Privacy Policy | InvestArt

This Privacy Policy explains how InvestArt Ltd (“InvestArt”, “we”, “us”, “our”) collects, uses, shares and protects personal information when you visit investartco.com, submit an enquiry, speak with one of our specialists, or otherwise interact with us. We are the data controller of the personal information we process about you for the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Who we are

InvestArt Ltd is a company registered in England and Wales. We introduce prospective collectors to fine art available for private acquisition. We are not authorised or regulated by the Financial Conduct Authority in relation to the sale of artwork, and artworks offered through the website are not regulated financial products.

You can contact us at privacy@investartco.com.

2. Information we collect

Information you give us

Full name, email address and telephone number submitted through our enquiry forms or the “Speak to a Specialist” pop-up.
The investment amount range and timeframe you select in our multi-step enquiry form.
Any additional information you share with our specialists by email, phone or messaging.

Information we collect automatically

Device and browser information, IP address, approximate location derived from IP, referring URL, pages viewed, and interactions with the site.
Information collected via cookies and similar technologies — see our Cookie Policy.

3. How we use your information

To respond to your enquiry and arrange a conversation with an art specialist.
To send you information about artworks, market insights and services we think may be of interest, where you have consented or where we have a legitimate interest to do so.
To operate, secure and improve the website and our services.
To measure the performance of our marketing, including through Meta Pixel and Google tags (see the Cookie Policy).
To comply with applicable legal and regulatory obligations and to detect and prevent fraud.

4. Legal bases for processing

Consent — where required, for example for non-essential cookies and certain marketing communications.
Legitimate interests — to respond to enquiries, run and secure our website, and promote our services in a proportionate way.
Contract — to take steps at your request prior to entering into a transaction.
Legal obligation — to comply with laws that apply to us.

5. Who we share your information with

We share personal information with trusted service providers who act as our processors, including our website hosting and database provider, email and CRM tools, and analytics and advertising partners (such as Google and Meta). We may also disclose information where required by law, to protect our rights, or in connection with a corporate transaction. We do not sell your personal information.

6. International transfers

Some of our providers are located outside the UK. Where personal information is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

7. How long we keep your information

We keep enquiry and contact information for as long as needed to respond to you and to maintain a record of our communications, and thereafter for a reasonable period to comply with our legal obligations and to defend potential claims. Marketing preferences are retained until you withdraw consent or object.

8. Your rights

Subject to the UK GDPR, you have the right to access, rectify, erase or restrict the processing of your personal information, to object to processing based on legitimate interests, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, email privacy@investartco.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

9. Security

We use appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access, including encryption in transit and access controls. No transmission over the internet can be guaranteed to be fully secure.

10. Children

The website is not directed to children under 18 and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision.

12. Contact

InvestArt Ltd — privacy@investartco.com.