Legal

Privacy Policy

Last updated: Week 1 draft

Draft for review. This is a plain-language starting point. Before the public launch, have it reviewed by someone qualified to confirm it meets Sri Lanka's Personal Data Protection Act and any other applicable law.

Art Gallery SL ("we", "us") respects your privacy. This policy explains what personal information we collect, why we collect it, and the choices you have. We aim to collect as little as possible and to keep it safe.

What we collect

When you create an account we collect your name, email address, and a password (stored only in a securely hashed form — we never see your actual password). Artists may also add a profile photo, a short bio, and details about their artwork. If you contact an artist through an inquiry, that message is stored so the artist can reply.

Why we collect it

We use this information only to run the platform: to let you sign in, to display artist profiles and artwork, to deliver inquiries between buyers and artists, and to operate community features such as follows, reviews, points, and badges.

How it is stored and protected

Your data is stored with Supabase, a managed database provider, and protected by access rules so that people can only see what they are permitted to see. We do not sell your personal information to anyone.

Your choices

You can view and update your profile information at any time from your account. You may request that we delete your account and associated personal data by contacting us at the address below.

Contact

Questions about your privacy? Email us at privacy@artgallerysl.example (replace with the real address before launch).