Privacy Policy

Collector’s Arch

Last updated:

Collector’s Arch (“Collector’s Arch”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, contact us, subscribe to updates, request a report, or use any of our digital services.

This Privacy Policy is intended to comply with the UK General Data Protection Regulation, the Data Protection Act 2018, and other applicable UK data protection laws.

1. Who We Are

Collector’s Arch is an art market research, insights, and analysis platform providing editorial content, artist research, market commentary, and digital report-related services.

For the purposes of UK data protection law, Collector’s Arch is the data controller of the personal data we collect and process.

Controller details:
Collector’s Arch
Website: [Insert website URL]
Email: [Insert contact email]
Address: [Insert business address, if applicable]

We have not appointed a Data Protection Officer because this is not currently required for our business. However, privacy-related enquiries can be sent to the email address above.

2. Personal Data We Collect

We may collect and process the following categories of personal data.

Information you provide to us

This may include:

Your name
Email address
Company or organisation name
Website URL
Artist names, artist websites, artwork details, or other information submitted for report generation
Messages, enquiries, or feedback sent through contact forms or email
Newsletter subscription details
Payment or billing-related information, where applicable

Information collected automatically

When you use our website, we may collect limited technical and usage information, including:

IP address
Browser type and version
Device type
Operating system
Pages visited
Time and date of visit
Time spent on pages
Referring website or source
Approximate location, such as country or city

Cookies and analytics data

Our website may use cookies, analytics tools, and similar technologies to understand website performance, improve user experience, and measure engagement.

Further details may be provided in a separate Cookie Policy or cookie banner, where applicable.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

To operate and maintain our website
To provide art market research, analysis, reports, or related services
To respond to enquiries or requests
To process report requests submitted through our website
To send newsletters or updates where you have subscribed
To improve our website, content, and services
To monitor website security and prevent misuse
To manage payments, invoices, or accounting records, where applicable
To comply with legal, tax, regulatory, or accounting obligations
To protect our legal rights and business interests

4. Our Lawful Basis for Processing

Under UK data protection law, we must have a lawful basis for using personal data. The lawful bases under the UK GDPR include consent, contract, legal obligation, legitimate interests, vital interests, and public task. (ICO)

We rely on the following lawful bases:

PurposeLawful basis

Responding to enquiriesLegitimate interests or steps before entering into a contract

Providing requested services or reportsContract or legitimate interests

Sending newsletters or marketing emailsConsent, or legitimate interests where legally permitted

Website analytics and improvementLegitimate interests or consent, depending on cookie settings

Security and fraud preventionLegitimate interests

Payment, tax, and accounting recordsLegal obligation

Protecting legal rightsLegitimate interests

Where we rely on legitimate interests, our interests include operating our website, improving our services, communicating with users, protecting our business, and developing Collector’s Arch as an art market research platform.

Where we rely on consent, you may withdraw your consent at any time.

5. AI-Assisted Report Generation

Collector’s Arch may offer services where users submit artist names, artist websites, artwork details, or related information to generate research or analytical reports.

Where AI-assisted tools or third-party technology providers are used, the information you submit may be processed by those providers solely for the purpose of generating, improving, or delivering the requested output.

We aim to use reputable technology providers and take reasonable steps to ensure that appropriate safeguards are in place.

You should not submit confidential, commercially sensitive, highly personal, or third-party personal data unless you have the right to do so.

Collector’s Arch does not use AI-generated reports to make legally binding or similarly significant automated decisions about individuals.

6. Special Category Data

We do not intentionally collect special category personal data, such as information about health, religion, ethnicity, political opinions, biometric data, or sexual orientation.

If you voluntarily provide such information, we will only process it where lawful and necessary. Under the UK GDPR, special category data requires additional protection and a separate legal condition for processing. (ICO)

7. Who We Share Personal Data With

We do not sell your personal data.

We may share personal data with trusted third parties where necessary, including:

Website hosting providers
Website builder or CMS providers, such as Wix
Email newsletter platforms
Analytics providers
Payment processors
AI or technology service providers
Cloud storage providers
Professional advisers, such as accountants or lawyers
Regulators, authorities, or law enforcement bodies, where required by law

Where third-party service providers process personal data on our behalf, they are expected to act only on our instructions and apply appropriate security measures. UK GDPR Article 28 requires controller–processor arrangements to include safeguards such as written contracts and security commitments. (ICO)

8. International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms under UK data protection law.

9. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, reporting, and business requirements.

Typical retention periods may include:

Data typeRetention period

Contact form enquiriesUp to 24 months after the last communication

Report requests and related correspondenceUp to 6 years where relevant to business records

Newsletter subscription dataUntil you unsubscribe or request deletion

Payment, invoice, and tax recordsUsually 6 years, in line with UK accounting practice

Website analytics dataAccording to the analytics provider’s retention settings

Legal or dispute-related recordsAs long as necessary to protect legal rights

We may delete or anonymise personal data when it is no longer required.

10. Marketing Communications

If you subscribe to our newsletter or agree to receive updates, we may send you emails about Collector’s Arch, art market insights, reports, articles, services, or related content.

You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us directly.

We will not send you marketing emails where we are not legally permitted to do so.

11. Cookies

Our website may use cookies and similar technologies.

Cookies may be used to:

Make the website function properly
Remember preferences
Analyse website traffic
Improve website performance
Support marketing or social media features, where applicable

Where required, we will ask for your consent before placing non-essential cookies on your device.

You can also control cookies through your browser settings.

12. Your Rights

Under UK data protection law, you may have the following rights:

The right to be informed about how we use your personal data
The right to access your personal data
The right to correct inaccurate or incomplete data
The right to request deletion of your data
The right to restrict processing
The right to object to processing
The right to data portability
The right to withdraw consent where processing is based on consent
Rights relating to automated decision-making and profiling, where applicable

The ICO notes that individuals must be clearly informed about their rights, including the right to withdraw consent and the right to complain. (ICO)

To exercise your rights, please contact us at:

[Insert contact email]

We may need to verify your identity before responding to a request.

13. Right to Object

You have the right to object to our processing of your personal data where we rely on legitimate interests.

You also have the right to object to direct marketing at any time.

If you object to direct marketing, we will stop using your personal data for that purpose.

14. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113

15. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no website, online service, or electronic transmission is completely secure. We cannot guarantee absolute security.

16. Third-Party Links

Our website may contain links to third-party websites, including artist websites, galleries, museums, auction houses, publications, social media platforms, or research sources.

We are not responsible for the privacy practices, security, or content of third-party websites. You should read their privacy policies before providing personal data.

17. Children

Our website and services are not intended for children under 16.

We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will take appropriate steps to delete it.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be posted on this page with a revised “Last updated” date. We encourage users to review this page periodically.

19. Contact Us

For questions about this Privacy Policy or how we handle personal data, please contact:

Collector’s Arch
Website: [Insert website URL]
Email: [Insert contact email]
Address: [Insert business address, if applicable]

My recommendation for your Wix footer

Use this page title:

And in the footer, add:

Final note: before publishing, replace the placeholders and ideally have this reviewed by a UK solicitor, especially because your website may involve AI-generated reports, user-submitted artist data, cookies, and possibly payments.