Privacy Policy

1. Introduction & Scope

Welcome to ARTS District USA. We built this platform because we believe artists deserve a marketplace that puts them first — a space where creative work is celebrated, commerce is fair, and your personal information is handled with the care and respect you deserve. We pledge transparency in every aspect of our data practices.

This Privacy Policy applies to all individuals who visit, register on, or use ARTSDistrictUSA.com (the "Platform"), including artists who list their work, collectors and buyers who purchase artwork, and general visitors who browse our marketplace. It governs how ARTS District USA ("we," "us," or "our") gathers, uses, shares, and safeguards your personal information in connection with the Platform and any related services, features, emails, or communications we provide.

Who We Are: ARTS District USA is a Delaware C-Corporation headquartered in the United States. We operate ARTSDistrictUSA.com as an artist-first online marketplace connecting original artists with collectors and buyers primarily within the United States. Our Platform infrastructure is hosted on Amazon Web Services (AWS) in the United States, and all data is processed within US-based data centers. We welcome participants from around the world.

What This Policy Covers: This Policy describes our practices regarding personal data — information that identifies or could reasonably be used to identify you. It does not apply to third-party websites, applications, or services that may be linked from our Platform. Those third parties operate under their own privacy terms, and we encourage you to review those policies directly.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Platform.

2. Information We Gather

We are committed to gathering only the information we genuinely need to operate our Platform and serve you well.

2.1 Information You Provide Directly

Account Registration Data: When you create an account, we gather your name, email address, username, and password (stored in encrypted form). You may also optionally provide a profile photo and a brief personal biography.

Contact & Identity Information: As part of identity verification and transaction processing, we may gather your full legal name, mailing address, phone number, and government-issued identification details where required.

Artist-Specific Data: Artists provide a richer set of information including:

• Portfolio and Creative Work Information: Artwork images, titles, descriptions, dimensions, medium, edition information, pricing, and availability. Metadata embedded in or associated with uploaded artwork files may also be gathered.
• Artist Biography and Statement: Your personal artistic statement, exhibition history, credentials, influences, and profile content
• Bank and Payout Information: Financial account details for payout purposes, processed through secure, industry-standard payment infrastructure
• Identity Verification Materials: Documents submitted for seller account approval or high-value transactions
• Tax Documentation: Tax identification information required for reporting obligations (e.g., W-9, W-8BEN)

Buyer and Collector Data: Collectors and buyers provide:

• Shipping and Delivery Information: Full name, shipping address, and delivery instructions
• Purchase and Order History: Details of artworks purchased, order dates, amounts, and transaction references
• Wishlist and Favorites: Artworks you save or add to collections on the Platform
• Communication Preferences: Your choices regarding marketing emails, newsletters, and notifications

Communications You Send Us: When you contact our support team, submit a review, leave a comment, participate in a survey, or otherwise communicate with us, we retain those communications and your contact details.

2.2 Information Gathered Automatically

• Device and Technical Information: Your IP address, browser type and version, operating system, device type, device identifiers, and screen resolution
• Usage and Navigation Data: Pages you visit, links you click, time spent on pages, search queries, referral URLs, and the sequence of your interactions within the Platform
• Location Information: General geographic location inferred from your IP address (typically city or region level). We do not gather precise GPS-level location unless you explicitly grant permission.
• Session and Log Data: Server logs recording access times, error reports, and system activity
• Purchase and Browsing Behavior: Artworks you view, categories you explore, and price ranges you browse

2.3 Information Received from Third Parties

• Social Login Providers: If you register or sign in using Google or Facebook, we receive basic profile information authorized by you
• Payment Processors: Stripe and PayPal may provide transaction confirmation data and fraud screening signals. They do not share your full financial account details with us.
• Identity Verification Services: Third-party providers may share verification status in connection with seller onboarding
• Analytics and Marketing Partners: We may receive aggregated or pseudonymized data to understand Platform performance and marketing effectiveness

3. How We Gather Your Information

3.1 Direct Collection

Most of the information we hold comes directly from you — when you create an account, complete your profile, make a purchase, list artwork, contact our team, or otherwise interact with the Platform. You always know when you are providing information to us in these contexts.

