Privacy Policy

Controller & contact details

For the purposes of applicable law (including the Information Technology Act, 2000 of India, the EU General Data Protection Regulation where applicable, and equivalent privacy regulations), the data controller for information collected through this website is ArtieWorld, operated from its studio at:

This Privacy Policy was last updated: August 17, 2026.

Data by type & channel

We collect only the information that is reasonably necessary to run the gallery, respond to inquiries, ship artwork, and review artist submissions. Depending on how you interact with us, this may include:

• Contact & inquiry data: full name, email address, telephone number, postal/shipping address, and the contents of any message or inquiry you submit via the contact form or email.
• Artist registration data: legal name, working/studio name, email, telephone, city/country, website URL, Instagram handle, artist statement, and per-artwork metadata (title, medium, dimensions) together with any image files you upload via Register Artist.
• Client & transaction data: billing and shipping address, tax or identification numbers (where required for an invoice), payment references, and any notes associated with a purchase, consignment, or private viewing.
• Newsletter & marketing data (if offered): email address and consent to receive program emails, where you have expressly opted in.
• Server & analytics data: approximate geographic location derived from your IP address, browser user-agent, pages visited, date/time, and referral source. This data is collected passively by server logs and is not combined with personally-identifiable information for profiling purposes beyond basic site-health reporting.

Purposes & legal basis

We use personal information only for the purposes for which it was provided, or for closely related compatible purposes. Specifically:

• Responding to you: to reply to messages, exhibition inquiries, studio visit requests, and artwork questions — on the basis of your request (consent/contract as applicable).
• Artist portfolio review: to evaluate registration submissions for curatorial fit, reply with follow-up questions, and keep a record of previously-reviewed work so that we may revisit an artist's practice at a later date — on the basis of your explicit submission and consent when you press "Submit Registration".
• Fulfilling sales & logistics: to prepare invoices, arrange packing, shipping, courier, and insurance, and perform provenance or anti-fraud checks where necessary — on the basis of the contract or anticipated contract between the collector and ArtieWorld.
• Gallery administration, legal & tax: to keep financial and accounting records, comply with applicable tax, customs, and anti-money-laundering requirements, and to establish, exercise, or defend legal claims — on the basis of legal obligation and legitimate interest.
• Security & abuse prevention: to detect spam, honeypot abuse, and fraudulent submissions through CSRF tokens, math captchas, IP logging, and hidden fields on forms — on the basis of our legitimate interest in keeping the site secure.

What we place on your device

ArtieWorld uses a minimal set of cookies strictly necessary for the site and forms to work. No advertising, tracking, or third-party analytics cookies are intentionally set by the gallery at this time.

The cookies and session-based storage we use include:

• PHP session cookie (e.g., PHPSESSID): a short-lived, first-party cookie used only to maintain state across requests — for example, to carry a submitted form through validation, to protect you with CSRF tokens on Contact and Register Artist forms, and to display a thank-you page after a successful submission without exposing the form to double-posting. It expires when your browser is closed, or shortly thereafter.
• In-memory JavaScript state: a small amount of in-browser state may be used by the gallery's own script (main.js) to power UI controls (mobile menu, scroll-to-top, etc.); this is not used to track visits across sites.

You can instruct your browser to refuse cookies, delete existing ones, or alert you before a cookie is stored. If you disable cookies entirely, the Contact and Register Artist forms will still attempt to function, but certain anti-spam protections (CSRF, captcha refresh between requests) may degrade.

Who sees your data

We do not sell, rent, trade, or license personal information to mailing-list brokers, advertisers, or data resellers — ever. Your information may be shared only with the following very limited categories of recipients, and only to the extent necessary to fulfil the purpose for which the data was collected:

• Service providers under contract: couriers and shippers (FedEx, DHL, domestic art handlers), insurance brokers, payment processors or banks (to process invoiced amounts), hosting/infrastructure providers who run the servers that host this website, and professional advisers (accountants, auditors, lawyers). Each recipient is bound by confidentiality and data-protection obligations appropriate to their role.
• Artists, where relevant: when you make a purchase, inquiry, or commission request that directly concerns a represented artist's work, we may share the minimum necessary details (your name, city, and the nature of your interest) with the artist so that they can authorise a sale, prepare a commission, or approve shipping. We never share collectors' full contact details with artists without consent, except where required for a commission agreement or provenance certificate.
• Public authorities, where required by law: we may disclose information to courts, regulators, customs, tax authorities, or law enforcement if and to the extent we are legally compelled to do so, in good faith and on a strictly need-to-know basis.

