Effective Date: 12 August 2025

1. Introduction

Welcome to Art is Lit (“Art is Lit“, “we“, “us“, or “our“).

Art is Lit is an online marketplace operated by Art is Lit Ltd, based in England and Wales, dedicated to connecting independent artists with Buyers around the world. Our mission is to provide a secure, transparent, and trusted marketplace where creativity can flourish while respecting the privacy and personal information of everyone who uses our Platform.

We recognise that when you use our Platform, you place your trust in us to handle your Personal Information responsibly. Protecting that trust is one of our highest priorities.

This Privacy Policy explains how we collect, use, store, share, protect, and otherwise process your Personal Information when you interact with the Art is Lit Platform.

This includes when you:

visit our website;
create a User Account;
register as a Seller;
purchase Artwork;
sell Artwork;
upload listings, photographs, or other content;
communicate through the Platform;
leave reviews or ratings;
contact Customer Support;
sign in using supported third-party authentication services (such as Google or Facebook);
subscribe to newsletters or marketing communications;
participate in competitions, surveys, promotions, events, or community activities; or
otherwise interact with Art is Lit.

This Privacy Policy also explains:

what Personal Information we collect;
why we collect it;
the lawful bases on which we process it;
how long we keep it;
who we may share it with;
how we protect it;
your privacy rights; and
how you can exercise those rights.

This Privacy Policy should be read together with our:

Marketplace Terms and Conditions;
Seller Agreement;
Returns & Refunds Policy;
Shipping Policy;
Cookie Policy;
Buyer Protection Policy;
Copyright & Intellectual Property Policy;
Acceptable Use Policy;
Community Guidelines;
AI-Generated Artwork Policy; and
any other policies that form part of the legal framework governing the Art is Lit Platform.

By accessing or using the Platform, you acknowledge that your Personal Information will be processed in accordance with this Privacy Policy.

If you do not agree with this Privacy Policy, you should not use the Platform or provide us with your Personal Information.

Nothing in this Privacy Policy limits or excludes any rights you may have under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR) (where applicable), or any other applicable privacy laws.

2. Who We Are

Art is Lit Ltd (“Art is Lit“, “we“, “us“, or “our“) is responsible for deciding how and why your Personal Information is collected, used, stored, shared, and otherwise processed when you use the Art is Lit Platform.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR), Art is Lit Ltd acts as the Data Controller for the Personal Information processed through the Platform, except where otherwise stated in this Privacy Policy.

2.1 Our Business Details

Business Name: Art is Lit Ltd

Trading Name: Art is Lit

Registered in: England and Wales

Registered Company Number: [Insert Company Registration Number]

Registered Office: [Insert Registered Office Address]

Website: www.artislit.com

Customer Support: support@artislit.com

Legal & Administrative Enquiries: ail.admin@artislit.com

2.2 Our Role as a Marketplace

Art is Lit operates an online marketplace that connects independent Sellers with Buyers.

Although we provide the Platform, payment processing, marketplace tools, and customer support, each Seller operates as an independent business and is responsible for complying with applicable laws in relation to their own activities.

Where a Seller receives Personal Information solely for the purpose of fulfilling an order placed through the Platform (for example, a Buyer’s name, delivery address, and contact details), the Seller must:

use that information only to process and fulfil the order;
protect the information using appropriate security measures;
comply with all applicable data protection laws;
not use the information for unauthorised marketing or unrelated purposes; and
securely delete or retain the information only where required by law or for legitimate business purposes.

Sellers must not collect, retain, or use Buyers’ Personal Information for purposes that are incompatible with this Privacy Policy, the Seller Agreement, or applicable data protection legislation.

2.3 Data Protection Commitment

Art is Lit is committed to protecting your privacy and handling your Personal Information responsibly.

We process Personal Information in accordance with the principles of applicable data protection legislation, including:

lawfulness, fairness, and transparency;
purpose limitation;
data minimisation;
accuracy;
storage limitation;
integrity and confidentiality; and
accountability.

We continually review our privacy practices and security measures to help ensure that Personal Information is handled responsibly, securely, and in accordance with applicable legal requirements.

2.4 Contacting Us About Privacy

If you have any questions about this Privacy Policy, how we process your Personal Information, or how to exercise your privacy rights, you can contact us using the details provided in Section 15 – Contact Us.

Where required by applicable law, we will respond to your request within the relevant statutory time limits.

3. Scope of this Privacy Policy

This Privacy Policy applies to the Personal Information processed by Art is Lit in connection with the operation of the Art is Lit Platform and related services.

It explains how we collect, use, store, share, protect, and otherwise process Personal Information obtained through your use of our Platform.

This Privacy Policy applies whether you are:

a visitor to our website;
a registered User;
a Buyer;
a Seller;
a prospective Seller;
a guest using certain Platform features;
a participant in competitions, surveys, events, or promotions;
a subscriber to our newsletters or marketing communications; or
an individual who contacts us for support or other enquiries.

This Privacy Policy applies to Personal Information collected when you:

visit or browse our website;
create or manage an Account;
sign in using an email address, Google, Facebook, or another approved authentication provider;
buy or sell Artwork through the Platform;
upload content, listings, reviews, photographs, or other materials;
communicate with other Users using Platform features;
contact Customer Support;
participate in marketplace activities, promotions, surveys, competitions, or community events;
subscribe to marketing communications; or
otherwise interact with Art is Lit.

This Privacy Policy also applies to Personal Information collected through:

our website;
Seller Dashboard;
Buyer Account;
customer support services;
email communications;
social media interactions where we control the processing of Personal Information;
future mobile applications operated by Art is Lit; and
any other services that expressly refer to this Privacy Policy.

3.1 Third-Party Services

This Privacy Policy applies only to the processing of Personal Information by Art is Lit.