3.2 Automatic Collection

Certain technical and behavioral data is gathered automatically as you navigate our Platform through server logs, cookies, pixel tags, and similar tracking technologies (described in Section 5). While this collection is largely invisible to you in the moment, we are committed to being fully transparent about what is gathered and why.

3.3 Third-Party Sources

We supplement information with data from third-party service providers when necessary to provide services, prevent fraud, comply with legal obligations, or improve Platform functionality. In every case, we require these third parties to be authorized to share such information and comply with applicable privacy law.

4. Purpose of Data Processing

We use the personal information we gather for specific, defined purposes. We are committed to not using your data in ways that would surprise or concern you.

4.1 Providing and Fulfilling Our Services

• Creating and managing your account
• Displaying artwork listings and facilitating browsing and discovery
• Processing purchases and issuing order confirmations
• Coordinating shipping and delivery logistics
• Issuing payments and royalties to artists
• Providing customer support and resolving disputes

4.2 Account Management and Authentication

We process your account and identity information to verify your identity, authenticate logins, maintain account security, and enable account recovery if needed.

4.3 Communication

• Transactional Communications: Order confirmations, shipping updates, payment notices, receipts, and account security alerts. These are necessary to our service and are not subject to marketing opt-out.
• Platform Announcements: Important updates about changes to the Platform, our policies, or your account
• Marketing and Promotional Content: With your explicit consent, newsletters, new artist features, curated collections, and promotions. You may withdraw this consent at any time.

4.4 Improving the Platform

We analyze usage data, feedback, and behavior patterns to understand how our Platform is used, identify areas for improvement, develop new features, and optimize the experience for artists and collectors.

4.5 Personalization

Where you have consented, we use your browsing behavior, purchase history, and preferences to personalize the artworks, artists, and content we surface for you. Personalization is always a choice — you can opt out without losing access to the Platform.

4.6 Fraud Prevention and Platform Integrity

We process certain data — including IP addresses, device identifiers, transaction patterns, and identity verification outputs — to detect, investigate, and prevent fraudulent transactions and unauthorized account access.

4.7 Legal Compliance

We process data to comply with applicable laws and regulations, including tax reporting requirements, anti-money laundering obligations, responses to lawful governmental requests, and enforcement of our Terms of Service.

4.8 Legal Claims

Where necessary, we may process your data to establish, exercise, or defend legal claims.

5. Cookies & Tracking Technologies

5.1 What Cookies Are

Cookies are small text files placed on your device when you visit a website. Along with pixel tags, web beacons, and local storage objects, they allow websites to recognize returning visitors, remember preferences, analyze behavior, and deliver targeted content.

5.2 Categories of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function (login, session, cart, secure transactions). You cannot opt out of essential cookies while using the Platform.
• Performance and Analytics Cookies: Help us understand how visitors interact with our Platform. Tools in this category include Google Analytics. Where required by law, we obtain your consent before enabling these cookies.
• Functionality Cookies: Remember your preferences such as preferred language, currency display, or saved filter settings.
• Targeting and Marketing Cookies: With your explicit consent, we or our advertising partners may place cookies that track your interests and browsing behavior. Only activated where you have affirmatively opted in.

5.3 Third-Party Cookies

Some cookies are placed by third parties, including Google Analytics, Meta Pixel (if applicable), and other advertising or social media partners. We do not control these third-party cookies — please review the respective privacy policies of these providers.

5.4 How to Manage Cookies

• Our Cookie Consent Tool: Displayed when you first visit the Platform, and accessible through the "Cookie Settings" link in our site footer at any time
• Your Browser Settings: Most browsers allow you to block or delete cookies. Note that blocking certain cookies may affect Platform functionality.
• Opt-Out Tools: For analytics tracking, you may install the Google Analytics Opt-Out Browser Add-On. For interest-based advertising, tools like optout.networkadvertising.org and www.aboutads.info/choices allow you to opt out.

6. Sharing & Disclosure of Information

We are selective about who we share your information with, and we do so only when necessary, lawful, and consistent with this Policy. We do not sell your personal information to third parties. We never have, and we do not intend to. Your data is not a product we trade.

6.1 Service Providers

We work with carefully vetted third-party vendors who assist in operating the Platform, including hosting and cloud infrastructure providers, email delivery services, customer support platforms, analytics providers, identity verification services, fraud detection services, and content delivery networks. Each is bound by contractual obligations to process your data only on our instructions, for the purposes we specify, and in accordance with applicable privacy law.

