PRIVACY & COOKIES POLICY

 

1. Introduction.

House of Arts ("House of Arts", "we", "our" or "us") is committed to protecting the privacy and security of the Personal Data entrusted to us.

This Privacy & Cookies Policy ("Privacy Policy") explains how House of Arts collects, uses, stores, shares, transfers and otherwise processes Personal Data in connection with our websites, digital platforms, membership and ticketing systems, exhibitions, events, programmes, workshops, retail activities, communications and other services provided by or on behalf of House of Arts.

House of Arts operates within Expo City Dubai, United Arab Emirates. In providing its services, House of Arts may use systems, infrastructure and services provided or operated by Expo City Dubai and authorised third-party service providers, as further described in this Privacy Policy.

This Privacy Policy has been prepared in accordance with applicable laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, as amended from time to time, and other applicable data protection and privacy laws and regulations ("Applicable Law").

By interacting with House of Arts, you acknowledge that your Personal Data may be processed as described in this Privacy Policy.

 

2. Who We Are. House of Arts is an arts and cultural destination within Expo City Dubai offering exhibitions, performances, educational programmes, workshops, memberships, events, retail offerings and other cultural experiences.

For the purposes of Applicable Law, House of Arts is responsible for the Personal Data it collects and processes in connection with its activities.

House of Arts may use systems and infrastructure operated by Expo City Dubai for certain administrative, technology, customer relationship management, communications, marketing, security and support functions. Where Personal Data is processed through such systems, it will be handled in accordance with Applicable Law and appropriate data protection requirements.

 

3. Scope of this Privacy Policy. This Privacy Policy applies to individuals who interact with House of Arts, including:

• visitors to our websites and digital platforms;

• Members and individuals included within a Membership;

• ticket purchasers and Ticket Holders;

• visitors attending exhibitions, Events, workshops, performances and programmes;

• customers purchasing merchandise or other products or services;

• artists, performers, speakers, exhibitors and programme participants;

• individuals applying to participate in House of Arts programmes, initiatives or opportunities;

• individuals subscribing to marketing communications or newsletters;

• individuals contacting House of Arts for enquiries, feedback or customer support; and

• any other individuals whose Personal Data is collected in connection with House of Arts' activities.

This Privacy Policy applies whether Personal Data is collected online, through our digital platforms and systems, or offline through your interaction with House of Arts.

 

4. Personal Data We Collect. The Personal Data we collect will depend on how you interact with House of Arts and the services you use. We may collect the following categories of Personal Data.

 

4.1 Identification and Contact Information. This may include:

• name;

• date of birth or age, where relevant;

• email address;

• telephone number;

• postal, billing or delivery address;

• nationality, where reasonably required for a particular programme or activity;

• identification information where reasonably required for verification, security or regulatory purposes; and

• emergency contact details where relevant.

 

4.2 Membership and Ticketing Information. Where you purchase, receive or use a Membership or ticket, we may collect:

• Membership category and status;

• Membership number;

• booking and ticket information;

• attendance and visit records;

• QR codes and associated identifiers;

• digital wallet identifiers;

• Membership renewal information;

• information relating to Linked Users;

• transaction and payment references; and

• information relating to Events, exhibitions, workshops or programmes you book or attend.

For Family Arts Memberships, House of Arts may collect limited Personal Data relating to children, including their name and age, and any additional information reasonably required for participation in a particular programme or activity.

 

4.3 Purchases and Merchandise. Where you purchase merchandise or other products or services from House of Arts, we may collect information relating to:

• your purchase;

• billing and delivery;

• order history;

• payment references;

• returns, exchanges or refunds; and

• related customer service enquiries.

Complete payment card details are processed by authorised payment service providers and are not stored by House of Arts.

 

4.4 Events, Programmes and Workshops. Where you register for or participate in an Event, programme, workshop, class or other activity, we may collect information necessary to:

• process and administer your registration;

• manage attendance;

• communicate programme information;

• manage waiting lists;

• provide appropriate visitor or participant support; and

• accommodate accessibility or other reasonable participation requirements.

 

4.5 Artists, Performers and Programme Participants. Where you apply or are invited to participate as an artist, performer, speaker, exhibitor or programme participant, we may collect information including:

• biographical information;

• professional information and experience;

• portfolios and artistic materials;

• photographs;

• artistic statements;

• application materials;

• supporting documentation; and

• correspondence and information reasonably required to assess, administer or promote your participation.

