Version 2026-10-30-draft-2
Privacy Notice
Draft for review, not yet in force. Items in square brackets are still to be confirmed.
Who we are
[Seller's full name or trading name: to be supplied], of [geographic address: to be supplied], is responsible for your information. Contact: [art-sales email address: to be supplied].
What we collect
- When you make an offer: your name, email address, delivery country, offer amounts, the time each offer was accepted, your reference, and the version of the offer terms you accepted. Verification codes are stored only in a scrambled (hashed) form.
- If you make an offer to us outside the website: your name, email, other contact details you gave us (such as a phone number or Instagram name), country, the channel, when you made the offer, and a reference to your message, until you confirm or the viewing closes.
- When you verify: the email you send us with your code.
- To prevent abuse: a one-way scrambled (hashed) form of your internet address, used to limit repeated offers, and a bot check by Cloudflare Turnstile, which uses technical information from your browser to tell people from automated programs.
- If you win: the delivery or collection details we agree with you, and the payment record (amounts, status and Stripe's payment reference). Payment is made through Stripe Checkout, which collects your card and, for delivery, your address; we never see or store card details.
We do not use advertising or analytics cookies on these pages.
Why we use it
- To run the private viewing, check offers, decide the winning offer and complete a sale you have asked to enter into (steps before and for a contract).
- To keep the viewing fair and secure, and to prevent fraud and abuse (our legitimate interests).
- To keep sale records that the law requires (legal obligation).
We do not add you to a mailing list, and we do not sell or share your information for marketing.
Who else handles it
- Cloudflare: hosting, the offer database, Turnstile and our sign-in protection.
- Stripe: payment, for the winning bidder only.
- A courier, if you choose delivery.
These providers may process information outside the UK. [Safeguards for international transfers: to be confirmed.]
How long we keep it
- Offers that do not lead to a sale: proposed 12 months after the viewing closes, then deleted or anonymised. [Subject to final review.]
- Completed sales: for the period the law requires for tax and accounting records. [Period to be confirmed.]
Your rights
You can ask to see, correct or delete your information, to restrict or object to how we use it, and to receive a copy. Contact us at the address above. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ico.org.uk).