Our Platform may contain links to third-party websites, applications, payment providers, social media platforms, shipping providers, or other external services that are not owned or controlled by Art is Lit.

Where you access or interact with those third-party services, your Personal Information will be processed in accordance with their own privacy policies and terms.

Art is Lit is not responsible for the privacy practices, content, or security of third-party services. We encourage you to read their privacy policies before providing any Personal Information.

3.2 Seller Processing of Personal Information

Independent Sellers receive limited Personal Information where necessary to fulfil orders placed through the Platform.

Sellers are required to process that information only for legitimate order fulfilment purposes and in accordance with:

the Seller Agreement;
applicable data protection laws; and
any other applicable legal obligations.

Art is Lit is not responsible for any Personal Information processed independently by a Seller outside the operation of the Platform or in breach of this Privacy Policy or the Seller Agreement.

3.3 Changes to Our Services

As Art is Lit develops, we may introduce new features, products, technologies, or services.

Where those developments involve the processing of Personal Information, we will update this Privacy Policy where appropriate to reflect any material changes in our privacy practices.

3.4 Our Commitment

Art is Lit is committed to being transparent about how your Personal Information is processed.

This Privacy Policy is intended to provide clear and accessible information about our privacy practices so that you can make informed decisions when using the Platform.

4. Information We Collect

Art is Lit collects Personal Information to operate the Platform, provide our services, process transactions, maintain security, comply with legal obligations, and improve the experience for Buyers, Sellers, and other Users.

The Personal Information we collect depends on how you interact with the Platform and the services you use.

4.1 Information You Provide Directly

When you create an Account, make a purchase, apply to become a Seller, contact us, or otherwise use the Platform, you may provide information including:

full name;
email address;
telephone number;
postal or delivery address;
billing address;
username;
password (stored securely in encrypted form where applicable);
profile photograph;
biography or profile description;
business name and trading information (where applicable);
company registration details (where applicable);
VAT or tax registration information (where applicable);
bank account or payout details (for Sellers);
identity verification documents where required;
communications sent to Customer Support; and
any other information you choose to provide.

4.2 Seller Information

If you register as a Seller, we may also collect:

store name;
logo and banner images;
artist biography;
product listings;
Artwork descriptions;
pricing information;
inventory information;
shipping settings;
return information;
payout preferences;
verification documents;
business documentation; and
other information required to operate your Seller Account.

4.3 Transaction Information

When you buy or sell Artwork, we may collect:

order details;
purchase history;
payment status;
delivery information;
shipping tracking information;
refund information;
Buyer Protection information;
dispute information;
commission information;
payout history; and
transaction records.

Payment card information is processed by our approved third-party payment providers. Art is Lit does not store complete payment card details.

4.4 Account and Authentication Information

When you access your Account, we may collect information relating to authentication, including:

email address used for login;
encrypted password (where applicable);
Google Sign-In information;
Facebook Login information;
future authentication providers introduced by Art is Lit;
login history;
security events; and
account recovery information.

The exact information received from third-party authentication providers depends on your privacy settings with those providers and the permissions you choose to grant.

4.5 Technical Information

When you use the Platform, we may automatically collect technical information including:

IP address;
browser type and version;
operating system;
device type;
language settings;
time zone;
referral URLs;
pages viewed;
browsing activity;
clickstream data;
session information;
diagnostic information;
crash reports (where applicable); and
similar technical information necessary for operating and securing the Platform.

4.6 Cookies and Similar Technologies

We use cookies and similar technologies to:

remember your preferences;
keep you signed in;
improve website performance;
analyse how the Platform is used;
enhance security;
personalise your experience; and
support marketing activities where permitted.

Further information is provided in our Cookie Policy.

4.7 Communications

We may collect information when you:

contact Customer Support;
communicate through Platform messaging features;
submit enquiries;
leave reviews or ratings;
participate in surveys;
enter competitions;
respond to questionnaires;
communicate by email; or
otherwise interact with Art is Lit.

4.8 Marketing Information

Where permitted by law and subject to your preferences, we may collect information relating to:

newsletter subscriptions;
marketing preferences;
promotional campaign participation;
event registrations;
competitions;
surveys; and
communication preferences.

You may withdraw your marketing consent at any time.

4.9 Information from Third Parties

We may receive Personal Information from trusted third parties including:

payment providers;
identity verification providers;
shipping providers;
fraud prevention services;
analytics providers;
Google;
Facebook;
marketing partners (where permitted);
public authorities where legally required; and
other service providers supporting the operation of the Platform.

We only receive information that is reasonably necessary for the services being provided.

4.10 Information We Generate

As you use the Platform, we may generate information including:

account activity history;
purchase history;
Seller performance information;
dispute history;
Buyer Protection records;
fraud prevention indicators;
customer service history;
verification status;
communication history;
review history; and
security logs.

This information helps us operate, improve, and protect the Platform.

4.11 Information We Do Not Intentionally Collect

Art is Lit does not intentionally collect:

special category Personal Information (such as information revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data), unless it is voluntarily provided and necessary for a specific purpose permitted by law;
information about children under the minimum age required to use the Platform; or
unnecessary Personal Information beyond what is reasonably required to provide our services.

If we become aware that we have collected Personal Information that we do not need or are not legally permitted to process, we will take appropriate steps to delete or anonymise it where required.

4.12 Our Commitment

Art is Lit believes in collecting only the Personal Information that is reasonably necessary to operate a safe, secure, and trusted marketplace.

We are committed to applying the principles of data minimisation, purpose limitation, and privacy by design, ensuring that your Personal Information is handled responsibly, transparently, and in accordance with applicable data protection laws.

5. How We Use Your Personal Information

Art is Lit processes Personal Information only where there is a lawful reason to do so and only for purposes that are compatible with this Privacy Policy and applicable data protection laws.

