You can either contact them through the privatized email in their whois info, or use a domain name broker who will attempt to purchase it on your behalf. I have never used one myself, but have had them email me about buying my domains.