Data that identifies you, such as your name, email addresses, wallet address, and username that you provide when setting up your KnownOrigin account or at a later date (e.g., when submitting a query or report)

If you use our Services as an artist, additional identification data, such as your social media identifiers, country of residence and address, government-issued ID (e.g., passport) and other information contained on IDs, date of birth, profile image, additional website addresses, and any other information.

Data regarding bids, purchases, or sales that you provide in a transaction

Financial information (e.g., wallet address/ID, credit card transaction or bank details)

In some cases: age, gender, country of birth, nationality, country of residence, address, interests, and preferences

You may provide us with additional information through a web form or by updating or adding information to your KnownOrigin account, by participating in community discussions (e.g. 'X' (formerly Twitter), chats, surveys, inquiries, dispute resolution, customer service interactions, or if you contact us for any other reason regarding our Services.

Other data that we are required or entitled by applicable law to collect and process and that we need for your authentication or identification, or for the verification of the data we collect

Data that is generated as part of one of your transactions (e.g., as relating to bids, purchases, sales, fees) or that is linked to your KnownOrigin account as a result of a transaction in which you are involved, such as transaction history, amounts, date and time, location of transactions through IP address, and smart contract details if any of these are capable of identifying you (e.g., NFT ID, public key of wallet, price of NFT)

Data that is generated through your other actions when you use our Services and which is linked to your KnownOrigin account (e.g., when you connect your wallet, save artists, searches or interests, or seek to use the services of third-party partners for payments or otherwise)

Your advertising and marketing preferences, and your communications with us

Location data, including your general location data (e.g., IP address)

Certain metadata (e.g., NFT image metadata)

Computer and connection information, such as statistics regarding your use of our Services, information on data traffic to and from websites, referral URL, information on advertisements, your IP address, your access times including accessed pages within our Services, your language settings, and your web log information

Data about the pages you visit, the access time, frequency and duration of visits, the links on which you click and other actions you take as part of your use of our Services and in advertising and email content

Data about your activities and interactions with our advertising partners including data about the advertisements you were shown, how often they were shown, when and where they were shown, and whether you took any action, such as clicking on an advertisement or making a purchase

The user segment or category into which you as a user fall, for example: an artist that has not yet minted an NFT

Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, individual device token, and cookie-related data (e.g., cookie ID)

Data from public sources (e.g., public sanctions lists and data publicly available on blockchain, for example, blockchain wallet addresses and information regarding your blockchain activity such as purchases, sales, or transfers of NFTs on the blockchain, which may then be associated with other data you have provided to us)

Data from third parties for trade restriction screening, risk checks, modeling, and identity confirmation

Data from social media companies when you add those to your KnownOrigin account

Data from eBay Affiliates if you are also an eBay user (eBay Inc. and the companies it directly or indirectly controls are referred to as "eBay Affiliates”. KnownOrigin is an eBay Affiliate).

We allow you to use single sign-on services via 'X' (formerly Twitter) to link your KnownOrigin account to such single sign-on services. You can determine the personal data that we can access when authorizing the connection with the single sign-on service.

We allow you to share personal data with social networks (such as Meta Instagram, and 'X' (formerly Twitter) or to link your KnownOrigin account to a social network. When you apply to be an artist on KnownOrigin through the artist application process (detailed on the KnownOrigin site, stored here; https://knownorigin.io/apply), we also require artists to link to certain social networks (e.g 'X', formerly Twitter) in order to register and obtain an artist account. These social networks may automatically provide us with access to certain personal data they have stored about you (e.g., content you have viewed or enjoyed, information about the advertisements you have been shown or clicked on, etc.). You can determine the personal data that we can access through the privacy settings of each social network.

We may also use plug-ins or other technologies from various social networks. 

Processing of data relating to you or your company for the purpose of entering into a contract with you and executing it

Provision of our Services, including but not limited to enabling and performing transactions with other users (including the transmission of your personal data to other users where necessary to perform the transaction and enabling KnownOrigin collaborations), displaying your transaction history to you and facilitating our Dashboard features, providing and enhancing features such as payment processing (including relating to digital wallet providers you select and/or connect to your KnownOrigin account), ratings, authentication services and KnownOrigin account management, providing other services you may use (as described in connection with such services), and ensuring the functionality of our Services. In connection with the provision of our Services, we will send you notifications relating to the execution of transactions and the use of our Services.

For artists, using links to social network profiles e.g. 'X', formerly Twitter, that you share with us to verify the authenticity of your account, identity, and artwork, as well as to display the social media links you provide to potential purchasers of your art or otherwise as associated with your KnownOrigin account

Providing general customer support including the solution of problems with your KnownOrigin account, resolution of disputes, and providing other services within the scope of customer service. For these purposes, we may contact you via email.