We use Personal Information to provide our services, operate the Platform, protect Users, comply with legal obligations, and continually improve the Art is Lit marketplace.

5.1 To Provide and Manage Your Account

We use your Personal Information to:

create and manage your User Account;
verify your identity where required;
authenticate your login credentials;
enable secure access to the Platform;
manage account preferences and settings;
provide customer support; and
maintain the security and integrity of your Account.

5.2 To Operate the Marketplace

We use Personal Information to facilitate the operation of the Art is Lit marketplace, including to:

process purchases and sales;
enable communication relating to orders;
manage Seller Accounts;
publish Seller profiles and listings;
administer the Seller Dashboard;
process marketplace transactions;
calculate marketplace commissions;
manage Buyer Protection;
administer the 48-hour Buyer Inspection Period;
process Seller payouts; and
maintain transaction records.

5.3 To Process Payments

We use Personal Information to:

process payments securely;
facilitate Seller payouts;
verify payment information;
prevent payment fraud;
investigate payment disputes;
process refunds;
administer chargebacks; and
comply with payment provider requirements.

Payment card information is processed securely by approved third-party payment providers.

5.4 To Communicate With You

We use Personal Information to:

respond to enquiries;
provide customer support;
send order confirmations;
provide shipping and delivery updates;
notify you about your Account;
respond to complaints or disputes;
send service-related communications; and
provide important legal or security notifications.

These communications are generally necessary for the operation of the Platform and are not marketing communications.

5.5 To Improve the Platform

We analyse information about how the Platform is used to:

improve website functionality;
develop new features;
improve the Seller and Buyer experience;
understand marketplace trends;
monitor Platform performance;
improve accessibility;
fix technical issues; and
enhance security.

Where appropriate, this information may be aggregated or anonymised.

5.6 To Protect Users and the Marketplace

We process Personal Information to help:

detect and prevent fraud;
identify suspicious activity;
investigate breaches of our policies;
verify Seller identities;
protect Buyers and Sellers;
prevent misuse of the Platform;
investigate intellectual property complaints;
maintain marketplace integrity; and
protect the security of our systems.

5.7 To Comply With Legal Obligations

We may process Personal Information where necessary to:

comply with applicable laws and regulations;
respond to lawful requests from public authorities;
comply with court orders;
meet tax and financial reporting obligations;
comply with anti-money laundering requirements where applicable;
maintain legally required records; and
protect our legal rights.

5.8 Marketing and Communications

Where permitted by law and in accordance with your communication preferences, we may use your Personal Information to:

send newsletters;
provide marketplace updates;
notify you of promotions or special offers;
invite you to surveys or events;
introduce new Platform features; and
share news about Art is Lit.

You may unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by updating your communication preferences within your Account.

Service-related communications will continue where necessary for the operation of your Account or the Platform.

5.9 Personalising Your Experience

We may use Personal Information to personalise your experience by:

remembering your preferences;
displaying relevant content;
recommending Artwork or Sellers;
improving search results;
tailoring marketplace features; and
providing a more relevant and efficient user experience.

Where personalisation relies on cookies or similar technologies, this will be subject to your cookie preferences where required by law.

5.10 Business Administration

We also use Personal Information to support the day-to-day operation of Art is Lit, including:

maintaining internal records;
carrying out audits;
monitoring compliance with our policies;
training Customer Support staff;
resolving disputes;
managing insurance claims where applicable;
planning and reporting; and
protecting the long-term operation of the Platform.

5.11 Future Services

As Art is Lit develops, we may introduce new features, products, or services.

Where these require the processing of Personal Information, we will ensure that such processing is carried out in accordance with this Privacy Policy or provide additional privacy information where required by applicable law.

5.12 Our Commitment

Art is Lit uses Personal Information only where it is reasonably necessary to operate a secure, trusted, and successful marketplace.

We are committed to processing Personal Information fairly, lawfully, and transparently, ensuring that every use of your information has a legitimate purpose and respects your privacy rights.

6. Lawful Bases for Processing Personal Information

Under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU General Data Protection Regulation (EU GDPR), Art is Lit must have a lawful basis for processing Personal Information.

Depending on the circumstances, we rely on one or more of the following lawful bases.

6.1 Performance of a Contract

We process Personal Information where it is necessary to perform a contract with you or to take steps at your request before entering into a contract.

This includes processing necessary to:

create and manage your Account;
process purchases and sales;
facilitate communications relating to orders;
administer the Seller Dashboard;
process payments and Seller payouts;
operate Buyer Protection;
administer the 48-hour Buyer Inspection Period;
provide Customer Support;
process refunds and returns; and
provide the services available through the Art is Lit Platform.

Without this processing, we may be unable to provide some or all of our services.

6.2 Compliance with Legal Obligations

We process Personal Information where necessary to comply with legal and regulatory obligations.

This may include processing required to:

comply with tax and financial reporting obligations;
prevent fraud and financial crime;
comply with anti-money laundering requirements where applicable;
respond to lawful requests from public authorities;
comply with court orders;
maintain legally required records;
comply with consumer protection legislation; and
fulfil other legal obligations applicable to Art is Lit.

6.3 Legitimate Interests

We may process Personal Information where it is necessary for our legitimate interests or the legitimate interests of others, provided that those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

operating and improving the Platform;
maintaining marketplace security;
protecting Buyers and Sellers;
detecting and preventing fraud;
preventing misuse of the Platform;
improving customer service;
analysing Platform performance;
developing new features;
protecting our legal rights;
resolving disputes;
enforcing our Terms & Conditions and other policies; and
ensuring the long-term success and integrity of the Art is Lit marketplace.

Where we rely on legitimate interests, we carefully consider and balance our interests against your privacy rights before processing Personal Information.

6.4 Consent

Where required by law, we rely on your consent before processing certain types of Personal Information.

