Legal
Privacy Policy
Last updated: 23 July 2026
This page is maintained by Studio Direct to explain what personal data we collect, why we collect it, and the rights you have under the UK GDPR and EU GDPR. It is not a certification or a substitute for independent legal advice.
1. Who we are
Studio Direct is a curated marketplace for original artwork by emerging artists. When we refer to "we", "us" or "our" on this page, we mean the operators of Studio Direct acting as the data controller for personal data collected through this site.
2. What we collect
- Account data — email address, and where you sign in with Google, the name and profile picture returned by the provider.
- Artist application data — full name, biography, portfolio and social links, and images of sample work you upload.
- Purchase data — buyer name, shipping address, email, and the order details required to fulfil your artwork.
- Payment data — payments are processed by Stripe. We do not store your card details; Stripe returns a session and payment reference we retain for reconciliation.
- Technical data — a small amount of session and cookie data required to keep you signed in and record your consent to cookies.
3. Why we process it
- Artist applications — to review, approve, and manage artists on the platform (legitimate interests and, once accepted, contract).
- Art purchases — to take payment, fulfil orders, and provide receipts (contract, legal obligation).
- Account security — to authenticate you and protect the service (legitimate interests).
- Legal compliance — to keep transaction records required by tax and consumer-protection law.
4. Who we share it with
We share only the data needed to run the service with a small set of processors: our hosting and database provider, Stripe (payments), and Google (only if you sign in with Google). Artist names, biographies and listed works are shown publicly on the site once approved.
5. How long we keep it
We keep account and application data for as long as your account is active. Order and payment records are retained for the period required by tax and consumer-protection law, even if you close your account, but personal identifiers on those records are anonymised on request where the law allows.
6. Your rights
You have the right to access, correct, export, restrict, and delete your personal data, and to object to certain processing. You can delete your account and associated personal data at any time from your dashboard. For any other request, contact us at the address below.
7. Cookies
We use a small number of essential cookies and browser-storage entries to keep you signed in and to remember your cookie choice. We do not use advertising or cross-site tracking cookies. You can withdraw consent by clearing your browser storage.
8. Contact
To exercise any of your rights or ask a question about this policy, contact the site operator through the channels published on our about page.