1. Introduction

AURACRAFT EVENTS LTD (Company No. 16790153) ("we", "us") operates the Arty World NFT Marketplace. This Privacy Policy explains how we collect, use, and protect your information when you use our Platform.

2. Information We Collect

We may collect the following types of information:

• Wallet Addresses: Your public blockchain wallet address when you connect to the Platform
• Transaction Data: Records of your transactions on the Platform, which are also publicly available on the blockchain
• Usage Data: Information about how you interact with the Platform, including pages visited, features used, and time spent
• Device Information: Browser type, operating system, and device identifiers
• Communication Data: Information you provide when contacting our support team

3. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the UK GDPR and EU GDPR:

• Contractual Necessity (Article 6(1)(b)): Processing necessary to facilitate NFT transactions, wallet connections, and marketplace operations that you have requested
• Legitimate Interests (Article 6(1)(f)): Processing necessary for fraud prevention, security monitoring, platform improvement, and analytics — where our interests do not override your fundamental rights
• Consent (Article 6(1)(a)): Processing of non-essential cookies and marketing communications, which you may withdraw at any time
• Legal Obligation (Article 6(1)(c)): Processing required to comply with applicable laws, regulations, and legal proceedings

4. How We Use Your Information

• To facilitate NFT transactions and marketplace operations
• To improve and optimise the Platform experience
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations
• To communicate service updates and important notices

4. Third-Party Services

We use the following third-party services that may process your data:

• thirdweb: Blockchain infrastructure and wallet connection services
• Wert.io: Fiat-to-crypto payment processing (when using card payments)
• Blockchain Networks: Transaction data is recorded on public blockchains (Ethereum, Polygon, Avalanche)

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Cookies & Tracking

We use essential cookies to ensure the Platform functions correctly. These include session cookies and preference cookies. We do not use third-party advertising cookies. You can control cookies through your browser settings.

6. Data Security

We implement appropriate technical and organisational measures to protect your information. However, no method of transmission over the Internet or electronic storage is completely secure. Blockchain transactions are inherently public and cannot be made private.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Transaction records on the blockchain are permanent and immutable by nature.

8. Your Rights

Under applicable data protection laws, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain processing
• Data portability

Please note that blockchain data cannot be modified or deleted due to its immutable nature.

9. International Transfers

Your information may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a revised "Last updated" date.

13. Data Protection Contact

For privacy-related enquiries and data protection requests, contact our Data Protection team at hello@artyworld.art. You may also write to: AURACRAFT EVENTS LTD (Company No. 16790153), 57 Brooke Avenue, South Harrow, HA2 0ND, United Kingdom. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.