Privacy Policy
Last updated: 1 September 2026 · Effective: 1 September 2026
This Privacy Policy explains how UKCI Holdings Limited ("we", "us", "our"), owner and operator of name.art (the "Site" / "Platform"), collects, uses, shares and protects your personal data. name.art lets you create, manage and share .ART-related names, identities and profiles, including optional crypto-wallet connection. This Policy meets the EU GDPR, the UK GDPR and Data Protection Act 2018, the Isle of Man Data Protection Act 2018 (Applied GDPR), the California Consumer Privacy Act as amended by the CPRA, and other applicable laws.
1. Who we are (controller)
UKCI Holdings Limited, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Tel: +44 (0) 1624 618444 · IoM company no. 013419V.
General & account contact: info@name.art
Data-protection contact: datacontact@name.art
Data protection representative (EU/EEA, UK & Switzerland). As UKCI Holdings Limited is established in the Isle of Man, we have appointed DataRep (Data Protection Representative Limited, trading as DataRep) as our representative under Art. 27 GDPR (EU/EEA), the UK GDPR and the Swiss FADP. If you are in the EU/EEA, the UK or Switzerland you can contact DataRep about your personal data:
Email datarequest@datarep.com — quote "UKCI Holdings Ltd" in the subject line
Online form www.datarep.com/data-request
By post — DataRep has an address in every EU/EEA country, the UK and Switzerland. Full list: How to contact us via our Data Protection Representative →. Please mark all letters for "DataRep".
For questions about our services (not data protection), contact info@name.art, not DataRep.
2. Scope
Applies to visitors and registered users of name.art, and to anyone who contacts us, wherever located — including the EU/EEA, the UK, the Isle of Man, California, the wider US and elsewhere.
3. Personal data we collect
Account data
email address, username, optional profile details
when you register / sign in
Web3 / wallet
public wallet address, connection metadata
if you connect a crypto wallet
Billing / invoice data
name, email, billing details, and invoice/payment records; payment is made by invoice settled via PayPal (we do not collect or store card numbers on the Site)
if you are invoiced for coins or paid services
Communications
messages you send us
if you contact us
Technical & security
IP address, device/browser, usage data, log data
automatically
Analytics & advertising
usage events / identifiers — only if you consent (Google Analytics, X/Twitter Pixel, via Google Tag Manager)
with your consent
4. How we use your data & legal bases
Create and manage your account; provide the Platform
Performance of a contract
Wallet connection & web3 features
Performance of a contract
Invoicing and taking payment (via PayPal)
Performance of a contract; legal obligation (tax/accounting)
Respond to enquiries / support
Legitimate interests
Newsletter / updates (if offered)
Consent
Security, fraud & abuse prevention
Legitimate interests
Analytics & advertising
Consent
Legal / accounting obligations
Legal obligation
Where we rely on consent you may withdraw it at any time (see the Cookie Policy / "Cookie settings") without affecting prior processing.
5. Cookies, consent & tracking
We use the Usercentrics consent platform with Google Consent Mode. Strictly necessary technologies run the Site; analytics and advertising load only after you consent, and Google Tag Manager and its tags are not loaded before consent. We honour the Global Privacy Control (GPC). Details and how to change your choice: Cookie Policy.
6. Web3, wallets & the blockchain
If you connect a crypto wallet, we process your public wallet address and basic connection metadata to enable web3 features. We do not take custody of your wallet, keys or funds, and we never ask for your private keys or seed phrase. Transactions on public blockchains are public, permanent and outside our control; wallet providers are independent services with their own terms.
7. Sharing & processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
DigitalOcean, LLC
Cloud hosting / delivery of the Platform
US / global
PayPal (Europe) S.à r.l. et Cie, S.C.A. / PayPal, Inc.
Payment of invoices
EU (Luxembourg) / US
WalletConnect
Wallet connection (web3)
US / global
Usercentrics GmbH
Consent management
EU (Germany)
Google LLC
Tag Manager / Analytics (consent-based)
US
X Corp.
X (Twitter) Pixel — advertising (consent-based)
US
8. International transfers
Several of our providers are located outside the EU/EEA, the UK and the Isle of Man — in particular DigitalOcean (hosting, US), Google LLC and X Corp. (US), PayPal (Luxembourg/US) and WalletConnect (US/global); Usercentrics is in the EU (Germany). Transfers from the EU/EEA, the UK or the Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum / Isle of Man equivalent) and, where applicable, the EU–US Data Privacy Framework. We have data processing agreements incorporating these safeguards in place with our processors.
9. Retention
Account & profile data
while your account is active; deleted within a reasonable period after closure (subject to legal retention)
Invoice, payment & tax records
as required by accounting/tax law (typically up to 6–7 years)
Support communications
up to 24 months after the matter is resolved
Analytics
per the Google Analytics setting (default 14 months)
The Usercentrics consent record is kept up to 12 months; analytics/advertising cookies up to ~2 years (see the Cookie Policy). Public on-chain data linked to a wallet cannot be removed from the blockchain by us.
10. Your rights
EU / EEA / UK / Isle of Man. You have the right to access, rectification, erasure, restriction, portability and objection, and to withdraw consent. Contact datacontact@nic.art; we respond within one month. You may complain to a supervisory authority: in the EU your national DPA; in the UK the ICO (ico.org.uk); in the Isle of Man the Information Commissioner (inforights.im). If you are in the EU/EEA, the UK or Switzerland, you can also raise your request through our data protection representative, DataRep — see the details in section 1.
11. California privacy rights (CCPA / CPRA)
California residents may know, delete and correct their personal information and opt out of its "sale" or "sharing". We do not sell personal information for money; our use of advertising technology (the X/Twitter Pixel) may constitute "sharing" for cross-context behavioural advertising. By default you are "opted-out" — these advertising technologies do not load until you "opt-in" through our consent banner, and if you opt in you can "opt-out" at any time via the cookie banner "Reject" / "Cookie settings", our "Do Not Sell or Share My Personal Information" / "Your Privacy Choices" link, or a Global Privacy Control (GPC) signal, which we honour. We do not discriminate for exercising rights; you may use an authorized agent.
12. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct and delete their personal information and to opt out of targeted advertising. Contact datacontact@name.art.
13. Children
The Platform is not directed to children under 18, and we do not knowingly collect their personal data.
14. Security
We use appropriate technical and organisational measures (TLS/HTTPS, access controls, secure cookies). No method is fully secure; we cannot guarantee absolute security.v
Contact & Changes
We may update this policy; the "Last updated" date will change. UKCI Holdings Limited, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF ·
The name.art contact for data control and processing questions is datacontact@name.art.
If you are in the EU/EEA, the UK or Switzerland, you can also raise your request through our data protection representative, DataRep — see the details in section 1.
The company contact for all other questions about the site and our offerings is info@name.art.
Last updated