Privacy Policy
Last updated on 04/30/2025
Thank you for visiting the National Endowment for the Arts website and reviewing our privacy policy. The National Endowment’s (same as we, us, our) privacy notice describes the Agency privacy practices regarding the nature, purpose, collection, use, and sharing of any Personally Identifiable Information (PII) obtained via this website. Our privacy policy explains our information processing practices when you provide the information to us, whether collected online (when you visit us online to browse or obtain information) or offline. PII may include: your name, email, mailing and/or home address, phone numbers, or other information that identifies you personally. We do not require you to register or provide personally identifiable information to visit our website.
Other Resources
Providing PII through our website is voluntary and by doing so, you are giving NEA your consent to use the information for the purpose stated at the point of collection. However, failure to provide the necessary information while requesting a service may result in the Agency's inability to provide you with the service you desire.
If you choose to provide us with PII on this website by completing a web form or sending us an email, the information will help us to provide you with the information or services you have requested or to respond to your message. You should be reminded that information provided via a web form or email may not necessarily be secure against interception. Therefore, we suggest that you do not send any sensitive personal information (such as Social Security Number) to us through the web form or email. The information we may collect from you varies based on what you do or why you visit our website.
We collect and temporarily store certain information about your visit for site management and security purposes only. We collect and analyze this information because it helps us to better design our website to suit your needs. We may also automatically collect information about the web content you view in the event of a known security or virus threat. This information includes:
The Internet domain from which you access our website (for example, “xyz.com” if you use a private Internet access account, or “school.edu” for an educational domain);
The Internet Protocol (IP) address (a unique number for each computer connected to the Internet) from which you access our website;
The type of browser (e.g., Firefox, Internet Explorer, Chrome) used to access our site;
The operating system (e.g., Windows, Mac OS, Unix) used to access our site;
The date and time you access our site;
The Universal Resource Locators (URLs), or addresses, of the pages you visit; and
If you visited this website from another website, the URL of the forwarding site.
Your computer will only share the information in the cookie with the website that provide it, and no other website can request it. There are two types of cookies:
Session Cookies: Session cookies last only as long as your web browser is open. Once you close your browser, the cookie is deleted. Websites may use session cookies for technical purpose such as to enable better navigation through the site, or to allow you to customize your preference for interacting with the site.
Persistent Cookies (We do not use persistent cookies): these are cookies saved on a user's hard drive to determine which users are new to the site or are returning, and for repeat visitors.
To block cookies or if you wish not to have session or persistent cookies stored on your computer, you can turn it off on your browser and change your browser's settings to prompt you before you accept cookies from any website you visit. However, turning off cookie may impact the functioning of the website or the provision of some services. Be aware that disabling cookies in your browser will affect cookie usage at all other websites you visit as well.
We will only send you general information via email. You should be aware that information provided through web form or email may not necessarily be secure against interception. Therefore, we suggest that you do not send sensitive personal information (such as social security number) to us via web form or email. If you intend to send email or web form containing sensitive information such as bank/credit card information, social security number, or the likes, do not. Instead, you should send it by U.S mail or submit it through a secure web page if available.
We do not sell your personal information to any third party. We may also disclose your personal information in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of information in connection with government agency requests, legal process or litigation).
We collect, use, process, store, maintain, disseminate, or disclose the minimum amount of information or PII that is directly relevant and necessary to accomplish a legally authorized purpose stated at the point of collection and retain your information only as long as it is required to accomplish the purpose of collecting it. After that, the information is deleted or disposed of in accordance with data disposition best practices.
If we do, we will change the "last updated" date at the top of this policy and the revised policy will be posted to this page so that you are aware of the information we collect, how we use it, and under what circumstances we may disclose it. We encourage you to periodically review the NEA privacy policy for the latest information on our privacy practices. When there are significant changes or where it is required by applicable privacy laws, we will provide notice to you of these changes and, where required by applicable law, we will obtain your consent. Notice may be by email to you, by posting notice of such changes in our services, or by other means consistent with applicable law.
You have the right to ask us for a copy of your personally identifiable information; to correct, delete or restrict the processing of your PII; and to obtain the information you provided to us for a service or with your consent in a structured, machine-readable format, and to ask us to share this information with another entity. You may be entitled to additional rights based on applicable data privacy laws in your jurisdiction. These rights may be limited for instance, if fulfilling your request would reveal personal information of another person, or if you ask us to delete information which we are required by law to keep, or which we need to defend claims against us. For additional information about our privacy policy regarding your rights, please send your comments/request to or contact us at OITM@arts.gov or mail it to the address below.
Providing PII through our website is voluntary and by doing so, you have given us the permission to process you PII. We collect and process your information in compliance with the Privacy Act of 1974, Fair Information Practice Principles (FIPPs), and any other applicable privacy laws.
- Providing you with the services that you requested;
- Sending you the necessary communications;
- Providing customer service or support;
Analyzing your content and its characteristics using automated techniques, in the following circumstances:
Operational Use: Our services will access your content stored locally on your device to enable the normal running of the services.
Cloud Content Analytics: Subject to your opt-out rights, we may perform analytics with cloud content to help us understand how our users are using our services to allow us to improve our services, customer experience and retain users.
Analyzing your content and its characteristics using automated techniques or with human review, in the following circumstances:
Illegal and Abusive Cloud Content: Cloud content may be automatically scanned to ensure we are not hosting illegal or abusive content, like child sexual abuse material. Human review may occur when your cloud content is flagged or reported as illegal or abusive.
Analyzing your use and navigation of our services and your interaction with our communications to:
Detect and prevent fraudulent, deceptive, or illegal activity, or misuse of our services.
Improve our services and the user experience, subject to your opt-out and consent rights;
Diagnose problems in our services or website; and
Tailor and customize the services through marketing communications.
Conducting surveys and research about our customers, their interests, the effectiveness of our services, and customer satisfaction (unless we need consent to undertake such surveys, in which case we will only do this with your permission); and
Investigating and responding to any comments or complaints that you may send us.
If you are not 13 years old or above and meet applicable age requirements of the website, please, do not use our website or services. We comply with COPPA and do not knowingly collect personal information about children under age 13.
Any unauthorized attempts to disrupt information or services on this website is prohibited and may be punishable under the Computer Fraud and Abuse Act of 1986 and 18 U.S.C. Sec. 1001 and 1030. Information obtained in the process may also be used for authorized law enforcement investigations.
We take your information seriously and work hard to protect it. We employ administrative, technical, and physical security controls where appropriate. We take the following steps to secure the information we collect:
We employ internal access controls to ensure that only personnel who have access to your information are those with a need to do so to perform their official duties.
We train appropriate personnel on our privacy and security policies and compliance requirements.
We secure the areas, cabinets, or safe where we keep paper copies of the information we collect online.
We regularly backup the information we collect online to prevent loss.
We use technical controls to secure the information we collect online including, but not limited to:
Secure Socket Layer (SSL)
Encryption
Firewalls
Password protections
2-step verification
Contractual confidentiality obligations for employees and contractors
We periodically test our security procedures to ensure personnel and technical compliance.
Employ external access safeguards to identify and prevent unauthorized access by outsiders that attempt to hack into, or cause harm to, the information contained in our systems.
The Agency's privacy policy compliance materials are available at the Agency's privacy compliance materials are available at Privacy Impact Assessments (PIA) and Privacy Act Systems of Records Notice (SORN). For additional information about our privacy policy or practices, please contact us at OITM@arts.gov or mail us at:
Privacy Office
Office of Information & Technology Management
National Endowment for the Arts
400 7th Street, SW,
Washington, DC 20506
202-682-5400