforts by providing a clear, secure and easily-identifiable platform.
As a closed namespace, we envision less than 25 second level domains in total .

Examples of second level domain names in .Stroke could include: top10signs.stroke, prevent.stroke, survive.stroke, donate.stroke, research.stroke, etc.

i) What is the goal of your proposed gTLD in terms of areas of specialty, service levels, or reputation?
AHA’s goal is to make .STROKE a unified, consistent communications and fundraising platform to help advance our mission of saving people from stroke. We are mindful of the need to provide a safe and secure platform as Internet users seek information about care for themselves and their families, evaluate their own lifestyle choices, seek out our campaigns, and donate so generously to our work. To that end, AHA will:
1) Consistently maintain and exceed the ICANN’s compliance requirements as set forth in the New gTLD Registry Agreement (specification 9 and 10). This would require accurate and timely monthly reporting to ICANN.

2) Monitor and enforce service level agreements with the registry back-end provider of choice: Afilias. Please see answer to Questions 30 to 43
Monitor and enforce Abuse Mitigation policies in a timely manner. See Answer to Question 28 (“Abuse Prevention and Mitigation”).
ii) What do you anticipate your proposed gTLD will add to the current space, in terms of competition, differentiation, or innovation?
The .STROKE TLD is a clear and identifiable namespace, something that has not been available to those seeking to support the AHAʹs mission of preventing stroke. The single TLD will clearly identify our work, and enable Internet users to easily find our research and educational materials, patient care, management and online assessment tools, and our campaigns and donation programs.
Through the central platform of a .STROKE TLD and its clear, but limited taxonomy for organization of sites and information for patients, donors, and caregivers. the .STROKE TLD will improve the efficacy of our communication to those affected by stroke, their families and the internet users at large. Consumer choice will be served by enabling consumers worldwide to quickly, easily and authoritatively find AHA educational and research materials, and information about hospitals and local centers providing AHA standards of care for stroke. This information, in turn, will support knowledgeable choices by consumers about treatment options, and facilities --- “competition” at its most best and most informed level.
Further, the .STROKE TLD will make it easier and faster for consumers to find:
o Leading edge research on the causes of stroke and how to prevent it;
o easy self-assessment tools to evaluate their risk of stroke;
o prevention methods and tactics such as life style choices to make now;
o coping mechanisms and support for those who have been affected by stroke, either personally or via a family member or loved one who fell victim to stroke
o ways to help prevent stroke for the most vulnerable segments such as the African American community
o Create and expand a new digital community for stroke survivors and caregivers.
The .STROKE TLD will increase the authoritative and credible information received by the public about stroke and its prevention, as well as improve AHA’s communication and efficacy in carrying out its mission and meeting its aggressive goal to reduce stroke by 20% by 2020.
iii) What goals does your proposed gTLD have in terms of user experience?
The user experience we envision for .STROKE will be far more safe and trusted than what is possible today. As described above, users will rapidly find authoritative and credible life-saving information, healthy lifestyle choices, local campaigns for health, and safe ways to donate online.
The .STROKE TLD will give us control over all aspects of our namespace, and this will allow us to improve the user experience, and ensure that users searching for hospitals and local centers that meet treatments meeting AHA-guidelines are easily findable.
The clear taxonomy of the .STROKE TLD greatly improves the safety and security of our online fundraising and donations. AHA, like many organizations, suffers from confusion as donors encounter “copycat websites” and phishing scams. The .STROKE TLD will make it far harder to scam our online donors (over 90,000 to date), and far easier for any existing and prospective donor to locate the credible and authorized AHA fundraising websites.
We fully expect that the ease and speed with which patients and their families can find information about the treatment and care of those with heart disease will save lives. They will be able to quickly, easily and authoritatively find the hospitals and local centers in their area that provide the highest level of cardiovascular care, and seek out the treatment in these facilities.
Further, the ease of access and privacy of the online personal assessment tools will enable more people to find these resources, and help foster the high level of trust necessary to enter personal information about health and lifestyle into the online tools. The resulting assessment and education will help prevent heart disease and improve lives.
For those millions of volunteers hoping to take part in one of our many campaigns, the .STROKE domain name websites will provide assurance that the campaigns are indeed affiliated with AHA, and will serve to further AHAʹs mission.
One of the most important aspects of the .STROKE user experience is the ability to provide online donors with a means to easily identify credible and authorized campaigns associated with the AHA, before they input their credit card info or personal data.
Overall, with a .STROKE platform to unify our communications, fundraising, education and campaign efforts, AHA will have control over all aspects of the namespace, be able to avoid and mitigate abuse, and reach out more extensively and fully to the public.
As noted above, second-level domains will only be registered by the AHA for its own use. This fact, plus the limited number of .STROKE second level domains (less than 25 in total) envisioned will ensure the integrity of .STROKE, and the reputation of AHA and its community. In addition, the .STROKE TLD will enable predictable, intuitive and easy navigation for any and all users.
iv) Provide a complete description of the applicant’s intended registration policies in support of the goals listed above.
As a closed TLD, all second-level domains will be registered only by the AHA through an ICANN accredited registrar in support of approved organizations, institutions and individuals directly associated with the AHA mission.

