2026
.ART Award Privacy Policy
The .ART Award is initiated and organised by UKCI Holdings Company LLC (UKCI), headquartered in the Isle of Man.
1. Who we are (controller)
UKCI Holdings Limited, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V (2006 Act company, limited by shares; registered agent Acclaim Limited).
- Privacy contact: award@art.art
- Data Protection Officer: dpo@art.art
2. Scope & jurisdictions
Applies to visitors of award.art and to artists entering the .ART Award, located in the EU/EEA, UK, Isle of Man, California and the wider US, and anyone else who uses the Site. The .ART Award competition rules are in our .ART Award Policy.
3. Personal data we collect
award.art has no user accounts or login and processes no payments. We collect:
Category
Examples
When
Award entry data
Artist name, biography, artwork (images/video/3D), creation narrative, contact details, the entry .ART domain
If you enter the .ART Award
Technical & security
IP address, device/browser, bot-management signals (Cloudflare)
Automatic
Analytics & advertising
Usage events / identifiers — only if you consent (Google tags via GTM; currently configured but not active)
With consent
4. How we use your data & legal bases
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
Purpose
Legal basis (Art. 6 GDPR)
Run the .ART Award: process entries, judging, shortlist, prizes, publication
Contract / legitimate interests
Security, fraud/abuse prevention (Cloudflare)
Legitimate interests
Respond to enquiries
Legitimate interests
Analytics & advertising (if enabled)
Consent
Legal/accounting obligations
Legal obligation
5. Cookies, consent & tracking
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
6. Sharing & processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
Provider
Purpose
Location
Figma, Inc. (Figma Sites)
Website hosting / publishing
US
Cloudflare, Inc.
CDN, security, bot management
US / global
Usercentrics GmbH
Consent management
EU (Germany)
Google LLC
Tag Manager / Analytics / Ads (consent-based; currently inactive)
US
7. International transfers
Some providers (Figma, Cloudflare, Google) are in the US. Transfers outside the EU/EEA, UK or Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum / IoM equivalent) and, where applicable, the EU–US Data Privacy Framework. We have data processing agreements in place with our processors (Figma, Cloudflare, Usercentrics, and Google where analytics is activated), each incorporating these safeguards.
8. Retention
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics is currently inactive; if enabled, analytics data would be retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months.
9. Your rights (EU / UK / Isle of Man)
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics is currently inactive; if enabled, analytics data would be retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months.
10. California privacy rights (CCPA / CPRA)
California residents may know, delete and correct their personal information and opt out of its "sale" or "sharing". We do not sell personal information for money; if advertising technologies are enabled, their use may constitute "sharing" for cross-context behavioural advertising. Opt out via the cookie banner "Reject" or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent.
11. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct, delete and opt out of targeted advertising. Contact award@art.art.
12. Children
The .ART Award is open to entrants aged 18+ and the Site is not directed to children; we do not knowingly collect children's data.
13. Security
We use technical and organisational measures (TLS/HTTPS, Cloudflare protections, access controls). No method is fully secure; we cannot guarantee absolute security.
14. Changes & contact
We may update this policy; the "Last updated" date will change. UKCI Holdings Limited · 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · +44 (0) 1624 618444 · award@art.art · dpo@art.art.
←
Main Page
2026
.ART Award Privacy Policy
The .ART Award is initiated and organised by UKCI Holdings Company LLC (UKCI), headquartered in the Isle of Man.
1. Who we are (controller)
UKCI Holdings Limited, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V (2006 Act company, limited by shares; registered agent Acclaim Limited).
- Privacy contact: award@art.art
- Data Protection Officer: dpo@art.art
2. Scope & jurisdictions
Applies to visitors of award.art and to artists entering the .ART Award, located in the EU/EEA, UK, Isle of Man, California and the wider US, and anyone else who uses the Site. The .ART Award competition rules are in our .ART Award Policy.
3. Personal data we collect
award.art has no user accounts or login and processes no payments. We collect:
Category
Examples
When
Award entry data
Artist name, biography, artwork (images/video/3D), creation narrative, contact details, the entry .ART domain
If you enter the .ART Award
Technical & security
IP address, device/browser, bot-management signals (Cloudflare)
Automatic
Analytics & advertising
Usage events / identifiers — only if you consent (Google tags via GTM; currently configured but not active)
With consent
4. How we use your data & legal bases
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
Purpose
Legal basis (Art. 6 GDPR)
Run the .ART Award: process entries, judging, shortlist, prizes, publication
Contract / legitimate interests
Security, fraud/abuse prevention (Cloudflare)
Legitimate interests
Respond to enquiries
Legitimate interests
Analytics & advertising (if enabled)
Consent
Legal/accounting obligations
Legal obligation
5. Cookies, consent & tracking
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
6. Sharing & processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
Provider
Purpose
Location
Figma, Inc. (Figma Sites)
Website hosting / publishing
US
Cloudflare, Inc.