6.2 Payment Processors

Payment transactions are handled by Stripe and PayPal. When you make a purchase or receive a payout, your financial details are submitted directly to these processors under their own privacy and security terms. We receive only confirmation data and tokenized references — we do not receive or store your full card number, bank account credentials, or other sensitive financial credentials.

6.3 Shipping and Logistics Partners

When a purchase is completed, we share the necessary shipping information (buyer name, delivery address, and order details) with our shipping partners solely for fulfillment purposes.

6.4 Artists and Sellers

When a buyer places an order, we share the information necessary for the artist or seller to fulfill it — typically a name, shipping address, and order details. Artists do not receive your payment card information. Our Terms of Service require artists to handle buyer information with appropriate care.

6.5 Legal Requirements and Safety

We may disclose your personal information if we believe in good faith that doing so is necessary to comply with a legal obligation or valid legal process; enforce our Terms of Service; protect the safety, rights, or property of ARTS District USA, our users, or the public; or detect, prevent, or address fraud, security, or technical issues.

6.6 Business Transfers

If ARTS District USA is involved in a merger, acquisition, restructuring, or asset sale, your personal information may be transferred as part of that transaction. If such a transfer results in a materially different use of your data, we will notify affected users in advance.

6.7 With Your Consent

With your explicit permission, we may share your information for purposes beyond those described in this Policy. You will always have the ability to withdraw such consent.

7. Artist Data & Seller Information

Because ARTS District USA is an artist-first marketplace, we hold artist data in especially high regard and handle it with additional care.

7.1 Public Portfolio Information

Your artist profile, biography, artwork listings, portfolio images, prices, and associated metadata are made publicly visible on the Platform as a core feature of your participation. You are in control of your public profile and may update, edit, or remove publicly displayed information through your account dashboard at any time.

7.2 Financial and Payout Information

Banking details and financial account information you provide for payout purposes are treated as strictly confidential. This information:

• Is stored in encrypted form and accessible only to authorized personnel with a specific operational need
• Is never displayed publicly or shared with buyers, collectors, or other users
• Is shared only with our payment processing partners (such as Stripe) solely for the purpose of executing your payouts
• Is retained only as long as you maintain an active seller account or as required by applicable financial and tax law

7.3 Artist Identity Verification

We may require artists to complete an identity verification process to establish authenticity and prevent fraud. Information submitted for verification (such as government-issued ID documents) is processed by our verification partners under strict confidentiality obligations and is not retained by ARTS District USA beyond what is required for compliance or dispute resolution.

7.4 Tax and Reporting Information

Tax identification information submitted for IRS or international tax compliance reporting is stored with the highest level of security, used only for legally required reporting purposes, and never shared beyond what is required by law.

7.5 AI and Machine Learning — A Firm Commitment

Your creative work metadata and portfolio information — including artwork images, titles, descriptions, tags, and associated data — will never be used to train AI or machine learning models without your explicit written consent. This applies to ARTS District USA's own operations and to any third parties we engage. We will never quietly include your creative work in AI training datasets. Any future program that would involve your artwork in AI-related training will require you to opt in affirmatively, with a clear explanation of how your work would be used.

7.6 Artwork Provenance and Transaction Records

We maintain records of artwork transactions (sales, transfers of ownership, and associated metadata) to support provenance documentation — a valuable feature for both artists and collectors. These records are kept for the duration of your account and may be retained beyond account closure to preserve the integrity of provenance chains. Artists may request a copy of their transaction records at any time.

8. Payment & Financial Data

8.1 How Payments Are Processed

All payment card transactions on ARTS District USA are processed through third-party payment processors — currently Stripe and PayPal — that are certified to the Payment Card Industry Data Security Standard (PCI DSS). When you enter your payment details on our Platform, those details are transmitted directly and securely to the payment processor. We do not transmit, receive, or store your full card number, CVV/security code, or full payment account credentials.

8.2 Tokenized References

The only payment-related information we retain is a tokenized reference — a non-reversible identifier provided by our payment processor that allows us to associate a transaction with your account without exposing your actual financial details. This token cannot be used to initiate a new transaction or to retrieve your card data.