Specifically, AHA will allow organizations, institutions or individuals affiliated with AHA (the AHA community) to register domain names in two ways. First the AHA will allow registration of names to core members of the AHA community at zero cost, namely: top-tier donors, Get with the Guidelines Award-Winning hospitals (bronze level and above), Scientific organizations which serve institutional members, local centers and hospitals providing ECC treatment, top-tier corporate customers, and schools who work very closely with AHA on campaigns and development.
.STROKE domain names may be registered for periods of 1, 2, 5 and 10 years. However, the standard registration term will be one year.
AHA will reserve a set of generic domain names for its own use and to further its mission and goals. Examples would include: “donate.STROKE”, “tribute.STROKE” etc.
In all cases, AHA will monitor the use of all .STROKE domain names to ensure that the content and use of the associated websites is consistent with the registration and use policies we have set out for .STROKE.


Reserved Names:
AHA additionally recognizes both the ICANN requirement and domain industry practice of reserving (preventing) the registrations of selected strings and intends to comply pursuant to the following Reserved Names and Dispute Resolution Mechanism policies.

In .STROKE, we will reserve the following classes of domain names, which will not be available to register via the Sunrise or subsequent periods:
• The reserved names required in Specification 5 of the new gTLD Registry Agreement.
• The geographic names required in Specification 5 of the new gTLD Registry Agreement, and as described in Question 21 and Question 22 (“Protection of Geographic Names”).
• The registry operator will reserve its own name and variations thereof, and registry operations names (such as nic.STROKE, registry.STROKE, and www.STROKE). This has been a standard practice in ICANN’s past gTLDs.
• We will indefinitely reserve names related to ICANN and Internet standards bodies (iana.STROKE, ietf.STROKE, w3c.STROKE, etc.). Whereas AHA sees no practical reason to assign these domains to the relevant entities, given the directed purpose of the namespace, should any of these organizations bring a valid consideration, or should ICANN require it, AHA will provision the domain accordingly.
Dispute Resolution Mechanisms:
As required in all gTLDs, rights holders will have access to several dispute mechanisms. These are fair and transparent processes to adjudicate claims to domain names, such as:
• AHA will operate a Sunrise Dispute Policy to provide special protection of qualified trademark rights. Additional details on this process can be found in Question 29.
• The ICANN required Uniform Dispute Resolution Policy (UDRP) will apply to .STROKE. Should AHA lose a UDRP challenge, the default action will be to remove the domain from the registry and add it to the reserve list unless the challenging party qualifies to use the registration as defined under the .STROKE domain use policy. Please note details in question 29.
• As required by ICANN, .STROKE domains will also be subject to the Universal Rapid Suspension (URS) policy. We detail our implementation of the URS in question 29.
• Although AHAʹs current operating model should make erroneous transfers unlikely, we will comply ICANN’s Registrar Transfer Dispute Resolutions Policy ( http:⁄⁄www.icann.org⁄en⁄transfers⁄dispute-policy-12jul04.htm ). Our technical and operational services are designed to support this dispute mechanism.
Regular Sunrise Period and Indefinite Trademark Claims Services System:
We plan to implement a Sunrise period of 30 days for the purpose of complying with ICANN requirements. However since the .STROKE TLD is envisioned as a very small and close TLD, we do not anticipate a heavy volume of enquiries during Sunrise.
Any self-registered domain name registrations will be checked against the trademarks in the Trademark Clearinghouse by a contracted third party (Note: AHA will comply with any ICANN requirements in the selection of said contractor). Should the mark be present in the Trademark Clearinghouse, AHA will check whether the registered trademark owner meets the registration requirements of the restricted .STROKE TLD. If it does, the trademark owner in the Trademark Clearinghouse will receive priority for the domain name. If it does not meet the .STROKE registration requirements, AHA, in its sole discretion, may check the credentials of the domain name requester and register the domain name.
AHA will strictly follow the ICANN Sunrise period of 30 days. Further, AHA will incorporate an indefinite Trademark Claims Services system from the start of Sunrise, exceeding requirements by ICANN. When the Claims Service is active, there will be a notice sent to the prospective registrant of any .STROKE domain name, prior to its registration, should such domain name constitute an identical match of a mark registered in the Trademark Clearinghouse. Moreover the right owner or owners, as recorded in the Trademark Clearinghouse, will be informed once any such domain name has been registered following this event.