Enforcement of our User Agreement, this Privacy Policy and other rules and policies

Publication and promotion of your NFT listings and related content on the website or in the applications, services, and tools of KnownOrigin or KnownOrigin aeBay Affiliate companies, or cooperating with third party operators of websites, applications, services and tools. When we share the content of your NFT listings and any related personal data with third parties, we do so only on the basis of an agreement that limits the use of such personal data by the third party to the purposes necessary to fulfil its contractual obligations to us. Third party providers are contractually obliged to take appropriate security measures with regard to this data.

Other KnownOrigin users

eBay Affiliate companies

External service providers

Government agencies or public authorities

Payment service providers and third-party payments partners

External operators of websites, applications, services and tools

Participation in investigations and proceedings (including judicial proceedings) conducted by public authorities or government agencies, in particular, for the purpose of detecting, investigating and prosecuting illegal acts

Prevention, detection and mitigation (including compliance with reporting requirements) of illegal activities (e.g., fraud, money laundering, terrorist financing, child abuse, intellectual property infringement, and violations of sanctions legislation)

Complying with information requests from third parties based on any statutory information rights they have against us (e.g., in the event of an intellectual property infringement, piracy, or other unlawful activity)

Complying with information collection, verification, disclosure and reporting requirements under consumer protection, anti-fraud, online platform and tax legislation

Ensuring the security of our Services

Retention and storage of your personal data to comply with specific legal retention requirements.

Law enforcement agencies, courts, government agencies or public authorities (including tax and financial authorities), intergovernmental or supranational bodies

Third parties based on statutory information claims against us

Third parties who are involved in judicial proceedings, in particular, if they submit a legal order, court order or equivalent legal order to us

Trade restrictions/sanctions screening services providers or partners, if required by applicable law

eBay Affiliates

Other third-party service providers as necessary to comply with legal requirements to which we are subject

Prevention, detection, mitigation and investigation of unlawful activities that may result in impairment of your vital interests or the vital interests of another natural person, unless there is a statutory obligation to this effect

Law enforcement agencies, courts, government agencies or public authorities, intergovernmental or supranational bodies

Third parties who are involved in judicial proceedings

eBay Affiliates

External service providers

Participation in investigations and proceedings (including judicial proceedings) conducted by courts, law enforcement agencies, government agencies or public authorities, intergovernmental or supranational bodies, in particular for the purpose of detecting, investigating and prosecuting illegal acts, unless there is a statutory obligation to this effect, and we may legitimately assume that the disclosure of the data is necessary to avert imminent disadvantages or to report a suspicion of an illegal act. In such cases, we will only disclose what we believe is necessary, and to the extent permitted by applicable laws, such as your name, address, city, post code, email address, (previous) usernames, IP address, fraud complaints, listing, sale and purchase history.

Protection of the legitimate interests of third parties (including intellectual property rights) in connection with civil law disputes, including the investigation of such disputes, unless there is a statutory obligation to this effect, if we may legitimately assume that it is necessary to disclose the data to such third parties in order to avert imminent disadvantages. In such cases, we will only disclose what we believe is necessary, and to the extent permitted by applicable laws, such as the your name, address, city, post code, country, email address and company name to the third party and bind the third party by a worldwide non-disclosure agreement to treat the data as confidential.

Prevention, detection, mitigation and investigation of fraud, financial crimes and harms, violation of international sanctions legislation, security incidents and other prohibited or unlawful activities, including the assessment of corresponding risks (e.g. through the use of third-party service providers, captchas (a port enumeration technology to identify user sessions using remote desktop tools), metadata or other information stored in your KnownOrigin account for risk assessments) and the implementation of corresponding measures (e.g. disabling certain forms of payment based upon the risk associated with the underlying transaction), unless there is a statutory obligation to this effect

Verifying that reports submitted to KnownOrigin (including unnamed reports) are not fraudulent or malicious

Monitoring and improvement of the security of our Services, unless there is a statutory obligation to this effect

Performance of identity checks, evaluation of applications, and comparison of information for accuracy and verification purposes

Automatic filtering and, where necessary, manual review of messages sent through our messaging tools to prevent fraudulent or suspicious activity or violations of our User Agreement or other rules and policies

Provision of functions for users that make the processing of transactions easier or more convenient

Analysis and improvement of the Services, e.g., by reviewing site usage data or information from users about blocked or crashed pages in order to identify and solve problems and to provide you with an improved user experience, including as part of product development

To the extent permitted by applicable law without your consent, communications with you via email or other digital communications to offer send you special offers, to conduct opinion polls and surveys, and to inform you about our Services (according to your communication preferences in your KnownOrigin account). If you no longer wish to receive marketing emails from us, you can also unsubscribe by clicking on the link in the footer of the email you received. For technical reasons, the implementation may take a few days.

Evaluation of the quality and success of our email marketing campaigns (e.g., through analysis of opening and click rates)

Offering or facilitating the offering of partner and bonus, token, or other rewards programs and other co-branded marketing efforts to the extent permitted by applicable law

Provision of shared content and services (such as registration for services, transaction processing, and customer service) with eBay Affiliates or KnownOrigin third-party partners or service providers

Initiation, preparation and execution of a company acquisition, e.g., in the event of a merger with another company or takeover by another company. If such an event occurs, we will require the merged entity to comply with this Privacy Policy with respect to your personal data. Should your personal data be processed for any purpose not specified in this Privacy Policy, you will be informed in advance of the processing of your data for this new purpose.