This may include:

sending marketing communications;
placing non-essential cookies or similar technologies;
personalising certain features where consent is required;
participating in optional surveys or research; or
any other processing where applicable law requires consent.

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6.5 Vital Interests

In exceptional circumstances, we may process Personal Information where necessary to protect the vital interests of an individual.

This lawful basis is expected to be used only in rare situations where processing is necessary to protect someone’s life or prevent serious harm.

6.6 Public Task

Art is Lit does not normally process Personal Information on the basis that it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

If this lawful basis becomes relevant in the future, we will update this Privacy Policy accordingly.

6.7 Special Category Personal Information

Art is Lit does not intentionally collect or process Special Category Personal Information unless:

you voluntarily provide it;
processing is required by law;
processing is necessary for the establishment, exercise, or defence of legal claims; or
another lawful condition under applicable data protection legislation applies.

Where Special Category Personal Information is processed, we will ensure that an appropriate lawful basis and additional condition for processing exists where required.

6.8 Changes to Our Processing

As Art is Lit introduces new services or features, the lawful basis relied upon for particular processing activities may change.

Where required by applicable law, we will update this Privacy Policy or provide additional privacy information before introducing any material changes to how Personal Information is processed.

6.9 Our Commitment

Art is Lit is committed to processing Personal Information only where there is a clear and lawful reason to do so.

We carefully consider the legal basis for every processing activity and aim to collect and use Personal Information in a manner that is fair, transparent, proportionate, and respectful of your privacy rights.

7. Sharing Your Personal Information

Art is Lit respects your privacy and does not sell your Personal Information to third parties.

We only share Personal Information where it is necessary to operate the Platform, provide our services, comply with legal obligations, protect our Users, or where you have asked us to do so.

Where we share Personal Information, we take reasonable steps to ensure that it is shared securely and only with organisations that are required to protect it in accordance with applicable data protection laws.

7.1 Sharing with Sellers

Where you purchase Artwork through the Platform, we share only the Personal Information reasonably necessary for the Seller to fulfil your order.

Depending on the circumstances, this may include:

your name;
delivery address;
contact details;
order information; and
any information necessary to complete the transaction or provide customer support.

Sellers must process this Personal Information only for legitimate order fulfilment purposes and in accordance with:

the Seller Agreement;
applicable data protection legislation; and
any other applicable legal obligations.

Sellers must not use Buyers’ Personal Information for unrelated purposes, including unauthorised marketing or sharing it with third parties without a lawful basis.

7.2 Payment Service Providers

Payments made through the Platform are processed by approved third-party payment providers.

We may share information reasonably necessary to:

process payments;
facilitate Seller payouts;
prevent fraud;
investigate chargebacks;
process refunds;
verify transactions; and
comply with financial and regulatory requirements.

Art is Lit does not store complete payment card details.

7.3 Shipping and Delivery Providers

Where necessary to deliver Artwork, we may share relevant Personal Information with shipping or delivery providers.

This may include:

recipient name;
delivery address;
contact details;
tracking information; and
delivery instructions where appropriate.

Only information reasonably necessary to complete delivery will be shared.

7.4 Identity Verification and Fraud Prevention

Where identity verification or fraud prevention is required, we may share relevant Personal Information with trusted third-party providers to:

verify identity;
prevent fraud;
protect Buyers and Sellers;
investigate suspicious activity;
comply with payment provider requirements; and
meet legal or regulatory obligations.

These providers are contractually required to protect Personal Information and use it only for the agreed purposes.

7.5 Service Providers

We work with carefully selected service providers who help us operate and improve the Platform.

These providers may assist with services including:

website hosting;
cloud storage;
website security;
customer support;
analytics;
email delivery;
authentication services (such as Google or Facebook);
communications;
technical maintenance; and
other operational services.

These providers process Personal Information only on our instructions and are required to implement appropriate security measures.

7.6 Professional Advisers

We may share Personal Information where reasonably necessary with our professional advisers, including:

solicitors;
accountants;
auditors;
insurers; and
other professional advisers.

Such disclosures will be limited to what is reasonably necessary for the relevant purpose.

7.7 Legal and Regulatory Authorities

We may disclose Personal Information where required or permitted by law, including to:

courts;
law enforcement agencies;
regulatory authorities;
tax authorities;
government bodies; or
other competent authorities.

We will only disclose information where we reasonably believe there is a lawful basis for doing so.

7.8 Business Transfers

If Art is Lit undergoes a merger, acquisition, restructuring, investment, sale of assets, or other business reorganisation, Personal Information may be transferred as part of that transaction.

Where required by law, we will notify affected Users and ensure that appropriate safeguards continue to apply to their Personal Information.

7.9 With Your Consent

In some circumstances, we may share your Personal Information with third parties where you have given us your explicit consent.

You may withdraw your consent at any time, although this will not affect the lawfulness of processing carried out before consent was withdrawn.

7.10 International Sharing

Where Personal Information is transferred outside the United Kingdom or European Economic Area (EEA), we will ensure that appropriate safeguards are in place as described in Section 8 – International Transfers.

7.11 What We Do Not Do

Art is Lit does not:

sell your Personal Information to third parties;
rent your Personal Information for marketing purposes;
disclose more Personal Information than is reasonably necessary; or
share Personal Information without a lawful basis.

7.12 Our Commitment

Art is Lit is committed to sharing Personal Information responsibly, securely, and transparently.

Whenever we share Personal Information, we seek to ensure that it is:

limited to what is reasonably necessary;
protected by appropriate contractual or legal safeguards;
processed only for legitimate purposes; and
handled in accordance with applicable data protection legislation.

Your trust is fundamental to the Art is Lit marketplace, and we are committed to protecting your Personal Information whenever it is shared.

8. International Transfers of Personal Information

Art is Lit may transfer, store, or process Personal Information outside the United Kingdom (UK) or the European Economic Area (EEA) where this is necessary to operate the Platform, provide our services, or work with trusted service providers.

