Privacy Policy
Last updated: October 2026
This policy explains how Artsignal uses personal data when you use our platform, visit our website, subscribe to our newsletter, contact us or apply to work with us.
1. Who we are
ArtVest AI Limited, trading as Artsignal, is a company registered in England and Wales under number 15535449, with its registered office at 10 Rose & Crown Yard, London SW1Y 6RE (Artsignal, we, us). We are registered with the Information Commissioner’s Office (ICO) as a data controller, under registration number ZB769218.
For any question about this policy or your personal data, contact us at info@artsignal.co or at the address above.
2. When your organisation is responsible
Artsignal is a service for businesses. The object records, images, documents and other material an organisation supplies to the platform (Customer Data) are processed on its behalf under our Terms of Service: the organisation is the controller, and we are its processor. Customer Data can include personal data about people connected with an object, such as its owners, consignors or buyers.
For Customer Data, the organisation’s own privacy notice applies, and requests should go to the organisation. If you contact us instead, we will pass your request on.
We never use Customer Data to train AI models, or for anyone other than the organisation that supplied it.
The rest of this policy covers personal data that we use for our own purposes, as controller.
3. Information we collect
- Account information: your name, business email address and organisation, provided by your organisation, or by Google if you sign in with Google. We do not store passwords.
- Usage information: how you use the platform, such as the pages you view, your searches, and the reports and documents you create or download.
- Technical information: your IP address, browser and device details, and security logs.
- Feedback: messages you send us through the platform.
- Business contact information: your name, job title, organisation and contact details, our correspondence, and contract and billing details. This comes from you, from your organisation or from public professional sources.
- Enquiries: what you send us through our contact form or by email.
- Newsletter: your email address and how you interact with our newsletters.
- Job applications: your CV, interview notes and references.
We need your name and email address to create your account. Please do not send us special-category data, such as information about health or ethnicity.
4. How we use it, and our legal basis
Providing the platform
Setting up accounts, signing you in, providing the service and sending service emails. Legal basis: our legitimate interest in providing the service your organisation has asked for, or our contract with you where you are personally our customer.
Support, security and improvement
Helping users, measuring usage under your organisation’s agreement, protecting the platform, and maintaining and improving it. Legal basis: legitimate interests.
Customer relationships and billing
Managing our relationship with your organisation, contracts, invoicing and accounting. Legal basis: contract, legitimate interests and legal obligation.
Enquiries and business updates
Replying to you, and occasionally telling contacts at client and prospective client organisations about our services. Legal basis: legitimate interests.
Newsletter
Sending the newsletter you signed up for. Legal basis: consent, which you can withdraw at any time using the unsubscribe link.
Recruitment
Assessing applications. Legal basis: legitimate interests, and taking steps before entering into a contract.
Legal obligations and claims
Meeting our legal obligations, and establishing, exercising or defending legal claims. Legal basis: legal obligation and legitimate interests.
We do not sell personal data, or make decisions about people based solely on automated processing. Our AI valuations assess objects, not people.
5. Who we share it with
We share personal data only with providers that process it for us, such as our hosting, database, email, security, AI, analytics, newsletter and business software providers, and with our professional advisers, accountants, banks and insurers. We may also disclose it where the law requires, to protect our rights, or to a buyer or successor of our business.
6. International transfers
Our platform and database are hosted in the UK. Some of our providers, including our email and AI providers, process personal data in the United States or on global infrastructure. These transfers are protected by UK adequacy regulations, or by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for a copy of the safeguards.
7. How long we keep it
- Account, usage and feedback information: while your account is open, and then as our Terms of Service set out.
- Security logs: normally up to a year.
- Business contacts and enquiries: while we are in touch or there is a realistic prospect of working together. For clients, for the agreement and then as long as we need it for legal, tax and accounting purposes.
- Newsletter: until you unsubscribe, after which we keep only a record of your opt-out.
- Job applications: up to a year after our decision.
8. Your rights
You can ask to access, correct or erase your personal data, to restrict its use, or to receive it in a portable format, and you can withdraw your consent at any time where we rely on it.
You can also object at any time to our use of your personal data for direct marketing, or where we rely on legitimate interests.
Email info@artsignal.co to exercise a right. We respond within the time the law allows, normally one month, and may ask you to confirm your identity. If your request is about Customer Data, we will pass it to the organisation responsible.
9. Complaints
If you are unhappy with how we have used your personal data, please tell us at info@artsignal.co. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
10. Cookies
Our website and platform use only the cookies they need to work, and our website statistics use no cookies. We would ask for your consent before using any others.
11. Security
We protect personal data with appropriate technical and organisational measures, including encryption and access controls.
12. Children
Our services are for businesses and are not intended for anyone under 18.
13. Changes to this policy
We update this policy when our use of personal data changes, and change the date at the top.