Assertion of or defence against legal claims, including those asserted by one KnownOrigin user against another KnownOrigin user

Enabling eBay Affiliates to comply with legal obligations they are subject to, including information collection, verification, disclosure and reporting requirements under consumer protection, anti-fraud, online platform and tax legislation

To comply with an impending legal obligation

For users in the United States: investigating and communicating the outcome of disputes with the affected users (e.g., sharing information about KnownOrigin’s investigation of a complaint of a user’s violation of a policy with the reporting user)

eBay Affiliates

External service providers

Other KnownOrigin users

Law enforcement agencies, courts, government agencies or public authorities, intergovernmental or supranational bodies

Third parties who are involved in judicial proceedings

Third parties in the event of an investigation for fraud, intellectual property infringement, piracy or other unlawful activity

Payment service providers.

Blockchain analytics service providers or partners who assist us to comply with our legal requirements or otherwise to prevent illicit activities (e.g., prevention of money laundering, fraud, or terrorist financing)

Other companies in the context of a company acquisition

For users within the UK, EEA and Switzerland: Advertising and content personalization, measurement and analytics, on and off our sites, as explained below in Section 9 Cookies & Similar Technologies, or accessible in the cookie management tool here.

Communications with you via email or other digital communications including communications by eBay Affiliates or by third parties, to offer you special offers, unless these communications are permitted without your consent under applicable law. We may engage third parties to send marketing communications on our behalf.

Processing of your personal data on the basis of your consent, which you have given so that we or third parties can enable you to use certain services or make them available to you

eBay Affiliates

External service providers

Third parties using our single sign-on service (as authorized by you in each single case)

Other third parties with whom we partner to offer you specific services (as described at the collection of the respective user consent)

Third party advertising partners such as Google, Meta, Microsoft, and TikTok

Necessity for the provision of our Services
This includes such things as executing the User Agreement with you, maintaining and improving the performance of our Services, keeping our systems secure, and maintaining appropriate business and financial records. Most of our retention periods are determined on the basis of this general rule.

Consent-based processing of personal data
If we process personal data on the basis of consent (including consent to the extended storage), we store the data for as long as necessary in order to process it according to your consent.

Statutory, contractual or other similar obligations
Corresponding storage obligations may arise, for example, from laws or official orders. It may also be necessary to store personal data with regard to pending or future legal disputes. Certain personal data may be subject to statutory storage obligations depending on national law.

Where we rely on consent you can withdraw your consent to the processing of your personal data by us at any time. As a result, we may no longer process your personal data based on this consent in the future. The withdrawal of consent has no effect on the lawfulness of processing based on consent before its withdrawal.

You have the right to obtain access to your personal data that is being processed by us. In particular, you may request information on the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, where possible the envisaged period for which the personal data will be stored or the criteria used to determine that period, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, any available information as to the personal data’s source (where they are not collected from you), the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details. Your right to access shall not adversely affect the rights and freedoms of others. Your right to access may be limited by national law.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

You have the right to obtain from us the erasure of personal data concerning you under certain conditions (e.g., when the personal data are no longer necessary in relation to the purposes for which they were processed or when they are no longer required for overriding legitimate grounds, such as the detection/prevention of fraud), unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims. The right to erasure may be limited by national law. Please note that it is not possible to erase data from the blockchain. Please see section 2 for further information.

You have the right to demand that we restrict the processing of your personal data to the extent that

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller ("right to data portability").

You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or the registered office of KnownOrigin.

sending an email to DataRep at [email protected] quoting “KnownOrigin Labs Limited” in the subject line; or

completing an online webform at www.datarep.com/data-request

Session cookies expire at the end of your session (e.g., when closing your browser window) and only allow tracking your activities during this session

Persistent cookies remain stored on your device between sessions and allow, for example, to track your settings or activities on several websites

First-party cookies are set by the provider whose online service you are using

Third-party cookies are set by a provider other than the provider whose online service you are using

Strictly necessary cookies
We use cookies that are necessary for the operation of our Services. This includes technologies that allow you access to our Services, which are required to monitor the functioning of the site, prevent fraudulent activity, and improve security.
Because these cookies are technically necessary to deliver our Services to you, you cannot deny the use of them.

Personalisation cookies

We use cookies to personalise our Services for you only with your consent.

Analytics cookies
We use cookies to assess the performance of our Services only with your consent.

Advertising cookies
Third party advertising providers use cookies to deliver ads tailored to your interests only with your consent. This includes using technologies to determine how relevant the advertisements are for you, which ads have already been shown to you, how often they have been shown, when and where they have been shown and if you have reacted by carrying out an activity – such as clicking on an ad.