8.3 Payout Information for Artists

Bank account and payout information provided by artists is stored in encrypted form in our systems. We use this information solely to initiate payments to you through our payment processing infrastructure.

8.4 Fraud Monitoring

Transaction data — including purchase amounts, frequency, IP addresses, and device information — may be analyzed by automated fraud detection systems to identify suspicious activity and protect the integrity of the marketplace.

9. Data Retention

We keep your personal information for as long as necessary to fulfill the purposes described in this Policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. We do not hold your data indefinitely.

9.1 Active Accounts

While your account remains active, we retain all information associated with it to provide our services continuously and maintain accurate records.

9.2 After Account Closure

• Profile and listing data is removed from public view promptly
• Transaction and order records are retained for a minimum of seven (7) years to satisfy tax, financial reporting, and legal compliance requirements
• Communications and support records are typically retained for three (3) years following account closure
• Security and fraud-related logs may be retained for up to five (5) years to support fraud investigations
• Tax documentation is retained for the period required by applicable tax law, typically seven (7) years or more

9.3 Deletion Upon Request

Subject to the exceptions described above, you may request deletion of your personal information at any time. We will honor such requests where we are not required by law to retain the data, where the data is not necessary for the completion of an outstanding transaction or dispute, and where deletion does not conflict with legitimate business needs. See Section 10 for how to submit a deletion request.

9.4 Anonymization

In some cases, rather than deleting data entirely, we may anonymize it — stripping away identifiers so that it can no longer be linked to you — for use in aggregate analytics. Anonymized data is not subject to deletion requests, as it no longer constitutes personal information.

10. Your Privacy Rights

Regardless of where you are located, we are committed to honoring your rights over your personal information. We offer the following rights to all users of ARTS District USA:

• Right of Access: Request a copy of the personal information we hold about you and how we use it
• Right to Correction: Request correction of inaccurate or incomplete information. Many corrections can be made directly through your account dashboard.
• Right to Deletion: Request deletion of your personal information, subject to certain exceptions (legal retention requirements, outstanding transactions)
• Right to Data Portability: Request your personal information in a structured, machine-readable format, or transfer to another service provider where technically feasible
• Right to Object: Object to our processing where we rely on legitimate interests as our legal basis
• Right to Restriction: Request restriction of our processing while a dispute or objection is being resolved
• Right to Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to Opt Out of Marketing: Unsubscribe from marketing emails at any time via the "Unsubscribe" link in any marketing communication or through your account settings

How to Exercise Your Rights: Contact us at privacy@artdistrictusa.com or via the contact details in Section 20. We will respond within thirty (30) days (or within the timeframe required by applicable law) and will not charge a fee unless your request is manifestly unfounded or excessive. We may need to verify your identity before processing certain requests.

11. Rights for European Residents (GDPR)

This section applies to individuals located in the EU, EEA, and UK, where the GDPR or equivalent legislation applies.

11.1 Our Role as Data Controller

For purposes of the GDPR, ARTS District USA — a Delaware C-Corporation incorporated and headquartered in the United States — acts as the data controller with respect to personal data gathered through the Platform. As a US-based company processing personal data of individuals in the European Economic Area, we are committed to complying with the GDPR and have implemented appropriate safeguards for the handling of EU/EEA personal data.

11.2 Legal Bases for Processing

• Contract Performance (Article 6(1)(b) GDPR): Processing necessary to enter into and perform our contract with you — account creation, transaction processing, order fulfillment, and payment/payout operations
• Legitimate Interests (Article 6(1)(f) GDPR): Fraud prevention, Platform security, analytics, and improving our services — provided these interests are not overridden by your fundamental rights
• Consent (Article 6(1)(a) GDPR): For marketing communications, personalization, non-essential cookies, and other optional processing. You may withdraw consent at any time.
• Legal Obligation (Article 6(1)(c) GDPR): Where required by EU or member state law, including tax compliance and regulatory reporting
• Special Categories: We do not intentionally gather special categories of personal data. If any such data is incidentally included in content you submit, please contact us to request its removal.

11.3 Data Protection Officer

Our CEO, Heiko Katins, serves as the designated Data Protection Officer (DPO) contact to oversee our compliance with applicable data protection law. To reach our DPO, please write to privacy@artdistrictusa.com with the subject line "DPO Inquiry."