 

4.6 Communications and Enquiries. Where you contact us, we may collect your contact information together with the contents of your enquiry, correspondence, complaint, feedback or other communication.

 

4.7 Technical and Website Information. When you use our websites or digital platforms, certain information may be collected automatically, including:

• IP address;

• browser and device information;

• operating system;

• language settings;

• date and time of access;

• pages viewed;

• referring pages or websites;

• cookie and similar technology identifiers; and

• information concerning your interaction with our digital services.

Further information is provided in Section 13 (Cookies and Similar Technologies).

 

4.8 CCTV and Security Information. CCTV and other security systems may operate within House of Arts and its surrounding premises. These systems may capture images and other information for safety, security, crime prevention, incident management and protection of visitors, personnel, artworks and property.

 

4.9 Sensitive Personal Data. House of Arts does not seek to collect Sensitive Personal Data unless reasonably necessary. Where necessary to facilitate accessibility requirements, health and safety, participation in a particular programme or activity, or compliance with Applicable Law, House of Arts may collect limited health-related or other Sensitive Personal Data with your consent or where otherwise permitted by Applicable Law.

 

5. How We Collect Personal Data. We may collect Personal Data:

• directly from you when you register, make a purchase, create an account, purchase or use a Membership or ticket, participate in an Event or programme, submit an application, contact us or otherwise provide information to House of Arts;

• automatically through our websites, digital platforms, cookies, access-control systems and security systems;

• through Expo City Dubai systems and infrastructure used to support House of Arts;

• from authorised service providers, including payment, Membership, ticketing, technology and customer relationship management providers;

• from business or programme partners where appropriate and permitted by Applicable Law;

• through social media platforms where you interact with official House of Arts accounts; and

• from publicly available sources where appropriate.

 

6. How We Use Personal Data. We may process Personal Data for the following purposes:

 

6.1 Memberships, Ticketing and Visitor Services. To:

• create and administer Memberships and user accounts;

• administer Membership benefits and renewals;

• issue and validate Membership cards, tickets, QR codes and digital credentials;

• administer Linked Users;

• manage bookings and attendance;

• provide visitor services;

• communicate operational information concerning Memberships, bookings and visits; and

• respond to customer enquiries.

 

6.2 Events, Exhibitions, Programmes and Workshops. To:

• administer registrations and participation;

• communicate Event and programme information;

• manage attendance and waiting lists;

• accommodate reasonable accessibility requirements;

• manage artists, performers, speakers and programme participants; and

• operate and improve House of Arts' cultural programmes and activities.

 

6.3 Purchases and Payments. To:

• process Membership, ticket, merchandise and other purchases;

• administer payments, refunds and exchanges;

• issue receipts and invoices;

• prevent or investigate fraudulent transactions; and

• maintain appropriate financial and accounting records.

 

6.4 Website and Digital Services. To:

• operate and maintain our websites and digital platforms;

• authenticate users;

• provide requested functionality;

• maintain system and information security;

• identify and resolve technical issues;

• analyse and improve the performance of our digital services; and

• understand how visitors interact with our digital services.

 

6.5 Safety, Security and Legal Purposes. To:

• protect visitors, personnel, artists, artworks and property;

• maintain physical and digital security;

• investigate accidents, incidents or complaints;

• prevent and investigate fraud or unlawful activity;

• enforce our Terms & Conditions and Visitor Guidelines;

• establish, exercise or defend legal rights or claims; and

• comply with applicable legal, regulatory or governmental requirements.

 

7. Operational and Marketing Communications

 

7.1 Operational Communications. Certain communications are necessary for House of Arts to provide services you have requested.

These may include:

• Membership confirmations and updates;

• ticket and booking confirmations;

• renewal and expiry notices;

• payment confirmations and receipts;

• Event or programme information;

• changes affecting a booking, Membership or visit;

• account and security notifications; and

• other service-related communications.

These communications are operational and are not marketing communications. They may be generated automatically through House of Arts' Membership, ticketing or visitor-management systems.

​

7.2 Marketing Communications. Where permitted by Applicable Law and, where required, with your consent, House of Arts may use your contact information to send you communications regarding:

• exhibitions;

• Events and performances;

• workshops and programmes;

• Memberships and Membership benefits;

• merchandise and retail offerings;

• cultural activities;

• promotions and special offers; and

• other House of Arts news and initiatives.

