For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), ARTREWARDS, ONLINE ART GALLERY is the data controller responsible for your personal information.
If you have questions about how we handle your data, please contact us at info@artrewards.net.
We collect two categories of information: information you provide to us directly, and information collected automatically when you use our website.
We collect information in the following ways:
We use the information we collect for the following purposes:
Processing orders, coordinating shipping, issuing Certificates of Authenticity, and providing post-sale support.
Maintaining your account so you can save artworks, track orders, and access platform features.
Sending order confirmations, shipping updates, support responses, and notifications about changes to our policies or services.
Sending newsletters, editorial content, and information about new artworks or events, where you have given your consent or where we have a legitimate interest in doing so. You may opt out at any time, see Section 7.
Analysing how visitors use the site to improve navigation, content, and the overall purchasing experience.
Identifying and preventing fraudulent transactions, unauthorised account access, and other harmful activity on the platform.
Meeting our obligations under applicable law, including financial record-keeping, tax reporting, and responses to lawful requests from public authorities.
Where you engage our curatorial team, using your preferences and collection history to provide relevant and personalised guidance.
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:
Where we rely on legitimate interests, we have assessed that those interests are proportionate and do not override your fundamental rights and freedoms.
Payments on ArtRewards are processed through Stripe. When you complete a purchase, your payment details are handled directly and securely by Stripe. ArtRewards does not store your full card number, CVV, or equivalent payment credentials on our servers.
Stripe may collect and process data for the purposes of:
For information on how Stripe handles your payment data, please refer to Stripe's Privacy Policy at https://privacy.stripe.com
We may also use additional fraud-prevention tools that analyse transaction data to identify and block suspicious activity. This processing is based on our legitimate interest in protecting buyers, sellers, and the platform's integrity.
We will always send you emails related to your account activity, purchases, and support requests. These communications are necessary for us to provide our services and cannot be opted out of while your account is active.
7.2 Marketing Communications
If you have subscribed to our newsletter or consented to receive marketing from us, we may send you editorial content, new artwork announcements, artist features, event invitations, and other updates we think you will find relevant.
You may unsubscribe from marketing emails at any time by:
We use Brevo to manage our mailing lists. Subscriber data is processed by Brevo in accordance with their privacy policy.
We use cookies and similar tracking technologies on the ArtRewards website to improve your experience, understand how the site is used, and support our marketing activities.
We use Google Analytics to collect anonymised data about how visitors interact with our site. This may include pages visited, session duration, referral sources, and general device information. Analytics data does not personally identify you.
You may opt out of Google Analytics tracking at https://tools.google.com/dlpage/gaoptout
You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for when cookies are placed. Please note that disabling certain cookies may affect the functionality of the ArtRewards website.
Where required by law, we will ask for your consent before placing non-essential cookies. You may update your cookie preferences at any time through our cookie consent settings, which appear when you first visit the site.
ArtRewards works with a number of trusted third-party providers to operate the platform. These providers may process some of your personal data on our behalf, acting as data processors under our instruction.
We only share the minimum personal data necessary for each provider to perform their function. We require all third-party processors to implement appropriate security measures and to process data solely in accordance with our instructions.
We do not sell your personal data to third parties for their own marketing purposes.
ArtRewards is based in Norway. Some of the third-party providers we work with may process your data outside your country of residence, including outside the European Economic Area.
Where personal data is transferred outside the EEA or the United Kingdom, we ensure that appropriate safeguards are in place, including:
For more information about the safeguards we apply to international transfers, please contact us at info@artrewards.net.
We retain personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law.
When personal data is no longer required, we securely delete it or anonymise it so it can no longer be used to identify you.
Depending on where you are located, you may hold rights over your personal data. We are committed to honouring these rights promptly and without undue restriction.
12.1 Rights Under GDPR (EEA Residents)
UK residents hold the same rights as EEA residents listed above. These are governed by the UK GDPR and the Data Protection Act 2018. The supervisory authority for the UK is the Information Commissioner's Office (ICO) at www.ico.org.uk.
To make a request, please contact us at info@artrewards.net. We will respond within 30 days of receiving a verifiable request. We may ask you to verify your identity before processing your request.
If you are located in the EEA and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority. In Norway, that authority is Datatilsynet at www.datatilsynet.no. In other EEA member states, please contact your national supervisory authority.
If you are located in the UK, the relevant authority is the Information Commissioner's Office at www.ico.org.uk.
ArtRewards is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16.
If you believe that a child has provided us with personal information without appropriate parental or guardian consent, please contact us immediately at info@artrewards.net. We will investigate and delete any such data promptly upon confirmation.
We take the security of your personal data seriously and apply appropriate technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
No method of transmission over the internet is completely secure. While we do everything reasonably practicable to protect your personal data, we cannot guarantee absolute security. If you have reason to believe that your interaction with us has been compromised, please contact us immediately at info@artrewards.net.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where required, within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly as soon as reasonably practicable, with a clear description of what occurred and the steps we are taking to address it.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of ArtRewards following any changes constitutes your acknowledgement of the updated policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related enquiries within 10 business days.
This Privacy Policy applies to personal data collected through the ArtRewards website at www.artrewards.net. It does not apply to data collected through third-party websites or services that we may link to from our platform.