Privacy Policy
Last updated: 8 May 2026
This Privacy Policy explains how Artowo Gallery ("we", "us", "our") collects, uses, and protects your personal information when you use Artowo (the "Service").
By using the Service, you acknowledge that your information will be handled in accordance with this Privacy Policy.
Who We Are
Artowo Gallery
Contact: info@artowo.com
Information We Collect
Account and Profile Information
We may collect:
- Name
- Email address
- Account login information
- Shipping and billing addresses when provided
Artists may also provide public profile information such as:
- Artist biographies
- Portfolio images
- Artwork descriptions
- Profile photos
- Links to external websites or social media
This information may be publicly visible to users and visitors of the platform.
Purchases and Bidding Activity
We may collect information related to gallery activity including:
- Bids and purchase intents
- Orders and transaction history
- Commission requests and agreements
- Payment status and transaction metadata
Identity and Financial Verification
To protect the platform and comply with payment provider or legal requirements we may collect:
- Government-issued identification documents
- Selfie or facial verification images
- Bank statements or financial verification documents
- Verification results from identity providers
- Device, location, and transaction metadata
Identity Verification Data Retention
Identity verification documents such as government-issued identification images, selfie verification images, and financial verification documents may be temporarily collected for identity or payout verification.
Once the verification process has been successfully completed, these documents are automatically deleted from the platform systems and are not stored longer than necessary.
In some cases, limited verification metadata may be retained, such as:
- Verification status
- Confirmation that verification was completed
This information may be retained for security, fraud prevention, or compliance purposes.
Payout and Financial Information
Artists receiving payouts may provide:
- Bank account holder name
- Bank account number or IBAN
- BIC / SWIFT codes
- Bank name and billing address
- Documentation required for payout verification
Communications
We may collect communications including:
- Messages sent through contact forms or chat
- Emails or support requests
- Order-related communications
Technical Data
When using the Service we may automatically collect:
- Device type and operating system
- Browser type
- IP address
- Basic usage logs and security data
Security and System Logs
We maintain security and system logs to:
- Detect security incidents
- Investigate suspected fraud or abuse
- Maintain platform reliability
Logs may include:
- IP addresses
- Timestamps
- Device information
- Platform activity
Logs are retained only as long as necessary for security or operational purposes.
How We Use Your Information
We use personal information to:
- Provide and operate the platform
- Process bids, purchases, commissions, refunds, and payouts
- Verify identities and prevent fraud
- Process financial transactions and artist payouts
- Communicate about orders, shipping, and customer support
- Enforce platform Terms and policies
- Comply with legal and regulatory obligations
Gallery Role
The platform operates as an online gallery connecting artists and buyers.
In most transactions, the platform acts as an intermediary service provider and does not take ownership of artworks listed by artists.
Personal data may be shared between buyers and artists when necessary to complete transactions such as shipping and order fulfillment.
Legal Bases for Processing (UK / EEA)
Where applicable, personal data is processed under the following legal bases:
- Contractual necessity - providing the Service and processing gallery transactions
- Legitimate interests - fraud prevention, security, and service improvement
- Consent - marketing communications
- Legal obligations - tax reporting, payment compliance, and regulatory requirements
Payments
Payments are processed by third-party payment providers such as Stripe or other processors.
We do not store full payment card numbers or sensitive payment credentials.
Shipping and Fulfillment
Shipping information may be shared with shipping carriers or logistics providers solely to deliver purchased artworks.
Fraud Prevention and Automated Checks
To protect the platform and its users we may use automated systems to detect fraud or suspicious activity.
These systems may analyse:
- Transaction patterns
- Account activity
- Device information
- IP addresses
Transactions flagged as suspicious may be delayed, cancelled, or manually reviewed.
Marketing Communications
If you subscribe to marketing communications we may send:
- Newsletters
- Product announcements
- Platform updates
You may unsubscribe at any time.
Cookies
We use cookies and similar technologies to provide core functionality.
Examples include:
- Account login and authentication
- Security and fraud prevention
- Platform functionality
Analytics
We may use analytics tools to understand how the Service is used and improve platform performance.
Analytics cookies are used only with user consent where required by law.
Third-party Cookies and Google Services
The Service may use Google services such as:
- Google reCAPTCHA
- Google Sign-In
- Firebase Authentication
These services may set cookies controlled by Google.
Data Sharing
We may share personal data with trusted service providers including:
- Payment processors such as Stripe
- Hosting and infrastructure providers such as Firebase / Google Cloud
- Email delivery services
- Shipping carriers
- Identity verification providers
We do not sell personal data.
Sharing Information Between Buyers and Artists
When a transaction occurs, certain personal information may be shared between the buyer and the artist to complete the order.
This may include:
- Name
- Shipping address
- Order details
- Delivery information
This information is shared solely for fulfilling the order.
Users receiving this information must not use it for marketing or unrelated purposes.
Legal and Regulatory Disclosures
We may disclose personal information where required to comply with laws, regulations, or legal processes.
This may include requests from:
- Law enforcement authorities
- Courts or regulatory bodies
- Financial institutions or payment providers
- Fraud prevention organisations
Public Profiles and Portfolio Visibility
Artist profiles, portfolio pages, and artwork listings may be publicly visible to visitors of the platform.
Search Engine Indexing
Public artist profiles and artwork listings may be indexed by search engines such as Google and may appear in search results outside the platform.
User-submitted Content and Personal Data
Users must ensure that uploaded content does not contain personal data of other individuals without consent.
If such content is reported we may remove or restrict access to it.
Data Retention
Personal data is retained only as long as necessary to:
- Operate the Service
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of personal data
- Object to certain processing
- Withdraw consent
Account Deletion
Users may request deletion of their account and personal data by contacting us.
Some information may be retained where required for:
- Legal obligations
- Fraud prevention
- Dispute resolution
- Enforcement of agreements
Security
We implement technical and organisational safeguards to protect personal data, including:
- Restricted access controls
- Encryption where appropriate
Data Storage
Personal data may be stored on secure cloud infrastructure operated by trusted providers such as Google Cloud / Firebase.
Children's Privacy
The Service is not intended for individuals under 18.
We do not knowingly collect personal data from children.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Continued use of the Service indicates acceptance of the updated policy.
Right to Lodge a Complaint
If you believe your personal data has been processed in violation of applicable data protection laws, you may lodge a complaint with the relevant supervisory authority.
In the United Kingdom this authority is the Information Commissioner's Office (ICO).
Website: https://ico.org.uk
Contact
Artowo Gallery
Email: info@artowo.com