Whenever Personal Information is transferred internationally, we are committed to ensuring that it continues to receive an appropriate level of protection in accordance with applicable data protection laws.

8.1 Why International Transfers May Occur

International transfers may occur where we use trusted third-party providers or services that operate in countries outside the UK or EEA.

Examples include providers of:

cloud hosting;
payment processing;
identity verification;
fraud prevention;
customer support;
email delivery;
analytics;
authentication services (such as Google or Facebook);
website security; and
other technology services supporting the operation of the Platform.

Some independent Sellers may also be located outside the UK or EEA. Where necessary to fulfil an order, limited Personal Information may be shared with those Sellers in accordance with this Privacy Policy and applicable data protection laws.

8.2 Safeguards We Use

Where Personal Information is transferred to a country that has not been recognised as providing an adequate level of data protection, Art is Lit will implement appropriate safeguards.

These safeguards may include:

the UK International Data Transfer Agreement (IDTA);
the UK Addendum to the European Commission’s Standard Contractual Clauses (SCCs);
the European Commission’s Standard Contractual Clauses (where applicable);
transfers to countries that benefit from an adequacy decision;
approved codes of conduct or certification mechanisms where available; or
any other lawful transfer mechanism recognised under applicable data protection legislation.

We will use the safeguard that is appropriate for the relevant transfer and legal jurisdiction.

8.3 Assessing International Transfers

Before transferring Personal Information internationally, Art is Lit takes reasonable steps to assess:

the nature of the Personal Information being transferred;
the purpose of the transfer;
the legal protections available in the receiving country;
the security measures implemented by the recipient; and
whether additional contractual, organisational, or technical safeguards are required.

Where appropriate, we will carry out Transfer Risk Assessments (TRAs) or similar assessments in accordance with applicable legal requirements.

8.4 Security of International Transfers

Where Personal Information is transferred internationally, we seek to ensure that appropriate security measures are maintained.

Depending on the circumstances, these measures may include:

encryption;
secure transmission methods;
access controls;
confidentiality obligations;
contractual protections;
technical security measures; and
regular review of our service providers.

8.5 Your Rights

International transfers do not reduce your privacy rights.

Where applicable, you may request additional information about the safeguards used to protect your Personal Information when it is transferred internationally.

If legally permitted, we will provide information about the relevant safeguards while protecting confidential commercial information and the security of our systems.

8.6 Changes to International Transfers

As Art is Lit grows, we may introduce new service providers, technologies, or international operations.

Where these changes affect the international transfer of Personal Information, we will review our transfer arrangements and update this Privacy Policy where required by applicable law.

8.7 Our Commitment

Art is Lit is committed to protecting your Personal Information regardless of where it is processed.

Whenever Personal Information is transferred internationally, we seek to ensure that appropriate legal, organisational, and technical safeguards are in place so that your information continues to receive a level of protection that is consistent with applicable data protection legislation.

9. Data Retention

Art is Lit retains Personal Information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, enforce our agreements, and protect the security and integrity of the Platform.

Retention periods vary depending on the type of Personal Information and the purpose for which it is processed.

When Personal Information is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with applicable data protection laws.

9.1 How We Determine Retention Periods

When deciding how long to retain Personal Information, we consider factors including:

the purpose for which the information was collected;
the nature and sensitivity of the Personal Information;
legal and regulatory requirements;
accounting and tax obligations;
dispute resolution requirements;
fraud prevention and security considerations;
contractual obligations;
industry best practice; and
the potential risk of harm if the information were retained for longer than necessary.

9.2 Typical Retention Periods

Although retention periods may vary depending on the circumstances, Art is Lit generally retains Personal Information as follows:

Category	Typical Retention Period
User Account information	While the Account remains active and for a reasonable period after closure where required
Order and transaction records	Up to 7 years where required for legal, tax, or accounting purposes
Seller verification records	For as long as reasonably necessary to meet legal, regulatory, fraud prevention, and audit requirements
Customer Support enquiries	Up to 6 years after the enquiry is resolved where appropriate
Marketing preferences	Until consent is withdrawn or the information is no longer required
Cookie preferences	In accordance with our Cookie Policy and applicable law
Security logs	For as long as reasonably necessary to investigate security incidents and protect the Platform
Dispute and Buyer Protection records	For as long as reasonably necessary to resolve disputes, comply with legal obligations, and protect the Platform

These retention periods may be extended where necessary to comply with legal obligations or protect the legitimate interests of Art is Lit or its Users.

9.3 Account Closure

If you close your Account, we will begin the process of closing or anonymising your Personal Information where appropriate.

However, we may retain certain information where necessary to:

comply with legal obligations;
maintain financial records;
comply with tax legislation;
investigate fraud;
resolve disputes;
enforce our agreements;
respond to legal claims; or
protect the security and integrity of the Platform.

Closing your Account does not automatically require us to delete all Personal Information immediately where there is a lawful basis for continued retention.

9.4 Seller Information

Where a Seller closes their Seller Account, Art is Lit may retain certain records relating to:

completed transactions;
payouts;
commissions;
verification records;
tax information;
customer disputes;
intellectual property matters; and
legal or regulatory obligations.

This helps ensure compliance with applicable laws and protects both Buyers and Sellers.

9.5 Anonymisation

Where reasonably practicable, Art is Lit may anonymise Personal Information so that it can no longer be linked to an identifiable individual.

Anonymised information may be retained and used for purposes including:

statistical analysis;
marketplace performance reporting;
service improvement;
business planning;
research; and
developing new Platform features.

Once information has been anonymised so that individuals can no longer be identified, it is no longer treated as Personal Information under applicable data protection laws.

