2026
Updated: 06.07.2026
.ART Award Privacy Policy
This Privacy Policy explains how UKCI Holdings Limited (“we”, “us”), organiser of the .ART Award and operator of award.art (the “Site”), collects, uses, shares and protects personal data. It meets the EU GDPR, the UK GDPR & Data Protection Act 2018, the Isle of Man Data Protection Act 2018 (Applied GDPR), the California Consumer Privacy Act as amended by the CPRA, and other applicable US state laws.
1. Who we are (controller)
UKCI Holdings Limited, First Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V (2006 Act company, limited by shares; registered agent Acclaim Limited).
- Privacy contact: award@art.art
- Data contact: datacontact@nic.art
- EU representative (GDPR Art. 27): [appoint — see note in §9] · UK representative (UK GDPR Art. 27): [appoint — see note]
2. Scope & jurisdictions
Applies to visitors of award.art and to artists entering the .ART Award, located in the EU/EEA, UK, Isle of Man, California and the wider US, and anyone else who uses the Site. The .ART Award competition rules are in our .ART Award Policy.
3. Personal data we collect
award.art has no user accounts or login and processes no payments. We do not collect any sensitive information. We collect:
Category
Examples
When
Award entry data
Artist name, biography, artwork (images/video/3D), creation narrative, contact details, the entry .ART domain
If you enter the .ART Award
Technical & security
IP address, device/browser, bot-management signals (Cloudflare)
Automatic
Analytics & advertising
usage events / identifiers — only if you consent (Google Analytics, Meta/Facebook Pixel, X/Twitter Pixel, managed via GTM)
With consent
4. How we use your data & legal bases
Purpose
Legal basis (Art. 6 GDPR)
Run the .ART Award: process entries, judging, shortlist, prizes, publication
Contract / legitimate interests
Security, fraud/abuse prevention (Cloudflare)
Legitimate interests
Respond to enquiries
Legitimate interests
Analytics & advertising (if enabled)
Consent
Legal/accounting obligations
Legal obligation
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
5. Cookies, consent & tracking
We use the Usercentrics consent platform with Google Consent Mode. Strictly necessary technologies run the Site and security; any analytics/advertising loads only after you consent, and Google Tag Manager and its tags are not loaded before consent. We honour Global Privacy Control (GPC). Before consent the Site sets only a Cloudflare security cookie and Usercentrics consent records; after you accept, Google Analytics, the Meta (Facebook) Pixel and the X (Twitter) Pixel set cookies. Full details and how to change your choice: Cookie Policy.
6. Sharing & processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
Provider
Purpose
Location
Figma, Inc. (Figma Sites)
Website hosting / publishing
US
Cloudflare, Inc.
CDN, security, bot management
US / global
Usercentrics GmbH
Consent management
EU (Germany)
Google LLC
Tag Manager / Analytics / Ads (consent-based)
US
Usercentrics GmbH
Meta (Facebook) Pixel — advertising measurement (consent-based)
US
1
X (Twitter) Pixel — advertising measurement (consent-based)
US
7. International transfers
Several providers (Figma, Cloudflare, Google, Meta, X) are in the US. Transfers outside the EU/EEA, UK or Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum / IoM equivalent) and, where applicable, the EU–US Data Privacy Framework. We have data processing agreements in place with our processors (Figma, Cloudflare, Usercentrics, Google, Meta and X), each incorporating these safeguards.
8. Retention
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics data is retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months; advertising/analytics cookies last up to ~2 years (see Cookie Policy). Your data will be deleted upon your request. This will delete your award entry. Send the request to the address in §1. Your data will be deleted within 30 days and you will cease receiving communications from us.
9. Your rights (EU / UK / Isle of Man)
You have the right to access, rectification, erasure, restriction, portability, objection, and to withdraw consent. Contact award@art.art or datacontact@nic.art; we respond within one month. Supervisory authorities: EU — your national DPA; UK — ICO (ico.org.uk); Isle of Man — Information Commissioner (inforights.im).
