Skip to content

Privacy notice

Version 2026-11-08

Last updated 8 November 2026


1. Who is responsible


Prized Art Limited is the data controller for the personal data described here. We process data in accordance with UK GDPR and the Data Protection Act 2018. Contact us through the contact page for privacy requests.


2. Who this notice covers


It applies to collectors, artists, venues, guest buyers, visitors who scan QR labels or browse without signing in, and anyone who contacts us. Separate agreements apply to artists and venues where noted in those documents.


3. What we collect



  • Account data: name, email, password hash, role, profile, studio or venue details, payout onboarding status with our payment partner, and records of which legal documents you accepted (version, time, IP address, browser).

  • Orders and payments: items, prices, delivery address, messages about fulfilment. Card numbers are processed by our secure payment partners and are not stored by us.

  • Listings and content you upload, including images, descriptions, wall dimensions, and rental terms summaries.

  • Messages sent through the platform, commission requests, briefs, pitches, and applications for wall space.

  • QR scans and browsing: when a QR label is scanned or an artist, artwork or venue page is viewed, we record the time, page, placement or venue where relevant, source (for example QR or web), a one-way hash of the IP address, browser type, and a random visitor id in a first-party cookie. We use this to count discoveries, show popularity to artists and venues, and attribute venue earnings. The hash is not used to identify you by name. If you are signed in, we may link the event to your account.

  • Guest buyers: name, email and delivery details entered at QR or guest checkout.

  • Administrative data: actions taken by platform staff in admin tools, where logged for security and support.


4. Why we use it (legal basis)



  • To run your account, orders, rentals, placements and payouts: contract.

  • To prevent fraud, keep tax and accounting records, and meet legal duties: legal obligation and legitimate interests.

  • To measure scans, discoveries and platform performance and to improve the service: legitimate interests. You may object at any time.

  • Marketing email where offered: consent. You may withdraw consent at any time.


5. Who we share data with


Artists see aggregated scan and view counts for their work and placements, not the identity of anonymous visitors. Venues see aggregated scan counts for their walls. Buyer name and delivery details are shared with the artist (and venue where needed) only to fulfil an order. We use processors for hosting, email, secure payments, analytics within the platform, and file storage. They may only process data on our instructions and under appropriate contracts.


6. How long we keep data


Order and tax records: up to 7 years. Account data: while the account is open, then up to 12 months unless we must keep longer for law or disputes. Scan and discovery data: up to 24 months, then aggregated or deleted. Legal acceptance records: for the life of the relationship plus 6 years. Marketing preferences: until you withdraw consent.


7. Cookies


We use essential cookies to keep you signed in and to protect the site. We use a first-party cookie (pa_vid) that stores a random visitor id so we can count unique visits and discoveries. It does not track you across other websites. You can delete cookies in your browser settings; some features may not work without essential cookies.


8. Your rights


You may ask to access, correct, delete, restrict or port your data, and to object to processing based on legitimate interests. Contact us and we will respond within one month in most cases. You may complain to the Information Commissioner's Office (ico.org.uk).


9. International transfers


Some processors may store data outside the UK. Where that happens we use approved safeguards such as the UK international data transfer agreement or UK addendum to standard contractual clauses.


10. Children


Prized Art is for users aged 18 and over. We do not knowingly collect children's data.


11. Changes


We will post updates here with a new last updated date and version identifier, and we will tell you about important changes when you sign in.