Privacy Policy
Last updated: 23 June 2026
Effective: 23 June 2026
This Privacy Policy explains how UK Creative Ideas Limited ("we", "us", "our"), operator of the nic.art website (the "Site") — the official website of the .ART domain registry — collects, uses, shares and protects personal data of visitors to the Site. It is designed to meet the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the Isle of Man Data Protection Act 2018 (Applied GDPR), the California Consumer Privacy Act as amended by the CPRA, and other applicable laws.
1. Who we are (controller)
UK Creative Ideas Limited, 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · Isle of Man company no. 002002V.
General contact: privacy@nic.art
Data Protection Officer: dpo@art.art
2. Scope
3. Personal data we collect
The Site has no user accounts or login. We collect:
CATEGORY | EXAMPLES | WHEN |
|---|---|---|
Contact form data | name, email address, your message | when you use the "Contact Us" form |
News / updates subscription | email address | if you subscribe to our news |
Unsuspend request | name, email address, domain name, details of your request | if you submit an unsuspend request |
Abuse report | name, email address, domain name, details of the report | if you file an abuse report |
4. How we use your data and our legal bases
PURPOSE | LEGAL BASIS (Art. 6 GDPR) |
|---|---|
Respond to enquiries and contact requests | Legitimate interests (and consent where given) |
Send news/updates you subscribed to | Consent |
Handle unsuspend requests and abuse reports | Legitimate interests; compliance with our registry obligations; legal obligation |
Operate, secure and maintain the Site; prevent fraud and abuse | Legitimate interests |
Analytics and advertising | Consent |
Comply with legal and accounting obligations | Legal obligation |
Where we rely on consent you may withdraw it at any time (see the Cookie Policy and "Cookie settings", or unsubscribe) without affecting processing carried out before withdrawal.
5. Forms and consent
Our forms collect only the information needed for the relevant purpose and display a notice with a link to this Privacy Policy. Where we ask for your consent (for example, to receive news/updates), we use an unticked checkbox, and you may unsubscribe or object at any time.
6. Cookies, consent and tracking
We use the Usercentrics consent platform together with Google Consent Mode. Strictly necessary and platform-essential technologies run the Site and keep it secure; analytics and advertising technologies load only after you consent, and Google Tag Manager and its tags are not loaded before consent. We honour the Global Privacy Control (GPC) signal. Full details, and how to change your choice, are in our Cookie Policy.
7. Sharing and processors
We share personal data only with providers acting on our instructions under a data processing agreement, and where required by law. We do not sell personal data for money.
PROVIDER | PURPOSE | LOCATION |
|---|---|---|
Wix.com Ltd. | Website hosting and platform (including platform security and error monitoring) | Israel (EU adequacy) / US |
Usercentrics GmbH | Consent management | EU (Germany) |
Google LLC | Tag Manager and Analytics (consent-based) | US |
X Corp. | X (Twitter) Pixel — advertising (consent-based) | US |
Google LLC (YouTube) | Embedded video content / thumbnails | US |
8. International transfers
Several of our providers are located in the United States; Wix is in Israel (covered by an EU adequacy decision) with US sub-processors. Transfers from the EU/EEA, the UK or the Isle of Man rely on appropriate safeguards — Standard Contractual Clauses (with the UK Addendum or Isle of Man equivalent) and, where applicable, the EU–US Data Privacy Framework. We maintain data processing agreements with our processors.
9. Retention
DATA | RETENTION |
|---|---|
Contact / enquiry messages | up to 24 months after the matter is resolved |
News / updates subscription | until you unsubscribe |
Unsuspend requests and abuse reports | up to 24 months after the request is closed (longer where required to meet a legal or registry obligation, or to establish, exercise or defend legal claims) |
Analytics | per the Google Analytics setting (default 14 months) |
Platform session identifiers expire shortly after your session; the Usercentrics consent record is kept for up to 12 months; analytics and advertising cookies last up to about 2 years (see the Cookie Policy).
10. Your rights (EU / UK / Isle of Man)
You have the right to access, rectification, erasure, restriction, portability and objection, and to withdraw consent. To exercise your rights, contact privacy@nic.art or dpo@art.art; we respond within one month. You may also complain to a supervisory authority: in the EU, your national data protection authority; in the UK, the Information Commissioner's Office (ico.org.uk); in the Isle of Man, the Information Commissioner (inforights.im).
11. California privacy rights (CCPA / CPRA)
California residents have the right to know, delete and correct their personal information and to opt out of its "sale" or "sharing". We do not sell personal information for money; however, our use of advertising technology (the X/Twitter Pixel) may constitute "sharing" for cross-context behavioural advertising under the CPRA. You can opt out via the cookie banner "Reject", through the "Do Not Sell or Share My Personal Information" / "Your Privacy Choices" control, or by sending a Global Privacy Control (GPC) signal, which we honour. We do not discriminate against you for exercising your rights, and you may use an authorized agent.
12. Other US states
Residents of Virginia, Colorado, Connecticut, Texas and similar states have rights to access, correct and delete their personal information and to opt out of targeted advertising. To exercise these rights, contact privacy@nic.art.
13. Children
The Site is not directed to children and we do not knowingly collect children's data.
14. Security
We use appropriate technical and organisational measures (TLS/HTTPS, platform security controls, access controls). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
15. Changes & contact
We may update this Policy from time to time; the "Last updated" date above will change. For any questions about this Policy or your personal data, contact:
UK Creative Ideas Limited · 1st Floor, 11–13 Hill Street, Douglas, Isle of Man, IM1 1EF · privacy@nic.art · dpo@art.art.
This Policy applies to visitors of the nic.art website and to anyone who contacts us, subscribes to our news/updates, submits an unsuspend request or files an abuse report through the Site, whether located in the EU/EEA, the UK, the Isle of Man, California, the wider United States, or elsewhere.
nic.art is the informational website of the .ART registry. The registration of .ART domain names and the processing of domain registrant ("WHOIS"/RDAP) data are governed by the registry's domain registration terms and the applicable ICANN agreements, and are not covered by this Site Privacy Policy.