Note on representatives: as we are established in the Isle of Man (outside the EU and the UK) and offer the Award to EU and UK residents, GDPR/UK GDPR Art. 27 may require us to appoint an EU representative and a UK representative as local contact points. [Confirm with counsel and appoint, then fill §1.]
10. California privacy rights (CCPA / CPRA)
California residents may know, delete and correct their personal information and opt out of its “sale” or “sharing”. We do not sell personal information for money; however, our use of advertising technologies (the Meta and X pixels) constitutes “sharing” for cross-context behavioural advertising under the CPRA. You can opt out via the cookie banner “Reject”, our “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” link (which opens these settings), or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent.
11. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct, delete and opt out of targeted advertising. Contact award@art.art.
12. Children
The .ART Award is open to entrants aged 18+ and the Site is not directed to children; we do not knowingly collect children's data.
13. Security
We use technical and organisational measures (TLS/HTTPS, Cloudflare protections, access controls). No method is fully secure; we cannot guarantee absolute security.
14. Changes & contact
We may update this policy; the "Last updated" date will change. UKCI Holdings Limited · First Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · +44 (0) 1624 618444 The AWARD.ART contact for data control and processing questions is datacontact@nic.art.
The company contact for all other questions about the site and our offerings is award@art.art.
←
Main Page
2026
Updated: 06.07.2026
.ART Award Privacy Policy
This Privacy Policy explains how UKCI Holdings Limited (“we”, “us”), organiser of the .ART Award and operator of award.art (the “Site”), collects, uses, shares and protects personal data. It meets the EU GDPR, the UK GDPR & Data Protection Act 2018, the Isle of Man Data Protection Act 2018 (Applied GDPR), the California Consumer Privacy Act as amended by the CPRA, and other applicable US state laws.
1. Who we are (controller)
UKCI Holdings Limited, First Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V (2006 Act company, limited by shares; registered agent Acclaim Limited).
- Privacy contact: award@art.art
- Data contact: datacontact@nic.art
- EU representative (GDPR Art. 27): [appoint — see note in §9] · UK representative (UK GDPR Art. 27): [appoint — see note]
2. Scope & jurisdictions
Applies to visitors of award.art and to artists entering the .ART Award, located in the EU/EEA, UK, Isle of Man, California and the wider US, and anyone else who uses the Site. The .ART Award competition rules are in our .ART Award Policy.
3. Personal data we collect
award.art has no user accounts or login and processes no payments. We do not collect any sensitive information. We collect:
Category
Examples
When
Award entry data
Artist name, biography, artwork (images/video/3D), creation narrative, contact details, the entry .ART domain
If you enter the .ART Award
Technical & security
IP address, device/browser, bot-management signals (Cloudflare)
Automatic
Analytics & advertising
usage events / identifiers — only if you consent (Google Analytics, Meta/Facebook Pixel, X/Twitter Pixel, managed via GTM)
With consent
4. How we use your data & legal bases
Purpose
Legal basis (Art. 6 GDPR)
Run the .ART Award: process entries, judging, shortlist, prizes, publication
Contract / legitimate interests
Security, fraud/abuse prevention (Cloudflare)
Legitimate interests
Respond to enquiries
Legitimate interests
Analytics & advertising (if enabled)
Consent
Legal/accounting obligations
Legal obligation
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
5. Cookies, consent & tracking
We use the Usercentrics consent platform with Google Consent Mode. Strictly necessary technologies run the Site and security; any analytics/advertising loads only after you consent, and Google Tag Manager and its tags are not loaded before consent. We honour Global Privacy Control (GPC). Before consent the Site sets only a Cloudflare security cookie and Usercentrics consent records; after you accept, Google Analytics, the Meta (Facebook) Pixel and the X (Twitter) Pixel set cookies. Full details and how to change your choice: Cookie Policy.
6. Sharing & processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
Provider
Purpose
Location
Figma, Inc. (Figma Sites)
Website hosting / publishing
US
Cloudflare, Inc.