v) Will your proposed gTLD impose any measures for protecting the privacy or confidential information of registrants or users?
Fundamental to the value proposition for .STROKE is the creation of a namespace where visitors and users are confident that they are only dealing with credible authorized information meeting the high standards of AHA. A restricted registration environment affords great control over the creation and maintenance of the .STROKE TLD. AHA will take considerable measures to insure the security of online transactions while respecting and protecting private and confidential information.

AHA will deploy DNSSEC in .STROKE and comply with all of the other policies and practices required by ICANN in the Registry Agreement and⁄or via any Consensus Policy. AHA will also comply with all applicable laws and regulations relating to Internet security and the privacy of users’ confidential information.
AHA employs security and privacy practices that meet and exceed those of its industry. With respect to the security of its online donations, AHA complies with the Payment Card Industry Data Security Standards (“PCI DSS”) for financial transactions. For security purposes, its network is composed of access controlled measures, security monitoring tools, vulnerability management program, SSL encryption, scheduled network scans and internal and external penetration tests.
Dot-STROKE will continue the Privacy Policy currently used by AHA and the respect for users’ private or confidential information. AHAʹs privacy policy is posted at: http:⁄⁄www.heart.org⁄HEARTORG⁄General⁄Privacy-Policy_UCM_300371_Article.jsp#.T4Cey4743PB and summarized below:
“The American Heart Association values and respects an individualʹs right to keep certain Personal Information private. Likewise, the AHA values the need to collect and use Personal Information, which will enable the AHA to effectively deliver products and services leading to a reduction in disability and death from heart diseases and stroke. This Privacy Policy applies to activities of the AHA and additionally to persons visiting AHA Web sites, signing up for AHA publications and mailings, or entering into transactions with the AHA, and covers the collection, use, storage and disclosure of information and data as described in this Privacy Policy.”
The following Section, not currently on the AHA website will also be added.

Children’s Privacy Policy
From time to time, the AHA collects information about children who enroll in the AHA’s campaigns. The AHA is committed to protecting the privacy of children under the age of thirteen who live in the United States as required by the Federal Trade Commission. The AHA does not operate commercial websites which are solely aimed at children under 13. Federal laws and FTC regulations apply only to commercial websites. The AHA does have websites (for fund raising, not commercial purposes) directed to children who participate in Youth Market events. The AHA strives to comply in good faith with all applicable laws and regulations, including but not limited to the Children’s Online Privacy Protection Act, to the extent it may be applicable to the AHA’s charitable operations. The AHA is also interested in addressing the spirit of the law by providing practical notices to parents on the Youth Market sites that explain the programs.
Privacy and Proxy Services
Please reference our answer to Q28, we describe our proposed policies to limit the use of privacy and proxy services by malicious parties.

Registry lock services
AHA will offer a “Registry Lock” service. This service protects registrant data from unauthorized modifications and transactions such as domain transfer and delete.