9.6 Legal Holds

In certain circumstances, Art is Lit may retain Personal Information for longer than the periods described above where reasonably necessary to:

comply with legal obligations;
respond to regulatory investigations;
preserve evidence;
defend or pursue legal claims;
investigate fraud or unlawful activity; or
comply with court orders or lawful requests from public authorities.

9.7 Secure Disposal

When Personal Information is no longer required, Art is Lit seeks to ensure that it is securely:

deleted;
anonymised;
destroyed; or
otherwise disposed of using appropriate technical and organisational measures.

We regularly review the Personal Information we hold to ensure that it is not retained for longer than is reasonably necessary.

9.8 Our Commitment

Art is Lit is committed to retaining Personal Information responsibly and only for as long as there is a legitimate business or legal reason to do so.

By applying appropriate retention periods, regularly reviewing the information we hold, and securely deleting or anonymising information when it is no longer needed, we aim to protect your privacy while meeting our legal and operational responsibilities.

10. Your Privacy Rights

Art is Lit respects your privacy rights and is committed to helping you exercise them in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR).

Depending on your circumstances and the applicable law, you may have the following rights.

10.1 Right to Be Informed

You have the right to be informed about how your Personal Information is collected, used, shared, stored, and otherwise processed.

This Privacy Policy is intended to provide clear and transparent information about our privacy practices.

10.2 Right of Access

You have the right to request confirmation of whether we process your Personal Information and, where applicable, to request access to that information.

Subject to applicable law, you may also request:

a copy of your Personal Information;
information about why it is processed;
the categories of Personal Information processed;
the recipients or categories of recipients with whom it has been shared;
how long it is expected to be retained; and
information about your privacy rights.

10.3 Right to Rectification

You have the right to request that inaccurate or incomplete Personal Information be corrected.

You can also update much of your account information directly through your Account settings where this functionality is available.

10.4 Right to Erasure (“Right to Be Forgotten”)

You may request that we delete your Personal Information in certain circumstances, including where:

the information is no longer necessary for the purpose for which it was collected;
you withdraw consent where consent is the lawful basis for processing;
you successfully object to the processing;
the information has been processed unlawfully; or
deletion is required by applicable law.

This right is not absolute.

We may retain certain Personal Information where we have a lawful reason to do so, including to comply with legal obligations, resolve disputes, prevent fraud, enforce our agreements, or establish, exercise, or defend legal claims.

10.5 Right to Restrict Processing

You may request that we temporarily restrict the processing of your Personal Information in certain circumstances, including where:

you contest the accuracy of the information;
processing is unlawful but you request restriction instead of deletion;
we no longer need the information but you require it for legal claims; or
you have objected to processing and we are considering your objection.

10.6 Right to Data Portability

Where processing is based on your consent or the performance of a contract and carried out by automated means, you may request a copy of certain Personal Information in a structured, commonly used, and machine-readable format.

Where technically feasible, you may also request that this information be transferred directly to another organisation.

10.7 Right to Object

You have the right to object to certain types of processing, including processing based on our legitimate interests.

Where you object, we will consider your request in accordance with applicable data protection laws.

You also have the right to object at any time to the processing of your Personal Information for direct marketing purposes.

10.8 Right to Withdraw Consent

Where we rely on your consent to process Personal Information, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

You can withdraw your consent by:

updating your Account preferences where available;
using the unsubscribe link in marketing emails; or
contacting us using the details provided in this Privacy Policy.

10.9 Rights Relating to Automated Decision-Making

Art is Lit does not currently make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

If this changes in the future, we will update this Privacy Policy and provide any additional information required by applicable law.

10.10 Making a Privacy Request

If you wish to exercise any of your privacy rights, you may contact us using the contact details provided in Section 15 – Contact Us.

To protect your privacy and security, we may request reasonable information to verify your identity before responding to your request.

We aim to respond to valid requests within one month, although this period may be extended where permitted by applicable law, for example where requests are particularly complex or numerous.

If we extend the response period, we will inform you of the reasons for the delay.

10.11 Right to Lodge a Complaint

If you believe that we have processed your Personal Information unlawfully or failed to comply with applicable data protection legislation, we encourage you to contact us first so that we can try to resolve your concerns.

You also have the right to lodge a complaint with the relevant supervisory authority.

If you are in the United Kingdom, this is the:

Information Commissioner’s Office (ICO)

Website: www.ico.org.uk

Telephone: 0303 123 1113

If you are located in another country, you may have the right to contact your local data protection authority.

10.12 Our Commitment

Art is Lit is committed to respecting your privacy rights and making it as straightforward as possible for you to exercise them.

We will consider every request fairly, respond within the timeframes required by applicable law, and explain our decisions clearly where we are unable to comply with a request in full.

We believe that giving you meaningful control over your Personal Information is an essential part of maintaining your trust and building a safe, transparent, and responsible marketplace.

11. Cookies and Similar Technologies

Art is Lit uses cookies and similar technologies to help operate the Platform, improve your browsing experience, understand how our services are used, and, where permitted, provide personalised content and marketing.

Cookies are small text files that are placed on your device when you visit our website. Similar technologies, such as pixels, web beacons, local storage, and software development kits (SDKs), may also be used to provide certain Platform features and improve our services.

11.1 Types of Cookies We Use

Depending on how you use the Platform, we may use the following categories of cookies and similar technologies:

Strictly Necessary Cookies

These cookies are essential for the operation and security of the Platform.

They help us to:

keep you signed in to your Account;
remember security settings;
process purchases and sales;
maintain Platform functionality;
prevent fraud; and
protect the security of our services.

Because these cookies are necessary for the operation of the Platform, they cannot normally be disabled through our cookie preferences.

Functional Cookies

Functional cookies help us remember your preferences and improve your experience.

For example, they may remember:

language preferences;
regional settings;
accessibility preferences;
login preferences (where appropriate); and
other personalised settings.

Analytics and Performance Cookies

These cookies help us understand how visitors use the Platform.