CDN, security, bot management
US / global
Usercentrics GmbH
Consent management
EU (Germany)
Google LLC
Tag Manager / Analytics / Ads (consent-based)
US
Usercentrics GmbH
Meta (Facebook) Pixel — advertising measurement (consent-based)
US
1
X (Twitter) Pixel — advertising measurement (consent-based)
US
7. International transfers
Several providers (Figma, Cloudflare, Google, Meta, X) are in the US. Transfers outside the EU/EEA, UK or Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum / IoM equivalent) and, where applicable, the EU–US Data Privacy Framework. We have data processing agreements in place with our processors (Figma, Cloudflare, Usercentrics, Google, Meta and X), each incorporating these safeguards.
8. Retention
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics data is retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months; advertising/analytics cookies last up to ~2 years (see Cookie Policy). Your data will be deleted upon your request. This will delete your award entry. Send the request to the address in §1. Your data will be deleted within 30 days and you will cease receiving communications from us.
9. Your rights (EU / UK / Isle of Man)
You have the right to access, rectification, erasure, restriction, portability, objection, and to withdraw consent. Contact award@art.art or datacontact@nic.art; we respond within one month. Supervisory authorities: EU — your national DPA; UK — ICO (ico.org.uk); Isle of Man — Information Commissioner (inforights.im).
Note on representatives: as we are established in the Isle of Man (outside the EU and the UK) and offer the Award to EU and UK residents, GDPR/UK GDPR Art. 27 may require us to appoint an EU representative and a UK representative as local contact points. [Confirm with counsel and appoint, then fill §1.]
10. California privacy rights (CCPA / CPRA)
California residents may know, delete and correct their personal information and opt out of its “sale” or “sharing”. We do not sell personal information for money; however, our use of advertising technologies (the Meta and X pixels) constitutes “sharing” for cross-context behavioural advertising under the CPRA. You can opt out via the cookie banner “Reject”, our “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” link (which opens these settings), or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent.
11. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct, delete and opt out of targeted advertising. Contact award@art.art.
12. Children
The .ART Award is open to entrants aged 18+ and the Site is not directed to children; we do not knowingly collect children's data.
13. Security
We use technical and organisational measures (TLS/HTTPS, Cloudflare protections, access controls). No method is fully secure; we cannot guarantee absolute security.
14. Changes & contact
We may update this policy; the "Last updated" date will change. UKCI Holdings Limited · First Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · +44 (0) 1624 618444 The AWARD.ART contact for data control and processing questions is datacontact@nic.art.
The company contact for all other questions about the site and our offerings is award@art.art.
←
Main Page
2026
Updated: 06.07.2026
.ART Award Privacy Policy
This Privacy Policy explains how UKCI Holdings Limited (“we”, “us”), organiser of the .ART Award and operator of award.art (the “Site”), collects, uses, shares and protects personal data. It meets the EU GDPR, the UK GDPR & Data Protection Act 2018, the Isle of Man Data Protection Act 2018 (Applied GDPR), the California Consumer Privacy Act as amended by the CPRA, and other applicable US state laws.
1. Who we are (controller)
UKCI Holdings Limited, First Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V (2006 Act company, limited by shares; registered agent Acclaim Limited).
- Privacy contact: award@art.art
- Data contact: datacontact@nic.art
- EU representative (GDPR Art. 27): [appoint — see note in §9] · UK representative (UK GDPR Art. 27): [appoint — see note]
2. Scope & jurisdictions
Applies to visitors of award.art and to artists entering the .ART Award, located in the EU/EEA, UK, Isle of Man, California and the wider US, and anyone else who uses the Site. The .ART Award competition rules are in our .ART Award Policy.
3. Personal data we collect
award.art has no user accounts or login and processes no payments. We do not collect any sensitive information. We collect:
Category
Examples
When
Award entry data
Artist name, biography, artwork (images/video/3D), creation narrative, contact details, the entry .ART domain
If you enter the .ART Award
Technical & security
IP address, device/browser, bot-management signals (Cloudflare)
Automatic
Analytics & advertising
usage events / identifiers — only if you consent (Google Analytics, Meta/Facebook Pixel, X/Twitter Pixel, managed via GTM)
With consent
4. How we use your data & legal bases
Purpose
Legal basis (Art. 6 GDPR)
Run the .ART Award: process entries, judging, shortlist, prizes, publication
Contract / legitimate interests
Security, fraud/abuse prevention (Cloudflare)
Legitimate interests
Respond to enquiries
Legitimate interests
Analytics & advertising (if enabled)
Consent
Legal/accounting obligations
Legal obligation
Where we rely on consent you may withdraw it any time (see Cookie Policy) without affecting prior processing.