11.4 International Data Transfers

ARTS District USA is a Delaware C-Corporation, and our Platform, infrastructure, and data processing all take place within the United States. If you are located in the EEA, the United Kingdom, or another jurisdiction outside the United States, please be aware that by using our Platform, your personal data will be processed and stored in the US. To protect your information, we implement the following safeguards:

• Standard Contractual Clauses (SCCs): Where required, we incorporate European Commission-approved SCCs into agreements with our service providers and processors, imposing binding data protection commitments on all parties
• EU-US Data Privacy Framework: Where applicable, we rely on certifications under the EU-US Data Privacy Framework as a recognized mechanism for lawful data transfers
• Supplementary Measures: We maintain technical safeguards such as encryption in transit and at rest, access controls, and regular security assessments to ensure your data remains protected regardless of where you access our Platform from

11.5 Your GDPR Rights

In addition to the rights in Section 10, EU/EEA/UK residents have the right to lodge a complaint with their local data protection supervisory authority in their country of residence or place of work. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing without human involvement.

12. Rights for California Residents (CCPA/CPRA)

This section supplements the information above and applies to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

12.1 Categories of Personal Information We Have Gathered

• Identifiers: Name, email address, IP address, username, account ID
• Personal Information (Cal. Civ. Code § 1798.80): Name, address, phone number, financial account information (for payout purposes), ID documents submitted for verification
• Commercial Information: Purchase history, artwork sales records, transaction data
• Internet or Network Activity: Browsing behavior on the Platform, search history, interaction with advertisements
• Geolocation Data: General location inferred from IP address
• Professional or Employment-Related Information: Artist biography, credentials, exhibition history
• Inferences: Preferences and interests inferred from usage behavior

12.2 No Sale or Sharing of Personal Information

We do not sell your personal information. We also do not share your personal information for cross-context behavioral advertising purposes unless you have provided explicit consent. You may submit an opt-out request at any time by contacting us at privacy@artdistrictusa.com or via the "Do Not Sell or Share My Personal Information" link in our website footer.

12.3 Sensitive Personal Information

To the extent that we gather sensitive personal information (such as government ID numbers or financial account information), we use it only for the purposes permitted by the CPRA — specifically, to provide our services, comply with legal obligations, and prevent fraud. We do not use sensitive personal information to infer characteristics about you.

12.4 Your California Rights

• Right to Know: Request disclosure of the categories and specific pieces of personal information gathered about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out of Sale/Sharing: Opt out of the sale or sharing of your personal information
• Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to uses authorized by the CPRA
• Right to Non-Discrimination: Exercise your privacy rights without being discriminated against

12.5 Submitting a California Privacy Request

Contact us at privacy@artdistrictusa.com or write to us at the address in Section 20. We will acknowledge your request within ten (10) days and respond within forty-five (45) days, with an extension of an additional forty-five (45) days where reasonably necessary. You may designate an authorized agent to make a request on your behalf.

12.6 California Shine the Light

California Civil Code Section 1798.83 entitles California residents to request information about whether we share personal information with third parties for those third parties' direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes without your consent.

13. Rights for Nevada Residents

Under Nevada Revised Statutes Chapter 603A, Nevada residents may opt out of the "sale" of certain covered personal information. We do not sell your personal information as defined under Nevada law or any other applicable statute. If you are a Nevada resident and wish to submit an opt-out request as a precautionary measure, please contact us at privacy@artdistrictusa.com. We will respond within sixty (60) days, with an extension of thirty (30) days where necessary.

14. Rights for Colorado, Connecticut, Utah & Virginia Residents

This section applies to residents of Colorado, Connecticut, Utah, and Virginia under their respective comprehensive consumer privacy laws (CPA, CTDPA, UCPA, and VCDPA).

14.1 Rights Available

• Right of Access: Confirm whether we are processing your personal data and obtain a copy
• Right to Correct: Request correction of inaccurate personal data
• Right to Delete: Request deletion of personal data you have provided or that we have gathered
• Right to Data Portability: Obtain a portable copy of your personal data
• Right to Opt Out: Opt out of the sale of personal data, targeted advertising, and profiling that produces legal or similarly significant effects

The availability of specific rights and any associated thresholds differ among these states. We honor each applicable state's requirements for our users in those states.

