Privacy Policy

artclub helps you discover art exhibitions and keep a record of the ones you save and see. This policy explains what we collect through our website and our iOS app, why, and the choices you have. Where something applies to only one of them, we say so.

artclub is not intended for anyone under 13.

Your account:

Your activity:

Diagnostics (website and app):

Website analytics:

Pages you visit, features you use, and cookies set by our analytics tools. The app has no advertising or analytics tracking. It collects diagnostics only.

Sign-in security:

When you request a sign-in code we run a bot protection check, which receives your IP address and browser or device information.

Publication icons:

Where we show a critic review, we load the publication's icon from a third party icon service. That service receives your IP address and the web address of the publication.

Location:

The map on our website can centre on your location if you press the locate button. Your browser asks permission first, the coordinates only move the map, and we never store or transmit them. The app does not request your location.

Under UK data protection law we rely on: performing our contract with you, for your account, your activity and sign-in codes; our legitimate interests, for security, fault diagnosis and aggregate website analytics; your consent, for the newsletter, optional notification emails and location access; and legal obligation where the law requires it.

artclub is social by design. Members who follow you can see your username, the exhibitions you have saved and seen, your ratings and your written reviews. Members you tag as companions can see that you tagged them. If someone follows you or tags you, we may email you and that email will include their username.

Your email address is never shown to other members.

We do not sell your personal information, and we do not share it for advertising.

We use a small number of service providers who process data on our instructions and may not use it for their own purposes. Each receives only what it needs:

We use each of these under their standard terms, which require them to keep your information secure and to use it only to provide their service to us. Some of them store or process data outside the UK, and where they do we rely on UK adequacy regulations or standard contractual clauses.

We keep your account and activity for as long as you have an account. Diagnostic and performance records are kept for a limited period by our monitoring provider and then deleted automatically. Records of emails we have sent are kept while your account exists. Website analytics records follow our analytics providers' retention settings. The deletion record described below is kept after an account is gone.

Withdrawing consent:

Turn off newsletter and notification emails in Settings or through the unsubscribe link in any email, and withdraw location access in your browser settings. Withdrawing consent does not affect processing carried out beforehand.

Your rights:

You can ask us to give you a copy of your data, correct it, delete it, transfer it, or restrict or object to how we use it. Email hello@artclub.club and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Account deletion:

Deletion from Profile Settings is immediate and permanent. Your account, exhibition history, ratings, reviews, notes, follows and email preferences are removed from our database.

We keep a deletion record to verify deletions and understand why people leave. It contains the deletion date, your internal account identifier, how long the account existed, counts of your saved, seen and missed exhibitions and follows, and your optional reason for leaving. It does not include your name, email address or username, and cannot be used to contact you. If you leave an optional message we keep it alongside that record, so please do not include personal details.

Service provider logs for authentication, error monitoring and emails already sent follow their own retention periods and are not removed immediately by account deletion.

Our website uses cookies and similar storage for two things. Sign-in cookies keep you logged in and are essential, so the site cannot work without them. Analytics cookies measure how the site is used and are not essential. You can block or clear either kind in your browser settings, though signing in will not work without the essential ones.

The app does not use cookies. It stores your sign-in session, a note that you have seen the welcome flow, and a cache of public exhibition, museum and artist information so the app works quickly and offline. Your saved and seen exhibitions are not stored on the device. Signing out or deleting the app removes this.

We encrypt data in transit, sign you in with one-time email codes so there is no password to steal, and enforce database access rules that stop one member reading another member's private data.

We may update this policy as artclub changes. The date at the top shows when it was last revised, and we will tell you in the app or by email before any change that materially affects how we use your information.

artclub is the data controller for the information described here. Email us at hello@artclub.club.