Privacy Policy

Last updated: October 2025

Welcome to the Privacy Policy for DegreeArt.com (operated by Artellite Ltd, Somerset House, New Wing, Strand, London, WC2R 1LA - Company No. 7094562). Your privacy matters to us. This notice explains what we collect, why we collect it, how we use it, and the choices you have.

If you have questions, contact us at finance@artellite.co.uk or by post at the address above.

Who we are - the data controller

Artellite Ltd is the “controller” of your personal data when you use DegreeArt.com, buy from us online or in person, consign or submit works, or interact with us on our community channels.

The information we collect

We only collect what we need to provide our services, run our business, and meet our legal obligations.

• You provide it: name, contact details, delivery/billing addresses, payment method details (processed by PCI-compliant providers), order history, messages to us, submissions (images, bios, CVs), preferences, marketing choices.

• Collected automatically: device/browser type, IP address, cookie IDs, pages viewed, interactions (for security, performance, and analytics - see “Cookies”).

• From third parties: payment providers, delivery partners, identity/sanctions screening services (for high-value art transactions), anti-fraud services, and - where relevant - third-party marketplaces you purchase through.

Why we use your data - lawful bases

We use your data only where we have a lawful basis:

• Contract - to take and fulfil orders, manage accounts, commission artworks, provide customer support.

• Legitimate interests - to secure our site, prevent fraud, keep our services running, improve the customer experience, and (where permitted) send service-related updates. We balance these interests against your rights.

• Consent - for email/SMS marketing and non-essential cookies/analytics. You can withdraw consent any time in your preferences or by using the unsubscribe/STOP options. PECR rules apply to electronic marketing. ICO+1

• Legal obligations - tax and accounting, consumer protection, record-keeping, and art-market AML/KYC/sanctions screening where transactions meet regulatory thresholds. GOV.UK+2GOV.UK+2

Art-market compliance (AML/KYC)

If you buy or sell qualifying artworks (including through us as an intermediary), we may need to verify identities, beneficial ownership, source of funds, and check against sanctions lists in line with the UK Money Laundering Regulations and HMRC guidance for Art Market Participants. This may require secure copies of ID or company documents, and we’ll retain related records for the legally required periods. GOV.UK+2GOV.UK+2

Marketing, preferences and SMS

• Email/SMS: We’ll only send you marketing where the law allows (usually with your opt-in). You can unsubscribefrom emails via the link in any message and STOP for SMS at any time. Standard network rates may apply for SMS. PECR governs electronic marketing rules. ICO+1

• Service messages: You’ll still receive non-marketing messages about your orders, deliveries, appointments, or account.

Cookies and analytics

We use essential cookies (for security, basket, checkout) and, with your consent, analytics/advertising cookies to understand performance and improve our site. You can manage these via our Cookie Settings at any time. See our Cookie Policy for details of cookie types and lifespans.

Children and young people

Our services are not directed to children and purchases must be made by adults. For UK online services, the age at which a child can provide their own consent for certain data uses is 13; below that age we require parental/guardian consent where consent is the lawful basis. ICO+1

Sharing your data

We never sell your personal data. We share it only with:

• Service providers acting on our instructions (payment processors, couriers, IT/hosting, CRM, email/SMS tools, analytics, identity and sanctions-screening providers) under appropriate contracts.

• Marketplaces/partners where you transact through a third-party platform - their privacy policy applies to their own processing.

• Professional advisers and authorities when required by law or to protect rights and safety.

• Corporate transactions (e.g., merger/reorganisation) where your data may transfer under equivalent safeguards.

International transfers

Some providers are outside the UK. Where we transfer data internationally, we use approved safeguards - typically the UK IDTA or the UK Addendum to the EU SCCs - plus transfer risk assessments, and additional measures where appropriate. ICO+1

How long we keep your data

We keep data only as long as needed for the purposes above, including:

• Orders, tax, accounting: typically 6–7 years.

• AML/KYC records: as required by law/guidance.

• Marketing: until you unsubscribe or after a period of inactivity, then we minimise/anonymise.

• Submissions/artist records: for the duration of representation/consignment plus any legal retention.

Your rights

You have rights over your personal data, including:

• Access - a copy of your data and other information.

• Rectification - correct inaccuracies.

• Erasure - ask us to delete in certain cases.

• Restriction - limit how we use it.

• Portability - receive data in a portable format.

• Object - to certain uses, including direct marketing.

• Withdraw consent - where processing relies on consent.

To exercise your rights, email finance@artellite.co.uk. We aim to respond within one month. You can also complain to the Information Commissioner’s Office (ICO) if you’re unhappy. ICO helpline: 0303 123 1113; postal: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. ICO+3ICO+3ICO+3

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security reviews. No system is 100% secure, but we work to prevent, detect, and respond to incidents promptly.

Third-party links

Our site may link to other websites. Their privacy policies apply to their processing and we are not responsible for their content or practices.