5. Cookies, consent & tracking
We use the Usercentrics consent platform with Google Consent Mode. Strictly necessary technologies run the Site and security; any analytics/advertising loads only after you consent, and Google Tag Manager and its tags are not loaded before consent. We honour Global Privacy Control (GPC). Before consent the Site sets only a Cloudflare security cookie and Usercentrics consent records; after you accept, Google Analytics, the Meta (Facebook) Pixel and the X (Twitter) Pixel set cookies. Full details and how to change your choice: Cookie Policy.
6. Sharing & processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
Provider
Purpose
Location
Figma, Inc. (Figma Sites)
Website hosting / publishing
US
Cloudflare, Inc.
CDN, security, bot management
US / global
Usercentrics GmbH
Consent management
EU (Germany)
Google LLC
Tag Manager / Analytics / Ads (consent-based)
US
Meta Platforms, Inc.
Meta (Facebook) Pixel — advertising measurement (consent-based)
US
X Corp.
X (Twitter) Pixel — advertising measurement (consent-based)
US
7. International transfers
Several providers (Figma, Cloudflare, Google, Meta, X) are in the US. Transfers outside the EU/EEA, UK or Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum / IoM equivalent) and, where applicable, the EU–US Data Privacy Framework. We have data processing agreements in place with our processors (Figma, Cloudflare, Usercentrics, Google, Meta and X), each incorporating these safeguards.
8. Retention
Award entry data is kept for the duration of the relevant award cycle and for 3 years afterwards for records, then deleted/anonymised (consistent with the .ART Award Policy "Data storage" section). Analytics data is retained per the Google Analytics setting (default 14 months). The Cloudflare __cf_bm cookie lasts ~30 minutes; the Usercentrics consent record up to 12 months; advertising/analytics cookies last up to ~2 years (see Cookie Policy). Your data will be deleted upon your request. This will delete your award entry. Send the request to the address in §1. Your data will be deleted within 30 days and you will cease receiving communications from us.
9. Your rights (EU / UK / Isle of Man)
You have the right to access, rectification, erasure, restriction, portability, objection, and to withdraw consent. Contact award@art.art or datacontact@nic.art; we respond within one month. Supervisory authorities: EU — your national DPA; UK — ICO (ico.org.uk); Isle of Man — Information Commissioner (inforights.im).
Note on representatives: as we are established in the Isle of Man (outside the EU and the UK) and offer the Award to EU and UK residents, GDPR/UK GDPR Art. 27 may require us to appoint an EU representative and a UK representative as local contact points. [Confirm with counsel and appoint, then fill §1.]
10. California privacy rights (CCPA / CPRA)
California residents may know, delete and correct their personal information and opt out of its “sale” or “sharing”. We do not sell personal information for money; however, our use of advertising technologies (the Meta and X pixels) constitutes “sharing” for cross-context behavioural advertising under the CPRA. You can opt out via the cookie banner “Reject”, our “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” link (which opens these settings), or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent.
11. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct, delete and opt out of targeted advertising. Contact award@art.art.
12. Children
The .ART Award is open to entrants aged 18+ and the Site is not directed to children; we do not knowingly collect children's data.
13. Security
We use technical and organisational measures (TLS/HTTPS, Cloudflare protections, access controls). No method is fully secure; we cannot guarantee absolute security.
14. Changes & contact
We may update this policy; the "Last updated" date will change. UKCI Holdings Limited · First Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · +44 (0) 1624 618444 The AWARD.ART contact for data control and processing questions is datacontact@nic.art.
The company contact for all other questions about the site and our offerings is award@art.art.
←
Main Page