14.2 How to Submit a Request

Contact us at privacy@artdistrictusa.com. We will respond within forty-five (45) days (with one extension where permitted) and will verify your identity before processing your request.

14.3 Appeals

If we decline to act on your rights request, you may appeal by submitting a written explanation to privacy@artdistrictusa.com with the subject line "Privacy Rights Appeal." If your appeal is denied, you may have the right to submit a complaint to your state's Attorney General.

15. International Data Transfers

ARTS District USA is incorporated in the State of Delaware and operates entirely from the United States. All Platform data is processed and stored on US-based infrastructure (Amazon Web Services). If you access our Platform from outside the United States, your personal information will be transferred to and maintained in the US.

We recognize that users from various jurisdictions may have different expectations regarding data protection. To ensure your information is handled responsibly, we employ the following measures:

• Contractual Safeguards: We require all service providers that handle your data to enter into binding contractual agreements that include robust data protection provisions, including Standard Contractual Clauses where applicable for EU/EEA data subjects
• Security Standards: Our service providers are contractually required to maintain appropriate technical and organizational safeguards, consistent with industry best practices
• Proportionality: We transfer only the personal data that is reasonably necessary to fulfill the relevant purpose, limiting exposure and reducing risk

For questions regarding cross-border data handling or the protective measures we have in place, please contact us at privacy@artdistrictusa.com.

16. Children's Privacy

ARTS District USA is intended for use by individuals who are at least sixteen (16) years of age. Our Platform is not directed at children under the age of 16, and we do not knowingly gather personal information from children under 16. If you are a parent or guardian and believe that a child under 16 has registered on our Platform, please contact us immediately at privacy@artdistrictusa.com. Upon verification, we will promptly delete the child's information. We comply with the Children's Online Privacy Protection Act (COPPA) and applicable international laws.

17. Data Security

Safeguarding your personal information is an obligation we take seriously and invest in continuously. We implement industry-standard technical and organizational security measures designed to protect your information against unauthorized access, disclosure, alteration, and destruction.

17.1 Technical Safeguards

• Encryption in Transit: All data transmitted between your browser and our Platform is encrypted using TLS/SSL protocol
• Encryption at Rest: Sensitive data stored in our systems is encrypted using industry-standard encryption algorithms
• Access Controls: Access to personal data is limited to personnel with a specific operational need, enforced through role-based access controls and multi-factor authentication
• Security Monitoring: We monitor our systems for suspicious activity, known vulnerabilities, and potential intrusions on an ongoing basis

17.2 Organizational Safeguards

We train our staff on privacy and data security practices, maintain internal data handling policies, conduct regular risk assessments, and require our service providers to implement comparable security standards.

17.3 Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we are committed to notifying affected users as promptly as practicable, notifying relevant regulatory authorities as required by law (e.g., within 72 hours under the GDPR), and providing clear, actionable information about what occurred. Please also play a role in keeping your account secure: use a strong, unique password and contact us immediately at privacy@artdistrictusa.com if you suspect unauthorized access.

18. Third-Party Links and External Services

Our Platform may contain links to external websites, social media pages, third-party tools, or embedded content from other providers. Once you leave ARTSDistrictUSA.com, this Privacy Policy no longer applies. We are not responsible for the privacy practices, content, or security of third-party sites — including external artist websites, social media platforms, payment processor portals, and shipping provider tracking pages. We encourage you to review the privacy policy of any external site before providing personal information.

19. Updates to This Policy

When we make changes to this Policy, we will update the "Last Reviewed" date at the top of this document and post the revised Policy on this page. For material changes — those that meaningfully alter how we use your data or your rights — we will notify you by email and/or through a prominent notice on the Platform at least thirty (30) days before the changes take effect where feasible.

Your continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. Archived versions of prior Privacy Policies are available upon request by contacting privacy@artdistrictusa.com.

20. Contact Information

We want you to feel comfortable reaching out with any questions, concerns, or requests relating to this Policy or our data practices.

For EU/EEA/UK Users — Data Protection Officer:
Email privacy@artdistrictusa.com with the subject line "DPO Inquiry."

For Regulatory Authorities:
Email privacy@artdistrictusa.com with the subject line "Regulatory Inquiry."

We will acknowledge your request promptly and aim to respond substantively within the timeframes required by applicable law.