They allow us to analyse information such as:

pages visited;
time spent on the Platform;
navigation patterns;
device types;
browser information; and
website performance.

Where possible, this information is aggregated or anonymised.

Marketing Cookies

With your consent where required by law, marketing cookies may be used to:

measure the effectiveness of advertising campaigns;
provide more relevant advertising;
understand user engagement with promotions;
improve marketing communications; and
personalise promotional content.

Art is Lit does not sell your Personal Information through cookies.

11.2 Managing Your Cookie Preferences

Where required by applicable law, we will ask for your consent before placing non-essential cookies on your device.

You can manage or withdraw your cookie preferences at any time by:

using our Cookie Preferences tool (where available);
adjusting your browser settings; or
following the instructions provided in our Cookie Policy.

Please note that disabling certain cookies may affect the functionality or performance of some features of the Platform.

11.3 Third-Party Cookies

Some cookies may be placed by trusted third-party service providers that support the operation of the Platform.

These may include providers of:

analytics;
payment services;
authentication services (such as Google or Facebook);
embedded content;
website security; and
marketing services where you have provided the necessary consent.

These third parties are responsible for their own privacy and cookie practices. We encourage you to review their privacy policies where appropriate.

11.4 Cookie Policy

Further information about the cookies and similar technologies used by Art is Lit, including the specific cookies we use, their purposes, retention periods, and how to manage your preferences, is available in our separate Cookie Policy.

11.5 Our Commitment

Art is Lit is committed to using cookies and similar technologies responsibly, transparently, and in accordance with applicable data protection and electronic communications laws.

We aim to provide clear information and meaningful choices so that you remain in control of how cookies are used while enjoying a secure and user-friendly experience on our Platform.

12. Security of Your Personal Information

Art is Lit is committed to protecting the confidentiality, integrity, and availability of your Personal Information.

We implement appropriate technical and organisational measures designed to safeguard Personal Information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

While no method of transmitting or storing information electronically can be guaranteed to be completely secure, we continually review and improve our security practices to help protect the information entrusted to us.

12.1 Security Measures

Depending on the nature of the information and the risks involved, our security measures may include:

encryption of Personal Information during transmission where appropriate;
encryption or secure storage of sensitive information;
secure password management and authentication procedures;
access controls based on business need;
multi-factor authentication for administrative access where appropriate;
monitoring of systems for suspicious activity;
firewalls and network security controls;
malware protection and vulnerability management;
regular software updates and security patching;
secure backup and disaster recovery procedures; and
staff training on data protection, privacy, and information security.

We regularly review these measures to ensure they remain appropriate to the risks associated with the Personal Information we process.

12.2 Access to Personal Information

Access to Personal Information is restricted to employees, contractors, and authorised service providers who require it to perform their duties.

All individuals who process Personal Information on behalf of Art is Lit are expected to:

maintain appropriate confidentiality;
comply with applicable data protection laws;
follow our security procedures; and
process Personal Information only for authorised purposes.

12.3 Account Security

Users also play an important role in protecting their Personal Information.

We encourage you to:

choose a strong, unique password;
keep your login credentials confidential;
avoid sharing your Account with others;
sign out of shared devices;
keep your contact details up to date; and
notify us immediately if you suspect that your Account has been accessed without your authorisation.

Where available, we strongly encourage Users to enable two-factor authentication (2FA) for additional account security.

12.4 Security Incidents

If we become aware of a Personal Data Breach that is likely to result in a risk to the rights and freedoms of individuals, we will respond promptly and in accordance with applicable data protection legislation.

Where required by law, we will:

notify the appropriate supervisory authority;
notify affected individuals where legally required; and
take appropriate steps to investigate, contain, and mitigate the impact of the incident.

We continually review security incidents to help improve our systems, processes, and security measures.

12.5 Third-Party Service Providers

Art is Lit works with trusted third-party service providers who support the operation of the Platform.

Where these providers process Personal Information on our behalf, we seek to ensure that they:

implement appropriate security measures;
comply with applicable data protection laws;
process Personal Information only in accordance with our instructions where applicable; and
are subject to appropriate contractual obligations relating to confidentiality and security.

12.6 Security Reviews

To help maintain a high level of security, Art is Lit regularly reviews:

security policies;
technical safeguards;
access controls;
service providers;
operational procedures; and
emerging security risks.

We may update our security practices from time to time to reflect technological developments, changes in the law, and evolving cybersecurity threats.

12.7 Your Responsibility

While we take reasonable steps to protect your Personal Information, you also have an important role in maintaining the security of your Account and devices.

You should ensure that:

your devices are protected with appropriate security measures;
your software is kept up to date;
you use secure internet connections where possible;
you remain alert to phishing emails, scams, and other attempts to obtain your Personal Information; and
you report any suspected security concerns to us without delay.

Working together helps create a safer marketplace for everyone.

12.8 Our Commitment

Protecting your Personal Information is one of Art is Lit’s highest priorities.

We are committed to maintaining appropriate technical, organisational, and administrative safeguards, continually improving our security practices, and responding promptly to emerging risks.

Although no online service can guarantee absolute security, we are dedicated to protecting your information responsibly and maintaining the trust that Buyers, Sellers, and Users place in the Art is Lit marketplace.

13. Children’s Privacy

Art is Lit is intended for use by individuals who are legally able to enter into binding agreements and manage an online account in accordance with applicable law.

Our Platform is not intended for children under the age of 16, and we do not knowingly collect Personal Information from children under that age without appropriate parental consent or another lawful basis where permitted by applicable law.

If you are under the age of 16, you should not create an Account, buy or sell Artwork, or provide Personal Information through the Platform without the involvement of a parent or legal guardian where required by law.

