Privacy Policy

Artz Ventures Ltd ("OnlineArtz", "we", "us" or "our") operates the online art marketplace available at www.onlineartz.com and through our mobile application. We are registered in the United Kingdom.

For the purposes of UK GDPR and EU GDPR, Artz Ventures Ltd is the data controller responsible for your personal data. If you have questions about this policy or how we handle your data, contact us at support@onlineartz.com.

This policy applies to visitors, collectors, artists and anyone who creates an account, browses listings, makes a purchase, sells artwork, subscribes to a plan, contacts support or otherwise interacts with our Services.

It does not apply to third-party websites or services linked from OnlineArtz. Those services have their own privacy policies.

Account and profile data: name, email address, password (stored in hashed form), profile photo, role (collector or artist), language preference, artist profile details (display name, bio, studio address, shipping settings, social links) and account settings.

Transaction data: artworks viewed, cart contents, orders placed or received, payment status, shipping addresses, billing details submitted at checkout, messages relating to orders and payout information for artists processed through Stripe Connect.

Authentication data: if you sign in with Google, Apple or Facebook, we receive information from that provider such as your name, email address and profile image, in accordance with your settings with that provider.

Communications: messages you send to support, contact form submissions, marketing preferences, newsletter sign-ups, terms acceptance records and correspondence with us.

Technical and usage data: IP address, browser type, device information, pages visited, referring URLs, approximate location derived from IP, session identifiers and logs needed to secure and operate the platform.

Cookie and consent data: your cookie preferences and related identifiers. See our Cookie Policy at /cookies for more detail.

We use personal data to create and manage accounts; display and process listings; facilitate purchases and seller payouts; calculate shipping; provide customer support; send service-related notifications (such as order updates); improve and secure the Services; comply with law; and prevent fraud or abuse.

With your consent, we may send marketing communications about new artworks, offers and platform news, and we may use analytics or advertising tools to understand how the site is used and measure campaigns.

We do not sell your personal data.

Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases: performance of a contract (for example to process your order or artist account); legitimate interests (for example to secure the platform, prevent fraud and improve our services, balanced against your rights); consent (for non-essential cookies, marketing emails and optional communications); and legal obligation (for example tax, accounting or regulatory requirements).

You may withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of processing before withdrawal.

We share personal data only where necessary, including with: payment processors (such as Stripe) to take payments and pay artists; shipping carriers and logistics partners to deliver artwork; cloud hosting, database, storage and infrastructure providers; email delivery providers (such as Resend); content management and image delivery services; authentication providers when you use social sign-in; analytics or advertising partners when you have consented to those cookies; professional advisers and authorities where required by law.

When you buy from an artist, we share relevant order and delivery details with that artist so they can fulfil the sale. Artist profiles and listings you choose to publish are visible to other users as part of the marketplace.

If we are involved in a merger, acquisition or sale of assets, your data may be transferred subject to appropriate safeguards.

We are based in the United Kingdom. Some service providers we use may process data in the UK, the European Economic Area, the United States or other countries.

Where personal data is transferred outside the UK or EEA, we use appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses or equivalent mechanisms, unless an adequacy decision applies.

We keep personal data only for as long as necessary for the purposes described in this policy, including to provide the Services, comply with legal obligations, resolve disputes and enforce agreements.

Account data is generally retained while your account is active and for a reasonable period afterwards. Order and financial records may be kept longer where required for tax, accounting or legal purposes. Marketing consent records are retained to demonstrate compliance.

You may request deletion of your account subject to exceptions where we must retain certain information by law.

We implement technical and organisational measures designed to protect personal data, including encryption in transit, access controls, secure hosting and restricted access to production systems.

No method of transmission or storage is completely secure. Please use a strong password and keep your login details confidential.

We may send transactional emails and messages necessary to provide the Services, such as order confirmations, shipping updates and account notices. These are not marketing messages and do not require separate consent.

We only send promotional emails if you opt in when creating an account or in your settings. You can unsubscribe from marketing at any time using the link in our emails or by contacting us.

Newsletter subscriptions are separate from account marketing preferences and can be managed independently.

We use cookies, local storage and similar technologies on our website and app. Some are essential for the site to function; others are used only with your consent.

For full details, including the types of cookies we use and how to manage them, see our Cookie Policy at /cookies.

Depending on where you live, you may have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to certain processing; receive a portable copy of data you provided; and withdraw consent where processing is based on consent.

To exercise these rights, contact support@onlineartz.com. We may need to verify your identity before responding. We aim to respond within one month.

If you are in the UK, you may complain to the Information Commissioner's Office (ICO). If you are in the EEA, you may contact your local data protection authority.

OnlineArtz is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

Our Services may link to third-party websites, artist websites or social networks. We are not responsible for their privacy practices. Please review their policies before providing personal data.

We may update this Privacy Policy from time to time. We will post the updated version on the Services and update the date above. Material changes may also be notified by email or a notice on the site where appropriate.

Artz Ventures Ltd, operator of OnlineArtz.

Privacy enquiries: support@onlineartz.com.