You may withdraw your consent to marketing communications or unsubscribe at any time by using the unsubscribe mechanism provided in the relevant communication or by contacting House of Arts.

Withdrawing consent to marketing will not affect operational communications that are necessary to administer a Membership, booking, purchase, account or other service requested by you.

 

7.3 Use of Expo City Dubai CRM Infrastructure. House of Arts may use customer relationship management ("CRM"), technology and communications infrastructure operated or supported by Expo City Dubai to manage House of Arts communications and related activities. Accordingly, where appropriate and subject to Applicable Law, relevant Personal Data, including your name, contact information, marketing preferences and information relating to your interaction with House of Arts, may be securely transferred, synchronised or otherwise made available between House of Arts systems and Expo City Dubai's CRM or related technology infrastructure. This processing may be undertaken for the purposes of:

• maintaining accurate and up-to-date contact records;

• managing marketing consents and communication preferences;

• administering House of Arts communications and campaigns;

• providing customer support;

• maintaining the security and functionality of relevant systems; and

• supporting House of Arts' customer relationship management activities.

House of Arts communications may be sent using House of Arts-branded email addresses or communication channels even where the underlying technology or database is hosted, operated or supported by Expo City Dubai.

​

8. Legal bases for processing.

House of Arts will process Personal Data only where permitted by Applicable Law. Depending on the circumstances, this may include processing:

• with your consent;

• where necessary to perform a contract with you or take steps at your request before entering into a contract;

• where necessary to comply with legal or regulatory obligations;

• where necessary to protect the interests of the Data Subject;

• where necessary to establish, exercise or defend legal claims;

• where necessary for other purposes expressly permitted under Applicable Law; or

• on another lawful basis available under Applicable Law.

Where we rely on consent, you may withdraw that consent at any time, subject to Applicable Law. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

 

9. How We share Personal Data. House of Arts does not sell Personal Data. We may share Personal Data where reasonably necessary for the purposes described in this Privacy Policy with:

 

9.1 Expo City Dubai. Personal Data may be shared with or processed through Expo City Dubai where reasonably necessary to provide infrastructure or services supporting House of Arts, including:

• CRM and communications infrastructure;

• information technology and cyber security;

• digital platforms;

• customer support;

• payment or financial administration;

• access management;

• safety and security; and

• other shared operational or administrative services.

Any such sharing or processing will be subject to Applicable Law and appropriate data protection and security requirements.

 

9.2 Service Providers. We may engage authorised third parties to provide services including:

• website hosting and management;

• Membership and visitor management systems;

• ticketing;

• payment processing;

• CRM and communications;

• cloud hosting;

• analytics;

• digital wallet services;

• IT and cyber security;

• delivery and fulfilment services; and

• other services necessary to operate House of Arts.

Such service providers may process Personal Data only as permitted by their contractual arrangements with House of Arts or the relevant Expo City Dubai entity and Applicable Law.

 

9.3 Government and regulatory authorities. We may disclose Personal Data to governmental, regulatory, law enforcement, judicial or other competent authorities where required or permitted by Applicable Law.

 

9.4 Professional advisers. Where necessary, we may disclose Personal Data to professional advisers including lawyers, auditors, insurers and other advisers subject to appropriate confidentiality obligations.

 

9.5 Business or organisational changes. Personal Data may be transferred as part of a restructuring, transfer of operations, merger, acquisition or other organisational change, subject to Applicable Law and appropriate safeguards.

 

10. International Transfers

House of Arts, Expo City Dubai or our authorised service providers may use systems or service providers located outside the United Arab Emirates.

Where Personal Data is transferred outside the UAE, House of Arts will take appropriate measures to ensure that such transfer is undertaken in accordance with Applicable Law and that appropriate safeguards are applied to protect the Personal Data.

Where required, this may include transferring Personal Data to jurisdictions recognised as providing an adequate level of protection or implementing contractual, organisational or other safeguards permitted under Applicable Law.

 

11. Data Security

House of Arts takes reasonable and appropriate technical, organisational and administrative measures designed to protect Personal Data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

These measures may include access controls, system security, information-security procedures, contractual safeguards and restrictions on access to Personal Data based on operational requirements.

No system or method of electronic transmission or storage can, however, be guaranteed to be completely secure.