13.1 If We Become Aware of Information Collected from a Child

If Art is Lit becomes aware that we have collected Personal Information from a child under the age of 16 without an appropriate lawful basis, we will take reasonable steps to:

investigate the circumstances;
delete or anonymise the Personal Information where appropriate;
restrict further processing where necessary; and
comply with our legal obligations under applicable data protection legislation.

13.2 Parents and Guardians

If you are a parent or legal guardian and believe that your child has provided Personal Information to Art is Lit without your knowledge or consent where required, please contact us as soon as possible.

We will investigate your concerns promptly and take appropriate action in accordance with applicable law.

13.3 Educational or Community Activities

From time to time, Art is Lit may support educational initiatives, competitions, workshops, or community events involving young artists.

Where such activities involve the collection or processing of Personal Information from children, we will ensure that appropriate safeguards are in place and, where required by law, obtain valid parental or guardian consent before processing that information.

Additional privacy information may be provided for those specific activities.

13.4 Our Commitment

Art is Lit is committed to protecting the privacy of children and young people.

We take our responsibilities seriously and will continue to design our Platform and services with privacy, safety, and appropriate safeguards in mind, ensuring that any Personal Information relating to children is handled responsibly and in accordance with applicable data protection legislation.

14. Changes to this Privacy Policy

Art is Lit may update this Privacy Policy from time to time to reflect changes in:

applicable laws or regulations;
our Platform or services;
technology;
security practices;
business operations;
industry best practice; or
the way we process Personal Information.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your Personal Information.

14.1 When Changes Take Effect

Unless otherwise stated, any changes to this Privacy Policy will become effective on the “Last Updated” date displayed at the beginning of this document.

The updated version will replace all previous versions of the Privacy Policy from that date.

14.2 Material Changes

Where we make material changes that significantly affect how we process your Personal Information or your privacy rights, we will take reasonable steps to inform you before those changes take effect where required by applicable law.

Depending on the nature of the changes, notification may be provided through:

a notice on the Platform;
your User Account;
email;
in-app notifications (where available);
our website; or
other appropriate communication channels.

Where required by law, we will obtain your consent before processing your Personal Information in a materially different way.

14.3 Minor Updates

From time to time, we may make minor updates that do not materially affect your privacy rights.

Examples include:

correcting typographical or formatting errors;
improving the clarity of this Privacy Policy;
updating contact details;
updating references to related policies; or
making administrative changes.

These changes may take effect immediately upon publication.

14.4 Previous Versions

For transparency, Art is Lit may retain previous versions of this Privacy Policy for internal record-keeping, legal compliance, audit purposes, or to respond to questions about how Personal Information was processed at a particular time.

Previous versions will not remain in force once they have been replaced.

14.5 Questions About Changes

If you have any questions about changes to this Privacy Policy or how they may affect you, please contact us using the details provided in Section 15 – Contact Us.

We will be happy to explain any significant changes and how they relate to the processing of your Personal Information.

14.6 Our Commitment

As Art is Lit grows, our commitment to protecting your privacy will remain at the heart of everything we do.

When changes are necessary, we will strive to communicate them clearly, transparently, and in a way that helps you understand how your Personal Information is affected.

Our goal is not simply to comply with data protection laws, but to build and maintain the trust that Buyers, Sellers, and our wider creative community place in Art is Lit.

15. Contact Us

Art is Lit is committed to being open, transparent, and approachable when it comes to your privacy.

If you have any questions about this Privacy Policy, how we process your Personal Information, or if you wish to exercise any of your privacy rights, we encourage you to get in touch. Our team will do its best to respond promptly, fairly, and in accordance with applicable data protection laws.

15.1 Customer Support

For general enquiries about your Account, orders, the Platform, or this Privacy Policy, please contact:

Customer Support

Email: support@artislit.com

15.2 Privacy, Legal and Administrative Enquiries

For privacy requests, data protection enquiries, legal notices, or administrative matters relating to the processing of Personal Information, please contact:

Legal & Administrative Team

Email: ail.admin@artislit.com

15.3 Website

Website: www.artislit.com

15.4 Company Information

Business Name: Art is Lit Ltd

Trading Name: Art is Lit

Registered in: England and Wales

Company Registration Number: [Insert Company Registration Number]

Registered Office: [Insert Registered Office Address]

15.5 Exercising Your Privacy Rights

If you wish to exercise any of the privacy rights described in this Privacy Policy, including your rights of access, rectification, erasure, restriction, objection, data portability, or withdrawal of consent, please contact us using the details above.

To help protect your privacy and the security of your Personal Information, we may ask you to verify your identity before responding to your request.

We will respond within the timeframes required by applicable data protection legislation and will keep you informed if additional time is required.

15.6 Complaints

If you have any concerns about how we have handled your Personal Information, we encourage you to contact us first.

We value the opportunity to understand your concerns and will make every reasonable effort to resolve them fairly, respectfully, and as quickly as possible.

If you remain dissatisfied, you have the right to lodge a complaint with the relevant data protection authority, including the Information Commissioner’s Office (ICO) in the United Kingdom or your local supervisory authority where applicable.

Our Privacy Promise

At Art is Lit, we believe privacy is built on trust.

Every artist, buyer, seller, and visitor who joins our community places their confidence in us, and we do not take that responsibility lightly.

We are committed to collecting only the Personal Information we genuinely need, using it responsibly, protecting it with appropriate technical and organisational safeguards, and being transparent about how it is processed.

As our marketplace grows, we will continue to review and improve our privacy practices so they remain fair, secure, and aligned with evolving technology, applicable data protection laws, and the expectations of our community.

For us, privacy is more than a legal obligation.

It is part of the respect we show to every person who chooses to share their creativity, support independent artists, or become part of the Art is Lit community.

We believe that great marketplaces are built on more than technology—they are built on trust, honesty, kindness, and human connection.

Thank you for placing your trust in Art is Lit. We are honoured to be part of your creative journey.