> For the complete documentation index, see [llms.txt](https://docs.name.art/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.name.art/privacy-policy.md). # Privacy Policy Last updated: 1 September 2026 · Effective: 1 September 2026 This Privacy Policy explains how **UKCI Holdings Limited** ("we", "us", "our"), owner and operator of **name.art** (the "Site" / "Platform"), collects, uses, shares and protects your personal data. name.art lets you create, manage and share .ART-related names, identities and profiles, including optional crypto-wallet connection. This Policy meets the EU GDPR, the UK GDPR and Data Protection Act 2018, the Isle of Man Data Protection Act 2018 (Applied GDPR), the California Consumer Privacy Act as amended by the CPRA, and other applicable laws. ### 1. Who we are (controller) **UKCI Holdings Limited**, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V. * General & account contact: * Data-protection contact: **Data protection representative (EU/EEA, UK & Switzerland).** As **UKCI Holdings Limited** is established in the Isle of Man, we have appointed **DataRep** (Data Protection Representative Limited, trading as DataRep) as our representative under Art. 27 GDPR (EU/EEA), the UK GDPR and the Swiss FADP. If you are in the EU/EEA, the UK or Switzerland you can contact DataRep about your personal data: * **Email** — quote "UKCI Holdings Ltd" in the subject line * **Online form** [www.datarep.com/data-request](https://www.datarep.com/data-request) * **By post** — DataRep has an address in every EU/EEA country, the UK and Switzerland. Full list: [How to contact us via our Data Protection Representative →](https://www.award.art/how-to-contact-datarep-dp). Please mark all letters for "DataRep". For questions about our services (not data protection), contact , not DataRep.
### 2. Scope Applies to visitors and registered users of name.art, and to anyone who contacts us, wherever located — including the EU/EEA, the UK, the Isle of Man, California, the wider US and elsewhere. ### 3. Personal data we collect | Category | Examples | When | | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------- | | Account data | email address, username, optional profile details | when you register / sign in | | Web3 / wallet | public wallet address, connection metadata | if you connect a crypto wallet | | Billing / invoice data | name, email, billing details, and invoice/payment records; payment is made by invoice settled via **PayPal** (we do not collect or store card numbers on the Site) | if you are invoiced for coins or paid services | | Communications | messages you send us | if you contact us | | Technical & security | IP address, device/browser, usage data, log data | automatically | | Analytics & advertising | usage events / identifiers — **only if you consent** (Google Analytics, X/Twitter Pixel, via Google Tag Manager) | with your consent | ### 4. How we use your data & legal bases | Purpose | Legal basis (Art. 6 GDPR) | | ---------------------------------------------------- | ------------------------------------------------------------ | | Create and manage your account; provide the Platform | Performance of a contract | | Wallet connection & web3 features | Performance of a contract | | Invoicing and taking payment (via PayPal) | Performance of a contract; legal obligation (tax/accounting) | | Respond to enquiries / support | Legitimate interests | | Newsletter / updates (if offered) | Consent | | Security, fraud & abuse prevention | Legitimate interests | | Analytics & advertising | Consent | | Legal / accounting obligations | Legal obligation | Where we rely on consent you may withdraw it at any time (see the Cookie Policy / "Cookie settings") without affecting prior processing. ### 5. Cookies, consent & tracking We use the **Usercentrics** consent platform with **Google Consent Mode**. Strictly necessary technologies run the Site; analytics and advertising load **only after you consent**, and Google Tag Manager and its tags are not loaded before consent. We honour the Global Privacy Control (GPC). Details and how to change your choice: [Cookie Policy](/cookie-policy.md). ### 6. Web3, wallets & the blockchain If you connect a crypto wallet, we process your **public wallet address** and basic connection metadata to enable web3 features. We do not take custody of your wallet, keys or funds, and we never ask for your private keys or seed phrase. Transactions on public blockchains are **public, permanent and outside our control**; wallet providers are independent services with their own terms.
### 7. Sharing & processors We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money. | Provider | Purpose | Location | | ------------------------------------------------------ | ----------------------------------------------- | -------------------- | | DigitalOcean, LLC | Cloud hosting / delivery of the Platform | US / global | | PayPal (Europe) S.à r.l. et Cie, S.C.A. / PayPal, Inc. | Payment of invoices | EU (Luxembourg) / US | | WalletConnect | Wallet connection (web3) | US / global | | Usercentrics GmbH | Consent management | EU (Germany) | | Google LLC | Tag Manager / Analytics (consent-based) | US | | X Corp. | X (Twitter) Pixel — advertising (consent-based) | US | ### 8. International transfers Several of our providers are located outside the EU/EEA, the UK and the Isle of Man — in particular **DigitalOcean** (hosting, US), **Google LLC** and **X Corp.** (US), **PayPal** (Luxembourg/US) and **WalletConnect** (US/global); **Usercentrics** is in the EU (Germany). Transfers from the EU/EEA, the UK or the Isle of Man rely on appropriate safeguards — **Standard Contractual Clauses** (with the UK Addendum / Isle of Man equivalent) and, where applicable, the **EU–US Data Privacy Framework**. We have data processing agreements incorporating these safeguards in place with our processors. ### 9. Retention | Data | Retention | | ------------------------------ | ----------------------------------------------------------------------------------------------------------- | | Account & profile data | while your account is active; deleted within a reasonable period after closure (subject to legal retention) | | Invoice, payment & tax records | as required by accounting/tax law (typically up to 6–7 years) | | Support communications | up to **24 months** after the matter is resolved | | Analytics | per the Google Analytics setting (default 14 months) | The Usercentrics consent record is kept up to 12 months; analytics/advertising cookies up to \~2 years (see the Cookie Policy). Public on-chain data linked to a wallet cannot be removed from the blockchain by us. ### 10. Your rights **EU / EEA / UK / Isle of Man.** You have the right to access, rectification, erasure, restriction, portability and objection, and to withdraw consent. Contact ; we respond within one month. You may complain to a supervisory authority: in the EU your national DPA; in the UK the ICO ([ico.org.uk](https://ico.org.uk)); in the Isle of Man the Information Commissioner ([inforights.im](https://www.inforights.im)). If you are in the EU/EEA, the UK or Switzerland, you can also raise your request through our data protection representative, **DataRep** — see the details in section 1. ### 11. California privacy rights (CCPA / CPRA) California residents may know, delete and correct their personal information and opt out of its "sale" or "sharing". We do not sell personal information for money; our use of advertising technology (the X/Twitter Pixel) may constitute "sharing" for cross-context behavioural advertising. **By default you are "opted-out" — these advertising technologies do not load until you "opt-in" through our consent banner, and if you opt in you can "opt-out" at any time** via the cookie banner "Reject" / "Cookie settings", our "Do Not Sell or Share My Personal Information" / "Your Privacy Choices" link, or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent. ### 12. Other US states Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct and delete their personal information and to opt out of targeted advertising. Contact . ### 13. Children The Platform is not directed to children under 18, and we do not knowingly collect their personal data. ### 14. Security We use appropriate technical and organisational measures (TLS/HTTPS, access controls, secure cookies). No method is fully secure; we cannot guarantee absolute security.v ### Contact & Changes We may update this policy; the "Last updated" date will change. **UKCI Holdings Limited**, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · The name.art contact for data control and processing questions is . If you are in the EU/EEA, the UK or Switzerland, you can also raise your request through our data protection representative, **DataRep** — see the details in section 1. The company contact for all other questions about the site and our offerings is .