 

12. Data Retention

House of Arts will retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, including to provide our services, maintain appropriate business and transaction records, comply with legal, regulatory, tax and accounting requirements, resolve disputes and establish, exercise or defend legal rights.

Retention periods may vary depending on the nature of the Personal Data and the purpose for which it is processed.

When Personal Data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with applicable retention requirements and Applicable Law.

 

13. Cookies and similar technologies.

 

13.1 What Are Cookies? Cookies are small data files placed on your computer, mobile device or other device when you visit a website.

House of Arts may use Cookies and similar technologies, such as pixels and local storage, to enable our websites to operate, remember user preferences, understand how visitors interact with our digital services and, where permitted, support communications and marketing activities.

 

13.2 Types of Cookies We may use. We may use the following categories of Cookies:

• Strictly Necessary Cookies. These Cookies are required for the operation, security and basic functionality of our websites and digital services. They may include Cookies used for authentication, security, payment processing, session management and maintaining user preferences necessary for the service requested.

• Functional Cookies. These Cookies allow our websites to remember choices you make, such as language or other preferences, and provide enhanced functionality.

• Analytics and Performance Cookies. These Cookies help us understand how visitors use our websites, including which pages are visited, how visitors navigate the website and whether technical issues occur. This information helps us measure and improve website performance and user experience.

• Marketing Cookies. Where used, these Cookies may help House of Arts understand the effectiveness of communications or provide content and marketing that may be relevant to users. Where required by Applicable Law, such Cookies will only be used with the appropriate consent.

 

13.3 Third-Party Cookies. Certain Cookies may be placed or accessed by authorized third-party service providers supporting our websites, analytics, communications or other digital services.

The processing of Personal Data by such third parties may also be subject to their own privacy and cookie policies.

 

13.4 Managing Cookies. Where applicable, you may manage your Cookie preferences through the Cookie consent tool made available on our Website.

You may also configure your browser to refuse or delete certain Cookies. However, disabling certain Cookies, particularly Strictly Necessary Cookies, may affect the functionality or availability of parts of our Website or digital services.

You may change your Cookie preferences at any time where the relevant functionality is available.

 

14. Your Rights. Subject to Applicable Law and any applicable exceptions, you may have rights in relation to your Personal Data, including the right to:

• obtain information about the Personal Data we process and the purposes for which it is processed;

• request access to your Personal Data;

• request correction or updating of inaccurate or incomplete Personal Data;

• request deletion of Personal Data in circumstances permitted by Applicable Law;

• request restriction or cessation of certain processing;

• object to certain processing where such right is available;

• request transfer of Personal Data where applicable;

• withdraw consent where processing is based on consent; and

• object to certain automated processing decisions where applicable.

These rights are not absolute and may be subject to exceptions or limitations under Applicable Law.

House of Arts may request reasonable information to verify your identity before responding to a request.

 

15. Children's Personal Data. House of Arts offers Memberships, Events, workshops, educational programmes and other activities that may involve children.

Where House of Arts collects Personal Data relating to a child, we will seek to limit the information collected to what is reasonably necessary for the relevant Membership, programme, activity, safety requirement or legal obligation.

Where required by Applicable Law, consent will be obtained from the child's parent or legal guardian.

Parents and legal guardians who provide Personal Data relating to a child are responsible for ensuring that they are authorised to provide such information.

House of Arts will not knowingly use children's Personal Data for targeted advertising or direct marketing where prohibited by Applicable Law.

 

16. Third-Party Websites and Services. Our websites and communications may contain links to websites, applications or services operated by third parties.

House of Arts is not responsible for the privacy practices, security or content of third-party websites or services. We encourage you to review the privacy policies applicable to those services before providing Personal Data.

 

17. Changes to this Privacy Policy. House of Arts may update this Privacy Policy from time to time to reflect changes to our activities, systems, services, legal obligations or Applicable Law.

The updated Privacy Policy will be published on our Website and the date of the latest update may be identified on the policy.

Where required by Applicable Law, we will provide additional notice or obtain consent in relation to material changes affecting the processing of Personal Data.

 

18. Contact Us. If you have any questions or concerns regarding this Privacy Policy, wish to update your Personal Data or communication preferences, or wish to exercise any rights available to you under Applicable Law, you may contact House of Arts at: Connect@HouseOfArts.com

House of Arts may request reasonable information to verify your identity before processing a request and will respond within the timeframes required by Applicable Law.