CDN, security, bot management
US / global
Usercentrics GmbH
Consent management
EU (Germany)
Google LLC
Tag Manager / Analytics / Ads (consent-based; currently inactive)
US
7. International transfers
Some providers (Figma, Cloudflare, Google) are in the US. Transfers outside the EU/EEA, UK or Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum / IoM equivalent) and, where applicable, the EU–US Data Privacy Framework. We have data processing agreements in place with our processors (Figma, Cloudflare, Usercentrics, and Google where analytics is activated), each incorporating these safeguards.
8. Retention
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics is currently inactive; if enabled, analytics data would be retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months.
9. Your rights (EU / UK / Isle of Man)
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics is currently inactive; if enabled, analytics data would be retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months.
10. California privacy rights (CCPA / CPRA)
California residents may know, delete and correct their personal information and opt out of its "sale" or "sharing". We do not sell personal information for money; if advertising technologies are enabled, their use may constitute "sharing" for cross-context behavioural advertising. Opt out via the cookie banner "Reject" or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent.
11. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct, delete and opt out of targeted advertising. Contact award@art.art.
12. Children
The .ART Award is open to entrants aged 18+ and the Site is not directed to children; we do not knowingly collect children's data.
13. Security
We use technical and organisational measures (TLS/HTTPS, Cloudflare protections, access controls). No method is fully secure; we cannot guarantee absolute security.
14. Changes & contact
We may update this policy; the "Last updated" date will change. UKCI Holdings Limited · 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · +44 (0) 1624 618444 · award@art.art · dpo@art.art.
←
Main Page
2026
.ART Award Privacy Policy
This Privacy Policy explains how UKCI Holdings Limited ("we", "us"), organiser of the .ART Award and operator of award.art (the "Site"), collects, uses, shares and protects personal data. It meets the EU GDPR, the UK GDPR & Data Protection Act 2018, the Isle of Man Data Protection Act 2018 (Applied GDPR), the California Consumer Privacy Act as amended by the CPRA, and other applicable US state laws.
1. Who we are (controller)
UKCI Holdings Limited, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V (2006 Act company, limited by shares; registered agent Acclaim Limited).
- Privacy contact: award@art.art
- Data Protection Officer: dpo@art.art
2. Scope & jurisdictions
Applies to visitors of award.art and to artists entering the .ART Award, located in the EU/EEA, UK, Isle of Man, California and the wider US, and anyone else who uses the Site. The .ART Award competition rules are in our .ART Award Policy.
3. Personal data we collect
Award.art has no user accounts or login and processes no payments. We collect:
Category
Examples
When
Award entry data
Artist name, biography, artwork (images/video/3D), creation narrative, contact details, the entry .ART domain
If you enter the .ART Award
Technical & security
IP address, device/browser, bot-management signals (Cloudflare)
Automatic
Analytics & advertising
Usage events / identifiers — only if you consent (Google tags via GTM; currently configured but not active)
With consent
4. How we use your data & legal bases
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
Purpose
Legal basis (Art. 6 GDPR)
Run the .ART Award: process entries, judging, shortlist, prizes, publication
Contract / legitimate interests
Security, fraud/abuse prevention (Cloudflare)
Legitimate interests
Respond to enquiries
Legitimate interests
Analytics & advertising (if enabled)
Consent
Legal/accounting obligations
Legal obligation
5. Cookies, consent & tracking
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
6. Sharing & processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
Provider
Purpose
Location
Figma, Inc. (Figma Sites)
Website hosting / publishing
US
Cloudflare, Inc.
CDN, security, bot management
US / global
Usercentrics GmbH
Consent management
EU (Germany)
Google LLC
Tag Manager / Analytics / Ads (consent-based; currently inactive)
US
7. International transfers
Some providers (Figma, Cloudflare, Google) are in the US. Transfers outside the EU/EEA, UK or Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum / IoM equivalent) and, where applicable, the EU–US Data Privacy Framework. We have data processing agreements in place with our processors (Figma, Cloudflare, Usercentrics, and Google where analytics is activated), each incorporating these safeguards.
8. Retention
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics is currently inactive; if enabled, analytics data would be retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months.
9. Your rights (EU / UK / Isle of Man)
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics is currently inactive; if enabled, analytics data would be retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months.
10. California privacy rights (CCPA / CPRA)
California residents may know, delete and correct their personal information and opt out of its "sale" or "sharing". We do not sell personal information for money; if advertising technologies are enabled, their use may constitute "sharing" for cross-context behavioural advertising. Opt out via the cookie banner "Reject" or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent.
11. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct, delete and opt out of targeted advertising. Contact award@art.art.
12. Children
The .ART Award is open to entrants aged 18+ and the Site is not directed to children; we do not knowingly collect children's data.
13. Security
We use technical and organisational measures (TLS/HTTPS, Cloudflare protections, access controls). No method is fully secure; we cannot guarantee absolute security.
14. Changes & contact
We may update this policy; the "Last updated" date will change. UKCI Holdings Limited · 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · +44 (0) 1624 618444 · award@art.art · dpo@art.art.
←
Main Page