Cross-border data handling

The ArtieWorld website and its data stores are hosted on servers located in India. If you are accessing this site from outside India — for example, from the European Union, United Kingdom, United States, or Singapore — please note that your information will be transmitted to, and processed within, India, a jurisdiction whose data protection framework may differ from the one in your home country.

When we process information originating in the EU/EEA, we rely on the adequacy of the recipient's safeguards as described above, or, where required, on the basis of your explicit consent after clear information, or on standard contractual clauses approved by the European Commission for any onward transfers. In all cases, we apply appropriate technical and organisational security measures regardless of location.

How long we keep information

Personal data is retained only for as long as is reasonably necessary for the purpose for which it was collected, and for any additional period required by law. Our retention periods are:

• Inquiries & contact messages: 24 months from the date of the last correspondence, after which they are securely deleted unless an active relationship is ongoing or the message is covered by a longer period (e.g., relating to a sale or submission).
• Artist registrations & uploaded portfolio images: a baseline of 36 months from the date of submission so that the curatorial team may revisit the work for future seasons. Artists may request earlier deletion at any time, which will be honoured within 30 days unless there is a legal or contractual obligation to keep the record longer.
• Client, sales & accounting records: typically 8–10 years from the end of the financial year in which the transaction completed, as required by tax, audit, and commercial statute in India, or longer if litigation is reasonably anticipated.
• Server logs & security data: between 30 and 90 days, used only for incident response and abuse prevention, then rotated and deleted.

Access, correction, deletion & objection

Subject to applicable privacy law, you may, at any time, request:

• Access: a copy of the personal information we hold about you, including the categories and primary sources of the data.
• Correction: the correction of any inaccurate, incomplete, or out-of-date personal information (for example, a change of address, email, or phone number).
• Erasure (the "right to be forgotten"): the deletion of personal information we hold, except where we are legally or contractually required to continue keeping it.
• Restriction: to restrict our processing of your data where the accuracy, lawfulness, or necessity of the processing is in dispute.
• Data portability: where technically feasible, to receive a commonly-readable export of information you have actively provided to us, for your own use or transfer to another organisation.
• Objection & withdrawal of consent: to object to processing based on our legitimate interests, or to withdraw any consent you previously gave (e.g., marketing opt-in) — which will not affect the lawfulness of any processing performed before the withdrawal.

To exercise any of these rights, please send a written request directly to the gallery director at ravi.chabra@gmail.com with the subject line beginning "Privacy Request:". We may request reasonable proof of identity before disclosing, amending, or deleting any information, and we aim to respond to all valid requests within 30 days.

Children & users under 18

ArtieWorld does not knowingly collect or solicit personal information from children or minors under the age of 18. The artist registration form, contact form, and any purchase or inquiry facilities are intended for adults 18 and over, or for minors using the site with the consent and involvement of a parent or legal guardian.

If you are a parent, guardian, or school administrator and you believe that ArtieWorld may have received personal information from a child under 18 without the appropriate consent, please notify us at ravi.chabra@gmail.com and we will take reasonable steps to investigate and, where confirmed, promptly delete that information.

Changes to this Policy

We may occasionally update this Privacy Policy to reflect changes in our practices, the website's functionality, or applicable legal requirements. Any change will be posted on this page with a revised "Last updated" date at the top of Section 01, and where the change is material and likely to affect individuals' rights, we will also take reasonable steps to notify you (for example, by email to active clients and registered artists, or by a prominent notice on the website homepage).

If you have a concern, complaint, or disagreement about how ArtieWorld has handled your personal information, please contact us first at the details above so that we can try to resolve it directly. If, after our response, you still feel your concern has not been adequately addressed, you retain the right to lodge a complaint with the relevant data protection authority in the jurisdiction where you are based.