Contents
Last updated
1 January 2025
Compliant with
UK GDPR &
EU GDPR
Legal
Privacy
Policy
Project Anonymous Artist (“we”, “us”, “the Platform”) is committed to protecting and respecting your privacy. This Policy explains how we collect, use, store, and protect personal data, and what rights you have in relation to it. We comply with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR.
- Section 1
What We
Collect
| Data | Who | Why |
|---|---|---|
| Name | Artists, Buyers | Identity verification and communications |
| Email address | Artists, Buyers, Subscribers | Order communications, reveal notifications, newsletter |
| Country | Artists (optional), Buyers | Shipping calculations, tax obligations |
| Artwork images & descriptions | Artists | Exhibition, collection, and sales listing (published anonymously) |
| Identity preference | Artists | Managing reveal preferences |
| Delivery address | Buyers | Artwork shipping only |
| Payment reference | Buyers | Transaction records (we do not store card details) |
| IP address & usage data | All visitors | Security, analytics, platform improvement |
We never ask for more data than we need. We do not collect sensitive personal data such as race, ethnicity, health information, political views, or religious beliefs.
- Section 2
How We
Use It
- To process artwork submissions and communicate selection decisions to artists.
- To manage identity preferences and facilitate the reveal process.
- To facilitate purchases between buyers and artists, including issuing payment links and coordinating shipping.
- To send email notifications where the artist or buyer has consented or where notifications are necessary to fulfil the service (e.g. order confirmations, shipping updates).
- To send our newsletter to subscribers who have opted in. Subscribers may unsubscribe at any time.
- To comply with applicable laws and regulations, including UK GDPR
- To operate, maintain, and improve the Platform.
We never use your data for advertising profiling, sell it to third parties, or share it with data brokers of any kind.
- Section 3
How We
Store It
Artist identity data
Artist name and email address are stored in an encrypted system that is physically and logically separated from the artwork database. These are never linked unless a verified reveal request is received from the artist. No team member has casual access to this data.
Buyer data
Buyer contact and delivery information is stored securely and used only for the purposes of fulfilling a specific purchase. It is not retained beyond what is required by financial record-keeping obligations (typically 7 years for transaction records).
Retention periods
| Data type | Retained for |
|---|---|
| Unselected submission data | Deleted within 30 days of rejection notification |
| Selected artist identity data | Duration of listing, or until deletion requested |
| Buyer purchase data | 7 years (legal financial record requirement) |
| Newsletter subscriber data | Until unsubscribed or deletion requested |
| Website usage / analytics | 24 months maximum |
- Section 4
Who We
Share With
We share personal data only where strictly necessary:
- Payment processors (Stripe, PayPal): For processing secure payments. These providers are GDPR-compliant and governed by their own privacy policies.
- Email service providers: For sending transactional and newsletter emails. We use reputable providers who process data under data processing agreements.
- Artists (re: buyer shipping details): A buyer's delivery address is shared with the artist only to the extent necessary to ship a purchased artwork, and only after payment is confirmed.
- Legal and regulatory authorities: Where we are required by law to do so.
We never share personal data with advertisers, marketing agencies, data brokers, or any third party for commercial purposes.
- Section 5
Your
Rights
Under UK GDPR, you have the following rights. To exercise any of them, email hello@projectanonymousartist.com. We will respond within 30 days.
Right to access
Request a copy of all personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Ask us to delete your personal data (“right to be forgotten”).
Right to restrict processing
Ask us to pause processing your data while a dispute is resolved.
Right to portability
Request your data in a structured, machine-readable format.
Right to object
Object to us processing your data for marketing purposes at any time.
If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
- Section 6
Cookies
The Platform uses a minimal set of cookies:
- Essential cookies: Required for the Platform to function (e.g. session management, security). These cannot be disabled.
- Analytics cookies: Used to understand how visitors use the Platform (e.g. page views, traffic sources). These are anonymised and aggregated. You may opt out at any time.
We do not use advertising cookies, tracking cookies, or any cookies that follow you across other websites.
- Section 7
Children
The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, please contact us immediately and we will delete it.
- Section 8
Policy
Changes
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email with a minimum of 14 days’ notice before the changes take effect. The “last updated” date at the top of this page will be revised accordingly.
- Contact
Data
Controller
Project Anonymous Artist is the data controller for all personal data processed through the Platform.
Data Protection Enquiries
Please use subject line: “Privacy / Data Enquiry” for fastest routing.
We respond to all data requests within 30 days as required by UK GDPR.